Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RgjfGOiIOGhb6lg8ZO0jej276JE.roa
File: RgjfGOiIOGhb6lg8ZO0jej276JE.roa (raw, json)
Hash identifier: 0wjqoo1DYJfFxcDdCs330fRKCDC9d/Cj22mlZ4GDf/E=
Subject key identifier: 46:08:DF:18:E8:88:38:68:5B:EA:58:3C:64:ED:23:7A:3D:BB:E8:91
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 01963DED6675FD918751D34445A6C3CB0B70
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RgjfGOiIOGhb6lg8ZO0jej276JE.roa
Signing time: Wed 16 Apr 2025 09:28:10 +0000
ROA not before: Wed 16 Apr 2025 09:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56382
IP address blocks: 45.152.124.0/24 maxlen: 24
45.152.125.0/24 maxlen: 24
45.152.126.0/24 maxlen: 24
45.152.127.0/24 maxlen: 24
194.5.96.0/24 maxlen: 24
2a0f:5700::/32 maxlen: 48
2a0f:5700:1220::/44 maxlen: 44
2a0f:5700:fe80::/48 maxlen: 48
2a0f:5701:1220::/44 maxlen: 44
2a0f:5701:fe01::/48 maxlen: 48
2a0f:5701:fe80::/48 maxlen: 48
2a0f:5702::/32 maxlen: 48
2a0f:5707:1220::/44 maxlen: 44
2a0f:5707:aa80::/44 maxlen: 48
2a0f:5707:ab80::/44 maxlen: 48
2a0f:5707:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:ed:66:75:fd:91:87:51:d3:44:45:a6:c3:cb:0b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Apr 16 09:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4608df18e88838685bea583c64ed237a3dbbe891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:05:73:b3:91:10:23:77:73:01:65:d2:d5:
8b:d3:fc:a4:e1:60:bf:a4:7e:f0:ef:ef:01:7e:6a:
41:72:b4:60:4c:09:e4:64:89:31:e4:fc:e5:b4:97:
bb:5e:5c:93:1c:81:13:09:57:be:03:5f:0b:dc:c5:
e2:81:56:d6:d9:b5:5b:5d:9b:ad:62:76:f3:72:62:
32:71:02:81:90:07:51:9d:18:18:72:41:fa:8c:88:
3f:e9:28:1a:7a:6a:cb:31:25:b6:6a:49:5e:96:35:
5f:1a:b4:8b:de:0d:ac:5b:80:ad:03:c2:96:23:a4:
02:ec:69:c3:c8:0b:25:c6:a5:c0:a4:80:c4:90:a1:
e9:b0:2f:b0:2c:b5:53:5a:7d:21:8b:88:47:f9:25:
fb:87:83:d6:04:78:63:8b:7b:6c:00:1a:7e:c1:4d:
52:87:ad:85:30:e6:a2:08:d0:23:f1:e8:97:29:ac:
d5:6c:b0:21:5c:85:13:35:ea:6c:6f:f8:63:a6:d4:
7e:e7:54:ca:ea:58:25:db:1e:1a:eb:48:90:92:dc:
b6:37:90:f8:10:dd:0a:10:fe:ab:42:9a:ec:5d:d7:
e7:72:ae:37:50:a2:62:37:1a:53:67:b0:47:59:24:
97:5e:bf:9f:3d:d1:3f:0e:72:50:27:50:bb:c5:e2:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:DF:18:E8:88:38:68:5B:EA:58:3C:64:ED:23:7A:3D:BB:E8:91
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RgjfGOiIOGhb6lg8ZO0jej276JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.124.0/22
194.5.96.0/24
IPv6:
2a0f:5700::/32
2a0f:5701:1220::/44
2a0f:5701:fe01::/48
2a0f:5701:fe80::/48
2a0f:5702::/32
2a0f:5707:1220::/44
2a0f:5707:aa80::/44
2a0f:5707:ab80::/44
2a0f:5707:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
4e:eb:2b:e8:75:7f:ea:08:be:a8:f5:5e:53:05:37:5a:a0:66:
3b:b1:f1:35:2d:10:6b:c5:22:43:c2:c5:a0:2b:9d:b5:af:ea:
91:39:c4:e9:c0:50:5f:6d:73:07:7d:cd:80:37:dc:42:22:47:
79:4f:b8:c0:e2:75:eb:d6:92:47:9b:9f:cd:6d:cd:9b:eb:3f:
e4:e9:8e:a6:af:73:2c:46:08:27:3a:73:9a:99:2b:e5:0f:cd:
bd:2f:5f:6c:b3:dd:11:a2:25:3b:23:52:cb:70:36:20:a9:68:
e3:d5:b8:b4:73:b2:51:1e:1d:db:28:31:f3:29:aa:1a:5b:92:
3a:c7:ae:00:46:50:ca:5f:4f:77:61:05:bb:11:10:fb:ae:90:
20:a3:6b:73:aa:04:bd:7e:92:c5:fc:58:b6:dd:28:75:d4:64:
5c:a1:81:4f:ea:c1:b0:39:41:ff:f1:f2:59:4d:b7:90:4a:56:
2f:b8:dd:16:b8:2b:a9:e7:dc:94:0f:9b:25:66:f4:c0:f8:8a:
d7:fe:47:4f:78:96:ef:4d:22:94:ba:04:8f:e8:a3:23:01:3e:
fc:36:35:80:cb:1f:7b:91:08:ee:84:66:a1:cf:3d:32:3e:fd:
a7:bb:a0:4d:7b:07:f7:9b:7d:1f:43:ff:e9:f0:e5:db:75:a8:
0d:30:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:18:29 2025 by rpki-client