Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C0wRBYga_jG_hmUiifB5Me1OlKg.roa
File: C0wRBYga_jG_hmUiifB5Me1OlKg.roa (raw, json)
Hash identifier: M+eiMy5WDOJQi3nDXBcZuI9+8iSg7ZwjsrSkXclLDb8=
Subject key identifier: 0B:4C:11:05:88:1A:FE:31:BF:86:65:22:89:F0:79:31:ED:4E:94:A8
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01963C6FA012366EED9F5F5AA9E2C26C97CA
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C0wRBYga_jG_hmUiifB5Me1OlKg.roa
Signing time: Wed 16 Apr 2025 02:31:10 +0000
ROA not before: Wed 16 Apr 2025 02:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.149.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:6f:a0:12:36:6e:ed:9f:5f:5a:a9:e2:c2:6c:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Apr 16 02:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b4c1105881afe31bf86652289f07931ed4e94a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:d9:0b:89:14:7a:c8:31:0f:90:95:ac:b4:
57:59:b8:48:c7:0e:f1:c5:15:ad:82:1e:8f:af:f8:
41:59:6f:62:31:d2:7f:03:fd:40:38:d0:dc:6e:df:
db:ea:4c:da:31:64:57:86:67:48:00:01:9f:61:c4:
44:87:8d:88:ff:0d:12:f0:f4:02:dd:37:c6:9e:64:
b3:7a:2a:90:d5:53:33:62:c9:58:18:f8:e6:d4:da:
01:3d:83:a7:c9:17:7e:54:02:41:02:d0:a0:53:24:
f4:4f:4a:5e:74:4d:78:3d:6a:d8:69:31:43:55:7a:
86:06:04:ce:80:0a:8b:7e:cb:ac:c0:4d:db:19:48:
0a:c0:46:a0:af:cd:6a:14:d5:89:af:87:34:3a:a2:
5a:96:33:df:ef:c3:47:bd:54:ba:ec:12:be:c4:50:
ab:d2:b7:d5:d8:b0:3d:ad:3d:71:4b:95:1e:85:62:
f2:01:4d:63:36:b3:84:86:5a:4d:1f:ea:4a:94:73:
bc:f9:6b:f2:78:6f:c7:95:f6:6e:58:a8:d6:56:da:
69:c9:36:9f:91:6d:4f:ee:31:48:4f:93:a8:81:df:
a5:91:16:eb:46:fe:df:b6:18:67:71:91:fa:d6:2a:
4d:be:4d:41:b2:b5:6d:63:85:0b:c2:c4:12:db:0a:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:11:05:88:1A:FE:31:BF:86:65:22:89:F0:79:31:ED:4E:94:A8
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C0wRBYga_jG_hmUiifB5Me1OlKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.154.0/24
Signature Algorithm: sha256WithRSAEncryption
28:40:13:a5:78:c3:ec:f9:b5:a4:86:07:b7:c4:2e:f3:d6:57:
99:cd:9f:1c:12:e6:3f:59:f9:82:ff:62:62:5b:eb:09:de:28:
b8:ce:79:1e:c8:f5:ef:68:ee:f4:51:d8:1c:82:e2:a2:4a:8c:
9f:6a:d1:ee:eb:ac:b3:a2:1f:ef:60:ef:60:59:96:c3:c5:56:
e7:69:1d:46:29:ab:95:49:cd:0d:f6:79:3a:e9:f8:ba:e9:e4:
a5:ba:45:f4:a8:f9:8b:be:d1:5a:db:ec:be:29:95:ae:7f:8b:
4d:93:74:d5:81:56:f8:c6:a8:ca:5b:88:be:67:ff:e1:29:77:
f8:e9:13:e7:1d:8a:c2:fa:69:d3:d1:fb:29:65:5c:cc:fa:a9:
b2:d9:98:ec:20:b2:da:96:4e:1d:64:19:a8:3c:2d:8a:90:16:
3f:bb:60:39:7b:fe:2f:33:97:4d:de:86:70:c1:88:59:7b:3f:
20:bf:d5:ec:0f:66:f7:fe:c2:48:e6:2b:e9:06:d5:35:15:83:
d9:63:d3:f7:2d:2f:d4:03:1d:b5:27:56:0a:93:79:56:46:74:
7a:f4:cf:a8:59:37:8f:38:86:99:48:0c:f7:fe:87:eb:02:92:
23:e4:86:dc:a6:6d:da:1e:95:a5:03:0c:86:09:6c:0a:c8:e5:
98:c9:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:29:49 2025 by rpki-client