Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DB3O1sZTHtfKbR-a2kyI4Blavco.roa
File: DB3O1sZTHtfKbR-a2kyI4Blavco.roa (raw, json)
Hash identifier: n9cBq+K3//tPZKHjPM4bsuDJUWWJhOqqdktTJyNOTEw=
Subject key identifier: 0C:1D:CE:D6:C6:53:1E:D7:CA:6D:1F:9A:DA:4C:88:E0:19:5A:BD:CA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019620587D1B1ABE76151052C7A1BE87D888
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DB3O1sZTHtfKbR-a2kyI4Blavco.roa
Signing time: Thu 10 Apr 2025 15:36:32 +0000
ROA not before: Thu 10 Apr 2025 15:36:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 45.151.140.0/24 maxlen: 24
77.111.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:58:7d:1b:1a:be:76:15:10:52:c7:a1:be:87:d8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 15:36:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1dced6c6531ed7ca6d1f9ada4c88e0195abdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:0a:5c:eb:56:85:3c:69:12:28:81:58:15:
0b:ca:4f:d8:96:1f:74:c8:0e:39:2b:58:3c:15:82:
9b:31:a3:3e:82:37:c9:77:88:b7:1c:8f:e8:16:d4:
08:8b:6d:d2:dd:9c:48:20:0b:58:05:cf:5b:c7:72:
2e:9e:22:f5:0d:ff:e9:c3:16:5b:34:de:bf:03:6f:
b8:cc:20:91:05:93:20:f4:e8:47:44:98:d8:eb:74:
24:49:d6:6b:d7:20:b1:13:c0:53:e6:4c:97:39:2e:
6f:65:0e:1a:fd:91:87:5e:21:b9:21:34:ad:2c:40:
ab:a9:78:a7:9a:96:ae:0a:e7:a8:55:ab:81:eb:d5:
c4:24:57:97:10:66:df:80:a4:83:d0:86:98:ea:c9:
11:58:75:69:56:4b:77:cc:dd:4f:7a:1f:e4:7e:bd:
5b:df:6a:f2:d0:55:db:ed:88:f0:9b:46:2d:79:ec:
6d:2c:48:b7:66:a1:31:10:f9:46:98:a9:5f:fe:f8:
4c:bb:f1:fc:72:a2:60:dd:cc:18:98:a2:7d:c3:cd:
42:03:da:37:d5:77:ec:65:e6:c2:aa:d5:c6:48:ae:
ac:50:a2:18:c1:46:93:50:25:0b:71:a9:d2:5e:e6:
2e:b9:b1:ad:de:d1:5a:65:8a:30:65:25:28:7a:d7:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1D:CE:D6:C6:53:1E:D7:CA:6D:1F:9A:DA:4C:88:E0:19:5A:BD:CA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DB3O1sZTHtfKbR-a2kyI4Blavco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
77.111.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9b:af:e3:ab:e9:c5:69:51:27:9f:b3:33:a1:05:eb:60:80:
1f:17:0b:3f:2c:45:1f:05:58:c1:58:7d:a7:21:e6:0d:25:20:
7a:16:55:52:4d:fa:02:c4:4e:d8:6f:00:4e:f2:58:bc:b4:9d:
2b:5a:4f:0a:ae:33:73:32:87:2a:1b:82:38:13:5c:14:36:0f:
d6:6a:6f:98:3a:a8:2d:2f:6b:b1:13:86:cf:a5:c1:c1:29:71:
26:c2:fa:d4:58:bb:49:4d:8b:f0:03:fc:22:b8:de:af:41:80:
5d:b8:41:6e:d0:63:38:33:97:fc:48:af:5d:98:9d:c1:32:2c:
07:15:09:d4:83:25:88:35:c5:fe:d4:32:e3:d2:16:8c:12:75:
38:0c:55:e6:a0:41:a3:c2:b7:7b:4d:55:57:c8:30:09:a2:fd:
da:e4:09:9d:cc:62:5c:51:1c:db:08:bb:50:43:ff:2c:5e:69:
a4:d2:5a:05:25:26:d9:5f:1b:81:16:8e:7f:ab:a9:cb:fe:90:
d0:7b:c0:c3:4b:9c:88:26:9d:d6:81:3f:8d:94:9f:3d:36:cf:
6d:26:94:42:5b:ed:9b:aa:c5:b4:e4:f0:05:ad:5c:a8:aa:cc:
ce:9f:7a:ab:38:4e:67:6a:b7:74:ca:d6:e1:bc:ca:3f:44:d5:
6d:ba:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:23 2025 by rpki-client