Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/oxulDl5efUsnH_zB2CKuyCzWnYc.roa
File: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (raw, json)
Hash identifier: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=
Subject key identifier: A3:1B:A5:0E:5E:5E:7D:4B:27:1F:FC:C1:D8:22:AE:C8:2C:D6:9D:87
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019647A7A1E955D7DB8AD6D8A4FD6BF81DC6
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/oxulDl5efUsnH_zB2CKuyCzWnYc.roa
Signing time: Fri 18 Apr 2025 06:48:10 +0000
ROA not before: Fri 18 Apr 2025 06:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
109.95.124.0/22 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:a7:a1:e9:55:d7:db:8a:d6:d8:a4:fd:6b:f8:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Apr 18 06:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a31ba50e5e5e7d4b271ffcc1d822aec82cd69d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:2c:ad:74:69:31:b6:92:bd:13:e0:13:6b:
ea:b7:a4:3c:77:19:14:2f:c6:de:58:29:4a:43:12:
a1:af:0a:e0:94:17:a6:1d:97:4a:49:57:59:9c:5a:
de:ed:46:27:02:66:c5:44:40:71:09:f5:06:1f:4b:
89:a8:05:00:32:4e:c1:02:77:f1:df:40:d2:2e:e7:
52:c2:d4:5c:74:13:c3:b4:d2:68:b1:8b:1b:c0:60:
db:a5:0c:e6:e3:fd:ce:9f:a5:fb:50:4b:18:13:27:
e5:06:d3:1b:9d:93:95:3f:6a:a4:e9:b2:e3:dd:85:
35:08:2b:88:9e:fb:f1:4a:c3:4e:83:d5:95:bf:a6:
10:de:7e:d5:ac:d6:80:52:6b:0c:21:2e:63:a3:b7:
40:78:46:71:36:b1:91:b3:b9:f1:16:8a:4a:cb:d7:
a3:d4:3c:17:b9:34:4d:fa:0c:c1:66:30:02:43:d5:
7a:58:ff:04:af:99:b8:46:f4:f1:fb:2d:44:d4:56:
72:c3:a4:3e:ad:5b:ca:1e:e1:07:2a:bd:03:81:1d:
86:0c:90:e9:66:de:ae:8a:18:fe:18:32:e1:8c:e8:
d2:7a:ce:79:62:c4:4f:51:71:b5:44:04:1e:28:69:
55:00:95:2b:9c:8c:ac:15:12:33:19:ec:50:7f:73:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:A5:0E:5E:5E:7D:4B:27:1F:FC:C1:D8:22:AE:C8:2C:D6:9D:87
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/oxulDl5efUsnH_zB2CKuyCzWnYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
af:2b:6e:aa:5a:a2:88:6d:35:f5:6b:35:57:60:f4:e9:1a:01:
18:bb:4f:e5:91:45:ae:e0:28:71:01:75:94:34:c9:f7:bb:c6:
3a:f6:0f:05:c2:8b:b3:af:ab:59:e2:14:04:07:43:4d:a1:06:
ff:aa:06:ec:e7:75:bd:2f:88:0c:70:24:8a:f2:3b:be:e1:dd:
ac:f8:82:ac:7f:cc:56:9f:aa:5a:6d:40:5d:60:52:98:15:b7:
e2:ea:73:d2:94:e1:74:14:4b:d8:a9:34:89:88:45:32:b5:e2:
0f:b5:1f:8c:6e:6a:6d:a2:23:99:52:1f:f7:f9:56:00:1c:a5:
c4:ee:d5:45:5b:f5:ae:7a:0b:b2:55:e6:a4:4a:16:a4:a4:95:
b8:2d:e6:7a:29:8a:25:b1:bf:85:e0:fd:ba:00:f7:e3:2a:e4:
2d:ca:f9:61:de:0f:ef:e5:f1:a7:35:6d:cc:6f:54:bb:12:ba:
35:69:18:de:8a:38:ca:32:ba:d3:38:9f:32:44:97:23:0b:22:
57:d5:f8:c3:a9:38:ca:af:18:b9:1a:23:3f:d2:b7:a2:29:ab:
35:89:23:82:22:b5:d4:07:91:9c:38:6f:78:91:92:f2:a9:7b:
81:44:bf:80:bd:3e:a8:23:7c:09:e4:86:70:c1:ae:82:af:0a:
ae:7e:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:21:05 2025 by rpki-client