Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Lr27eR3xsyUuznplyZ24p0d0PAA.roa
File: Lr27eR3xsyUuznplyZ24p0d0PAA.roa (raw, json)
Hash identifier: 1WjutkJ66/aKWzEi7/RpL8i7dpwv0XdcGvW7vLNht5w=
Subject key identifier: 2E:BD:BB:79:1D:F1:B3:25:2E:CE:7A:65:C9:9D:B8:A7:47:74:3C:00
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F47B593EEC8F07BA0F11CA380F56
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Lr27eR3xsyUuznplyZ24p0d0PAA.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.131.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f4:7b:59:3e:ec:8f:07:ba:0f:11:ca:38:0f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ebdbb791df1b3252ece7a65c99db8a747743c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:85:76:e4:ca:84:69:e0:a6:74:0e:f1:b6:
cc:5c:ea:b5:c8:1e:17:1f:c9:bc:c1:f5:5d:d7:4a:
92:44:4c:ef:ff:b0:60:51:6e:b2:fe:8b:71:c6:dd:
de:1c:32:d7:4b:ca:cd:05:13:9c:6b:ee:1f:fa:93:
c4:1e:03:f9:b3:2b:ac:1d:fa:44:77:05:a1:92:6f:
56:69:93:30:21:9a:99:af:c4:cd:69:a0:e8:5e:80:
7c:8f:3f:e8:dd:35:65:88:be:20:35:03:4f:0b:7a:
4b:68:f2:98:b8:c7:57:6e:39:69:96:4b:8f:d2:ee:
4e:f7:61:ed:b0:19:b3:52:df:64:c3:17:81:57:d9:
90:64:46:55:2a:0c:78:ad:8c:cf:32:1e:dd:53:6a:
d5:43:f1:b2:6a:75:47:b2:e7:20:33:a9:3d:80:da:
c5:13:0f:b2:3b:7f:11:6c:fb:2f:69:f7:7c:44:92:
ff:f3:54:1a:83:58:70:ca:9f:bf:82:c1:f3:29:e8:
de:1c:43:d5:90:76:fd:88:ad:41:0c:29:7b:db:8d:
9a:90:3f:33:ea:5b:05:55:d5:80:4a:47:b5:38:17:
c5:79:56:47:da:7a:ca:09:2d:ad:28:83:5b:5c:b8:
dd:11:c7:40:5e:30:4e:35:29:86:2c:3a:3a:b9:60:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:BB:79:1D:F1:B3:25:2E:CE:7A:65:C9:9D:B8:A7:47:74:3C:00
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Lr27eR3xsyUuznplyZ24p0d0PAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.162.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0e:e9:42:84:ca:6e:05:7d:36:33:f8:f8:02:aa:ef:57:10:
c2:e6:54:eb:f4:b7:34:be:e8:6e:50:99:3e:09:d6:89:b7:9e:
84:f8:df:5e:91:d7:e3:95:14:d7:81:19:8b:31:9f:1d:c4:8b:
be:40:5f:f0:fa:5c:5d:b9:6e:01:34:fb:dd:16:02:f5:64:3f:
6e:a1:0d:27:4c:44:95:92:7d:7b:ad:61:70:87:a7:95:fa:92:
fa:6e:c7:45:0b:f4:f3:60:66:a2:1b:ad:bc:96:b6:42:c3:fa:
72:4a:6f:1b:a3:45:00:14:88:76:19:d0:5e:6d:be:90:13:c2:
5d:72:ad:65:4a:70:49:54:45:44:e5:c1:f8:30:29:01:55:27:
54:4a:cb:3b:eb:02:46:80:1f:2d:73:09:bf:dc:e6:78:b0:29:
63:e5:a9:2f:a7:8b:23:22:ed:1d:23:94:18:53:fd:84:42:88:
21:6b:46:f6:e3:b3:af:c7:29:66:68:b7:6c:cd:c1:77:e0:19:
c4:fa:9b:06:b3:8e:ac:a1:bd:ab:e4:e9:96:30:3d:6f:fb:0a:
9c:64:45:c4:06:d7:f8:d2:6b:e4:93:f1:34:5a:a4:01:74:ba:
4f:e8:6c:80:c2:e7:9d:05:62:19:24:43:39:0f:b2:3d:b4:a0:
56:5f:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:05:11 2025 by rpki-client