Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/AbAz97rI6RXbeaGg0ju1UGvv4xM.roa
File: AbAz97rI6RXbeaGg0ju1UGvv4xM.roa (raw, json)
Hash identifier: 6SJubAUNhK59Bg5EEa587Nx4giyrDXi2DFXXzhtFznQ=
Subject key identifier: 01:B0:33:F7:BA:C8:E9:15:DB:79:A1:A0:D2:3B:B5:50:6B:EF:E3:13
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 01942521A18FF90DE3D5E4FA3CC5021D094B
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/AbAz97rI6RXbeaGg0ju1UGvv4xM.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212091
IP address blocks: 45.147.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a1:8f:f9:0d:e3:d5:e4:fa:3c:c5:02:1d:09:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b033f7bac8e915db79a1a0d23bb5506befe313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:e8:23:6b:cf:f7:20:c2:84:5b:8e:0f:17:
c8:a3:e5:31:8e:36:5c:98:07:7f:60:c7:da:a7:54:
dd:13:99:cc:57:a8:f3:cb:2e:7b:73:d7:ee:cc:fa:
62:bc:ee:ed:57:1c:65:2c:ca:d7:60:e5:9c:0c:12:
0e:33:cd:28:24:28:6b:82:ae:3c:4a:44:32:02:7e:
4a:e6:d6:4e:1c:bc:ec:8f:fa:77:c3:cb:c8:e8:54:
98:e3:7d:26:4e:12:6c:67:65:a5:2d:a8:78:be:c7:
a7:b5:23:94:5c:88:ad:4b:45:e6:a3:92:41:2d:7b:
c9:1b:02:68:e1:3c:25:23:18:53:56:3f:be:ea:15:
2d:f7:ca:eb:62:14:49:e2:b2:a5:af:47:ab:83:5f:
55:13:3c:5b:6c:db:2f:86:ae:c1:1d:8f:99:ed:5d:
cf:de:6a:eb:d4:5a:46:59:b9:08:17:1c:d3:01:50:
0e:50:33:d9:3c:0e:d1:34:f3:bb:56:36:07:bf:07:
a1:12:de:b1:27:0e:65:0e:61:ee:09:32:95:a9:6a:
d7:26:6e:99:bf:35:0a:c5:99:68:7d:ef:3e:30:df:
96:c5:c7:2a:a2:f5:cf:e3:5a:ff:f2:9b:24:0e:c8:
8b:29:5e:b3:7a:72:94:bc:e0:91:86:3e:52:05:63:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:33:F7:BA:C8:E9:15:DB:79:A1:A0:D2:3B:B5:50:6B:EF:E3:13
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/AbAz97rI6RXbeaGg0ju1UGvv4xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.85.0/24
Signature Algorithm: sha256WithRSAEncryption
33:70:e2:0b:dc:52:a1:d3:9d:6e:4c:5f:2f:67:a0:2b:7d:fc:
88:cf:03:43:35:61:a8:e1:bb:5f:de:b8:33:d0:9b:80:ba:6a:
86:28:a1:f2:6e:73:58:de:62:55:24:e3:d1:d2:83:92:9e:6d:
a5:10:c9:40:17:26:69:22:69:c3:60:24:b8:0f:2a:f3:a6:ef:
f5:d5:f6:53:ba:f8:53:e2:d3:85:f3:d5:17:fb:7e:1a:8a:5f:
70:4c:7a:12:4f:63:6d:31:11:3c:cd:52:57:27:4d:9d:5b:ec:
bc:5f:15:f0:58:c9:01:02:a5:0e:71:e4:1d:ba:0f:d3:3e:2f:
98:70:6a:4f:dc:64:aa:ff:f7:88:c5:e4:65:8b:0f:84:60:2a:
7c:02:37:17:52:97:9b:95:c1:8c:60:2e:14:27:ea:d1:b0:c3:
89:41:71:c1:ea:62:cd:aa:cc:54:ec:22:10:24:64:4d:5d:33:
ed:dd:f7:4a:2c:7d:39:fb:05:23:04:0f:33:f6:ca:33:f3:5d:
7a:d9:16:15:c2:3b:99:b6:63:bf:46:b6:a8:01:64:a9:10:13:
1a:3a:88:e0:33:b6:cf:b2:a1:b9:64:bb:6e:a8:2c:dd:b3:07:
21:35:08:8a:08:3d:2d:22:3d:89:dd:24:f7:f3:07:b4:e3:ad:
91:e6:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:29 2025 by rpki-client