Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/cLFAPtOqlcUfpbbbNNENVqdfu8I.roa
File: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (raw, json)
Hash identifier: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=
Subject key identifier: 70:B1:40:3E:D3:AA:95:C5:1F:A5:B6:DB:34:D1:0D:56:A7:5F:BB:C2
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01955ECBC4A47E6453C1506907A9BE829A0C
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/cLFAPtOqlcUfpbbbNNENVqdfu8I.roa
Signing time: Tue 04 Mar 2025 01:36:07 +0000
ROA not before: Tue 04 Mar 2025 01:36:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.28.0/23 maxlen: 23
45.13.31.0/24 maxlen: 24
45.134.150.0/24 maxlen: 24
77.83.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5e:cb:c4:a4:7e:64:53:c1:50:69:07:a9:be:82:9a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Mar 4 01:36:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70b1403ed3aa95c51fa5b6db34d10d56a75fbbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:33:d6:4a:74:73:32:f2:b0:0e:26:56:52:
db:71:b3:37:d0:f9:fe:c8:83:9b:46:90:01:45:6e:
fd:48:bb:c2:a7:d8:5f:df:5d:e2:f6:74:0f:a6:dc:
07:d6:aa:a7:d0:24:50:c0:19:11:d9:05:24:e8:e8:
ad:44:19:cc:19:66:19:de:f3:32:6f:8b:15:fe:af:
b9:a7:17:a5:a9:ef:1e:b3:a1:87:16:cd:30:10:70:
5e:a6:b6:d4:88:46:09:a5:81:08:2f:9a:14:7e:af:
14:c5:d8:5a:2b:2b:dc:f1:86:aa:05:29:08:7f:cb:
80:de:cc:37:ba:55:82:ee:7c:f9:27:69:1d:7e:c4:
71:39:e0:ba:d6:1b:98:a6:aa:e6:91:13:79:48:7b:
13:73:e4:d7:24:ac:b9:a2:78:9d:4e:b7:21:42:34:
0d:e7:4f:f5:4a:26:77:4e:69:fc:ef:a5:53:9c:a9:
24:3b:0a:50:e1:8b:00:c5:11:cf:4d:6c:e1:4c:29:
23:8d:8b:c0:04:82:f6:37:4b:93:a3:da:78:90:53:
15:fb:e8:40:91:73:3f:25:ee:5c:d5:56:05:e4:6d:
c2:6d:ad:9c:90:3f:a6:9e:29:8a:fe:8c:cf:ea:4c:
c5:92:46:66:1c:7b:90:2e:3a:c8:a6:d2:95:fe:66:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:40:3E:D3:AA:95:C5:1F:A5:B6:DB:34:D1:0D:56:A7:5F:BB:C2
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/cLFAPtOqlcUfpbbbNNENVqdfu8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.28.0/23
45.13.31.0/24
45.134.150.0/24
77.83.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b9:a7:8a:c1:9a:66:59:7c:1b:f8:10:c6:3d:b1:13:11:14:
83:33:f8:c1:3e:ec:9f:f5:14:f3:50:94:a8:da:6e:30:11:80:
c9:be:b3:e3:90:cc:ae:d2:a4:ee:ca:60:ba:69:f2:6b:f3:92:
70:bf:3c:e1:4e:41:55:7d:36:37:72:ca:3a:db:a2:92:aa:f9:
7d:5b:12:f7:8e:fc:16:4b:9b:ce:9f:71:3c:a1:30:5d:b1:e5:
c4:c5:48:77:d1:76:0e:d3:74:2c:59:ba:b3:89:30:60:7d:5c:
a4:3c:d4:23:d6:c0:9c:8e:04:29:70:8f:d6:b3:b1:b1:4e:5e:
d3:88:6b:f8:d0:4c:11:3b:ec:dd:7e:62:f0:ee:37:68:f5:a9:
2a:51:79:aa:bf:7c:b1:e1:fb:05:4d:0d:c8:34:6b:a0:40:90:
37:a9:f6:d9:b0:67:4e:a4:9c:e7:6f:dc:c0:c1:98:50:c9:69:
d5:f3:d2:98:82:0f:ea:32:3d:82:97:7f:18:83:f3:14:ff:02:
50:70:50:a0:f0:38:87:5d:f4:8c:26:1f:25:00:8a:17:40:35:
cc:bd:38:ac:fe:33:df:30:9d:42:32:d7:17:10:b2:1c:1a:de:
2a:73:12:1a:a9:cd:50:01:6e:11:b9:16:f2:7f:c0:ff:1a:4f:
66:ca:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:47:23 2025 by rpki-client