Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/AkOZiNxVhUaQoLKipRlB_hZtuhU.roa
File: AkOZiNxVhUaQoLKipRlB_hZtuhU.roa (raw, json)
Hash identifier: OT/u98f/Om9ZIYFZJdTTw+++YqbpQpzo4KPrsjLuAbM=
Subject key identifier: 02:43:99:88:DC:55:85:46:90:A0:B2:A2:A5:19:41:FE:16:6D:BA:15
Certificate issuer: /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial: 019425219F87E7B22EB004141202112A4A9A
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/AkOZiNxVhUaQoLKipRlB_hZtuhU.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209048
IP address blocks: 45.8.244.0/22 maxlen: 22
45.8.244.0/24 maxlen: 24
45.8.245.0/24 maxlen: 24
45.8.246.0/24 maxlen: 24
45.8.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9f:87:e7:b2:2e:b0:04:14:12:02:11:2a:4a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02439988dc55854690a0b2a2a51941fe166dba15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:63:68:08:aa:22:6d:f3:73:5a:29:6b:79:
51:8e:cd:44:3c:4a:27:1a:a1:8e:d3:1a:36:fc:72:
4f:b7:f9:7d:3a:fa:85:c8:30:7f:f1:d5:ee:ba:6c:
45:d9:b7:8c:f1:37:52:91:71:bb:04:b6:7f:c2:8d:
f3:67:72:c8:23:de:e6:9b:e4:ca:c2:61:c8:db:b9:
46:d1:0e:ca:bd:1c:41:ec:6c:47:b0:99:cd:cf:c4:
6c:2b:b7:81:8f:0e:f9:25:9f:37:77:88:fd:36:5d:
a3:13:46:13:97:e8:92:7c:d3:49:30:72:72:f5:7b:
97:aa:9b:fb:5e:ba:fd:1d:1d:bf:99:4a:61:0a:2c:
00:fa:15:9c:91:e4:b1:be:b6:bb:d8:e1:d4:5f:37:
13:10:24:fd:d1:fa:06:41:12:61:da:06:f7:a7:10:
d3:d8:31:95:32:ef:fc:c1:e3:78:01:47:c5:a3:4d:
ce:ee:41:a4:a5:38:50:64:28:e6:5e:33:f0:ed:99:
4b:01:aa:d7:de:05:a1:a2:b9:52:2b:70:7b:59:e3:
3a:d9:40:64:5f:e5:1d:b2:16:76:ee:ff:1d:69:ba:
54:a6:28:9c:1f:91:4f:94:a4:8e:6b:56:89:9b:29:
c2:97:8a:c8:47:1a:a3:3f:9b:09:b2:42:b8:76:11:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:99:88:DC:55:85:46:90:A0:B2:A2:A5:19:41:FE:16:6D:BA:15
X509v3 Authority Key Identifier:
keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/AkOZiNxVhUaQoLKipRlB_hZtuhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.244.0/22
Signature Algorithm: sha256WithRSAEncryption
86:6b:54:7c:70:59:8c:8a:2f:66:cb:45:63:8c:dd:d0:b5:b9:
94:0b:87:28:c0:14:82:1b:aa:d5:86:4c:01:41:09:68:68:6b:
fe:a4:c1:7c:1d:e4:34:b6:fb:96:df:19:9f:99:ae:31:4e:3e:
83:51:f0:68:1a:e0:d6:41:e2:ae:3d:3f:d4:27:d3:b6:56:78:
a1:3c:64:f0:7b:ab:99:d0:ca:e5:26:d1:b1:bd:23:6b:c0:59:
69:8a:cc:90:ad:27:a2:13:05:ae:56:29:16:68:85:23:f4:50:
57:d6:bd:0a:ce:3a:1f:f6:b7:08:ae:3e:41:1d:1c:f2:74:ef:
85:b0:37:aa:a5:72:3d:af:6c:70:0b:69:4e:59:aa:a5:92:03:
e5:29:e6:79:79:bf:a7:ac:a4:f0:3e:0b:4e:52:6c:6c:7a:8e:
c3:a3:eb:f9:31:e8:45:14:8a:04:eb:70:84:8a:97:68:a0:2b:
8f:03:ca:aa:c1:4d:ff:b9:b8:75:33:da:d6:56:05:d7:f2:c7:
27:2c:61:51:75:14:a3:80:44:93:42:3d:db:dd:ca:a4:b8:a6:
15:6e:3d:dc:a0:6b:9d:27:9d:c0:e3:d5:5e:0a:2d:b6:8b:2d:
b6:fb:34:80:97:bc:49:ca:10:98:07:ec:ce:39:2d:33:86:a3:
15:82:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:04:24 2025 by rpki-client