Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/A07rBLPAPzivhHQPWrLVL8fr4vA.roa
File: A07rBLPAPzivhHQPWrLVL8fr4vA.roa (raw, json)
Hash identifier: VlcbwvEyslqH6S+MJRBxrFZy7T+nixBrVr4PtsCdFgM=
Subject key identifier: 03:4E:EB:04:B3:C0:3F:38:AF:84:74:0F:5A:B2:D5:2F:C7:EB:E2:F0
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 01942369D4C32FEB9F224EC123AD105A29AB
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/A07rBLPAPzivhHQPWrLVL8fr4vA.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.144.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d4:c3:2f:eb:9f:22:4e:c1:23:ad:10:5a:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034eeb04b3c03f38af84740f5ab2d52fc7ebe2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:e0:e3:3b:ba:e6:be:20:50:0f:e0:5c:2a:
ff:cc:b9:3c:b0:ad:72:0e:1e:a8:4c:6c:50:f2:22:
01:ef:ff:e9:26:bf:1c:a2:bc:8f:01:68:05:2f:7d:
62:da:34:22:ac:8f:15:4b:5f:f3:56:19:41:97:23:
cf:29:35:d4:ae:93:f7:ce:6a:fd:97:8b:ad:39:e7:
17:e7:9d:09:ba:d2:a8:8a:91:e5:ea:c5:05:b9:12:
e0:57:c4:47:68:dc:bf:d1:b3:ae:15:34:b4:5e:f4:
ad:df:bf:34:dd:67:ef:28:52:f3:27:c5:3a:09:71:
2f:9b:d7:36:3d:ca:e9:3d:88:eb:9f:53:43:3f:53:
c7:41:f8:32:66:40:bb:77:1c:60:6d:13:69:f5:e7:
13:4a:73:7a:5c:f4:1c:b8:b8:48:9d:b1:2b:e1:9d:
75:10:6b:2b:78:27:aa:91:42:1a:cd:f6:26:e5:74:
aa:22:95:50:7b:a4:a3:82:d2:24:82:2d:25:3b:80:
8f:b7:cf:ba:56:f8:d3:72:9d:7a:dd:ac:93:2a:e2:
7b:08:d0:26:67:5c:fb:c6:34:03:03:4b:d7:56:57:
ee:db:93:8d:14:ee:9e:60:95:dd:11:37:93:a8:28:
76:0d:b2:b8:af:30:38:5d:75:1c:08:2c:8f:5f:17:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:EB:04:B3:C0:3F:38:AF:84:74:0F:5A:B2:D5:2F:C7:EB:E2:F0
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/A07rBLPAPzivhHQPWrLVL8fr4vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.197.0/24
Signature Algorithm: sha256WithRSAEncryption
98:57:40:52:1b:0b:e6:8b:c1:39:d7:65:6e:f1:62:ce:18:01:
10:1f:3a:fd:e2:b0:76:f0:44:c9:6d:39:8d:08:c0:55:ce:e2:
c8:c2:63:90:34:64:81:5a:4a:e2:39:63:c1:98:4b:fb:1c:f5:
8d:20:28:99:a8:f3:7f:c0:ca:16:7c:d6:9d:b8:44:29:6f:e6:
cf:a7:66:be:2e:76:cb:9b:b9:04:07:ad:dd:65:00:b9:ff:01:
a6:ca:39:57:d7:00:27:d6:d3:a0:fe:d4:96:46:45:fb:27:55:
2a:ef:14:e3:0c:34:4c:86:76:35:4d:ae:9b:9d:47:ee:d4:a2:
f7:a7:f5:06:86:e2:f3:cb:94:5a:36:4d:5d:4c:c6:36:ce:d6:
5f:b7:2f:8c:9a:28:d0:6c:07:5b:2f:b8:97:c7:49:8b:4c:d4:
b1:44:6b:e3:8c:0f:f1:a0:e8:43:bc:e6:04:51:e2:25:03:19:
8c:61:fd:13:c8:83:a2:3d:0c:c2:7d:20:08:4f:fa:93:af:00:
34:d4:78:d2:dc:1a:2e:6c:4b:7d:d7:6c:a6:16:ad:0e:25:ac:
79:0c:74:62:d8:5f:52:fa:bc:54:6a:02:6d:e4:d7:c2:b2:ad:
94:d9:75:f9:cb:90:ee:88:59:84:65:7a:b7:47:53:40:f4:f6:
d6:14:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:51 2025 by rpki-client