Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M_nxf9ItMMhZ6eI0n5TRqEiSyyI.roa
File: M_nxf9ItMMhZ6eI0n5TRqEiSyyI.roa (raw, json)
Hash identifier: cfEdMcY04z+ZdkAwoFJ8v5B/bs8EWLQ7ShL0jbFnqL8=
Subject key identifier: 33:F9:F1:7F:D2:2D:30:C8:59:E9:E2:34:9F:94:D1:A8:48:92:CB:22
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246E66692E46FB15E8B933AEC27F2E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M_nxf9ItMMhZ6eI0n5TRqEiSyyI.roa
Signing time: Thu 02 Jan 2025 17:51:03 +0000
ROA not before: Thu 02 Jan 2025 17:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31469
IP address blocks: 45.89.245.0/24 maxlen: 24
45.141.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6e:66:69:2e:46:fb:15:e8:b9:33:ae:c2:7f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33f9f17fd22d30c859e9e2349f94d1a84892cb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:cd:ce:e2:aa:ad:18:c1:32:ff:3c:be:d7:
48:eb:6a:78:34:6c:03:43:47:d0:c6:c6:17:8d:39:
19:67:f5:f6:bc:f0:99:4f:e7:5b:97:0e:c2:e7:69:
af:65:d8:f7:e5:5f:e8:77:e8:2b:a9:26:9c:12:df:
2e:c2:24:a3:74:16:aa:5a:77:64:a8:34:2a:a1:9a:
52:92:14:02:c0:91:6a:97:af:8e:0c:01:cc:c3:3c:
c9:2c:4e:4b:66:b6:1d:cb:c5:57:d8:cc:21:0c:7c:
a1:bb:84:58:c4:17:a6:cd:65:ff:f5:ab:ee:95:82:
97:f8:91:61:3b:8f:b5:3c:bd:30:b9:da:7d:78:f1:
ce:b5:08:af:b2:21:59:d2:49:e4:48:e2:58:ab:b2:
8b:fa:fa:65:77:5f:9d:4d:6a:fd:60:4a:26:08:ef:
86:63:88:93:14:32:3d:f5:3d:fa:a4:94:da:29:c6:
36:a6:b5:59:65:83:54:2b:53:38:7f:40:51:64:dc:
86:99:fa:81:b5:f9:2f:bc:91:4d:55:63:8c:f9:4a:
05:59:5f:ef:a3:14:66:ed:87:18:12:92:94:3d:69:
c9:70:92:52:09:95:fd:46:e6:92:ab:2a:23:a4:6b:
4f:24:2f:c9:6e:07:7b:cc:57:2d:ed:78:15:6a:2d:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:F1:7F:D2:2D:30:C8:59:E9:E2:34:9F:94:D1:A8:48:92:CB:22
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M_nxf9ItMMhZ6eI0n5TRqEiSyyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.245.0/24
45.141.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bf:3c:3e:9d:6a:d4:a7:23:f0:14:1b:3b:99:2c:81:40:4f:
9d:48:36:89:1e:b6:5b:b2:ef:ea:69:ba:60:ed:e7:63:73:25:
13:b2:09:d0:97:78:39:33:f6:c6:14:44:ab:4f:32:03:81:d3:
3a:20:27:d7:bf:c3:54:27:19:90:cc:8e:07:08:36:11:d8:0d:
79:28:a8:eb:07:4d:77:95:76:a0:d8:50:73:c8:0b:dc:cf:71:
85:fd:c3:ab:66:cf:64:c5:29:79:b8:7f:1c:a4:15:bd:ba:3b:
a5:80:5c:9a:69:5b:10:c6:07:50:e0:55:a8:4b:7b:3b:a4:ce:
2a:e3:c6:7c:90:46:63:38:a8:5a:f3:63:71:57:e7:4d:8c:4d:
63:5a:d6:f9:4b:af:76:40:f4:8c:ad:a0:97:e4:b8:a3:db:b1:
17:6e:88:dd:03:f1:79:f0:cf:1a:0d:94:e5:0c:67:f8:c6:23:
22:13:49:a7:97:d0:a9:57:bf:81:50:ff:0c:33:fd:e4:a1:4d:
8f:c8:f1:bb:eb:8a:70:79:c3:eb:b2:7f:49:7c:10:cc:26:58:
c8:4d:04:38:97:09:3b:a7:fe:b0:04:59:75:e0:c5:11:40:be:
a8:2f:54:75:73:bc:48:9e:40:61:8c:0d:15:32:07:5b:a5:78:
2c:ac:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:29 2025 by rpki-client