Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/obljm5gfRN-n2SKdDY2NA9WVkYE.roa
File: obljm5gfRN-n2SKdDY2NA9WVkYE.roa (raw, json)
Hash identifier: iEb0cLJOJn58raI44T/QYZh9dLBRwT4473VAczsApI4=
Subject key identifier: A1:B9:63:9B:98:1F:44:DF:A7:D9:22:9D:0D:8D:8D:03:D5:95:91:81
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E4EFD94CB4A3E8699F7B7EF78F4A
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/obljm5gfRN-n2SKdDY2NA9WVkYE.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49824
IP address blocks: 45.12.24.0/24 maxlen: 24
45.12.25.0/24 maxlen: 24
45.12.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e4:ef:d9:4c:b4:a3:e8:69:9f:7b:7e:f7:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1b9639b981f44dfa7d9229d0d8d8d03d5959181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:8c:71:36:83:7d:c7:35:43:77:a4:10:35:
41:21:c7:38:5b:f2:bd:a3:d1:0f:9f:c8:91:c4:15:
45:3f:33:e5:ca:10:5f:db:a7:fd:12:93:7f:ff:bb:
0e:96:6e:0e:01:df:1f:7b:bd:5d:68:82:de:98:27:
90:96:34:61:61:a7:23:f9:1c:15:86:8f:c1:12:f7:
71:30:64:52:62:16:09:c8:c2:d6:3b:9b:49:03:f9:
da:9c:81:eb:9f:c7:4b:14:4f:53:fe:7d:d5:e1:16:
17:d4:b9:57:9d:e8:c1:1f:3c:b3:06:a7:48:f8:15:
d1:f4:1b:c3:07:89:87:a5:79:21:36:43:20:54:37:
db:f1:80:7a:a6:1e:6a:09:e1:36:e6:fc:c2:dc:38:
1b:fa:86:89:6a:85:40:ec:b1:ee:0d:cc:c2:a8:4f:
ae:33:d1:16:e6:08:2a:82:60:b1:6b:43:15:36:a9:
e2:f6:46:b1:45:a7:45:2b:d3:86:4f:81:f8:c0:f6:
ee:93:2e:5b:4d:b5:64:8b:c3:7e:a3:3b:bc:25:0e:
2e:79:d6:7e:c4:61:22:c5:18:13:49:40:e5:60:6a:
b8:39:a5:21:2d:74:19:4b:20:e0:22:8a:ac:37:69:
bc:b9:70:a4:ba:ba:5e:87:67:3f:82:8f:e4:a8:a6:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:63:9B:98:1F:44:DF:A7:D9:22:9D:0D:8D:8D:03:D5:95:91:81
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/obljm5gfRN-n2SKdDY2NA9WVkYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.24.0-45.12.26.255
Signature Algorithm: sha256WithRSAEncryption
79:26:e2:ed:5a:fa:7e:4a:c5:e3:8d:18:b2:bf:ea:75:43:6d:
4e:3e:7c:98:b1:eb:fa:26:2a:ad:99:44:b4:60:0a:ff:c7:2d:
9f:7a:67:12:0e:a5:c7:78:5f:8f:64:52:f4:36:d8:cd:42:86:
23:78:35:58:03:6d:22:ce:e8:1d:e1:50:58:8b:a9:57:6f:a1:
9d:f5:4c:40:d6:61:28:1f:b2:25:49:e2:1b:8b:c2:3e:63:a4:
4c:90:5a:09:5a:23:d2:c8:d1:d7:56:52:19:13:cd:87:9f:84:
37:51:7c:41:a0:d1:fb:7e:0e:26:cd:32:a7:ca:0c:58:46:7f:
2b:a6:62:67:8d:5f:0d:b8:8a:7d:1e:37:11:1e:b3:4b:9a:0f:
27:7f:38:f5:9d:d7:b8:eb:c7:52:84:74:ca:bf:1b:8c:98:e8:
a5:ba:37:26:21:a8:1b:d7:e9:31:ff:e0:b6:03:1a:7e:b1:03:
05:9d:26:2c:3c:46:de:d3:11:85:ac:ff:06:c6:0f:87:6a:3d:
00:f2:59:3c:ef:83:8f:f7:40:65:9d:5e:d0:56:49:e7:1c:21:
e8:44:50:2d:5d:e9:18:6a:79:4a:da:f6:fd:ed:fd:96:1d:24:
22:ad:b0:db:5a:fe:bd:36:2c:fe:a1:e7:41:6e:69:1d:6f:02:
c3:70:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:11 2025 by rpki-client