Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/cIDWJL9g_fa8H__ObMHRE-i2WwY.roa
File: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (raw, json)
Hash identifier: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=
Subject key identifier: 70:80:D6:24:BF:60:FD:F6:BC:1F:FF:CE:6C:C1:D1:13:E8:B6:5B:06
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 019421446DF2F6719EDFDF996F28B4AEF856
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/cIDWJL9g_fa8H__ObMHRE-i2WwY.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 45.141.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6d:f2:f6:71:9e:df:df:99:6f:28:b4:ae:f8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7080d624bf60fdf6bc1fffce6cc1d113e8b65b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:0a:33:26:69:1b:5f:e0:b1:52:cd:c0:e4:
35:ba:37:7e:69:15:38:55:3d:4c:71:d9:d1:23:b2:
16:0b:a1:4d:09:6e:fd:b3:63:e6:c6:70:7a:07:72:
97:8b:87:c7:a3:e0:19:48:23:b1:f0:b6:b7:69:c5:
b2:b3:67:c8:de:fd:1c:50:b4:9a:82:e5:22:72:23:
6a:7e:58:d1:09:96:a8:47:36:45:ed:51:c1:c8:14:
f3:b8:bf:7f:da:9b:fa:68:3d:6d:0e:88:8f:fc:17:
94:8e:06:19:10:b9:6e:12:cc:a7:46:37:54:4d:ac:
78:8f:83:d3:6e:24:9e:b2:8b:6e:ae:50:16:86:33:
bf:37:b0:21:d6:27:3d:8c:03:5b:4b:ba:c2:9f:31:
83:87:59:ab:d7:a3:ce:8f:c6:93:fb:68:73:23:82:
33:91:88:99:ab:16:b8:ef:c6:9d:2e:26:05:de:88:
c9:4c:68:9b:25:59:45:21:f9:75:2a:57:a9:b7:eb:
41:f4:50:3f:b8:19:44:7f:32:11:0a:b5:2f:ae:8c:
29:51:58:d0:e0:1c:07:6c:d5:b0:3e:8c:f9:51:13:
7d:b3:d3:05:6b:80:ba:7e:69:31:ca:32:38:bc:a4:
6c:80:0e:24:3e:91:ce:24:5c:b1:41:d4:af:3c:7d:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:D6:24:BF:60:FD:F6:BC:1F:FF:CE:6C:C1:D1:13:E8:B6:5B:06
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/cIDWJL9g_fa8H__ObMHRE-i2WwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.214.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7d:ac:81:cd:97:29:f9:8a:89:e1:1b:0c:3e:32:53:bc:c2:
45:9b:66:ad:52:0b:81:8a:80:33:22:27:0b:0b:06:70:0b:73:
2c:5d:9f:cb:ce:11:f0:13:c4:3a:99:3d:cc:c8:86:2f:d0:8f:
68:c9:7a:01:f2:00:ae:bb:bf:69:c4:d4:22:8a:df:6b:d7:35:
a1:63:49:b6:0c:6c:d4:a3:e2:c2:c4:06:b5:00:aa:06:a2:fd:
a6:5e:4c:08:48:67:28:07:27:dd:f3:13:d3:5c:36:4a:c3:80:
f4:0d:ae:bf:d4:90:e5:d9:9f:33:a3:f2:56:2f:5d:0d:86:e7:
f5:a8:de:20:d0:cd:d2:15:ea:f4:51:75:e5:9a:b0:52:e8:e8:
fe:4a:cd:a7:22:d5:8b:30:ab:b0:5c:50:98:b7:0f:72:14:91:
0f:66:30:80:2f:de:91:58:67:43:03:f2:4d:de:1e:2d:bd:87:
3f:9f:2a:c7:2e:2e:54:26:dc:27:ea:c2:91:73:20:8d:c5:64:
ae:6a:df:a8:6f:92:54:d4:cd:be:c6:43:ad:cb:74:f2:0f:e3:
4d:71:42:17:e4:96:42:6a:2f:33:4f:a1:41:23:df:1e:f9:76:
a1:a2:33:8b:38:a4:2f:6e:c9:96:df:88:2c:74:da:b8:8e:9a:
f1:76:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:00 2025 by rpki-client