Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/K97zp34OToUCQrbZPgRq8uelj_I.roa
File: K97zp34OToUCQrbZPgRq8uelj_I.roa (raw, json)
Hash identifier: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=
Subject key identifier: 2B:DE:F3:A7:7E:0E:4E:85:02:42:B6:D9:3E:04:6A:F2:E7:A5:8F:F2
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019425FBF2B35C7687413627D866D8F544A1
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/K97zp34OToUCQrbZPgRq8uelj_I.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201933
IP address blocks: 45.90.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f2:b3:5c:76:87:41:36:27:d8:66:d8:f5:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bdef3a77e0e4e850242b6d93e046af2e7a58ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:58:61:65:c9:70:41:5d:23:e2:9a:9b:60:
a3:28:08:a6:6a:fa:11:82:96:b6:80:09:bf:3b:c2:
0a:66:fe:16:91:01:f2:fc:24:52:75:9c:4d:e8:cc:
ac:9a:a9:da:6f:a1:1a:10:5a:57:c9:1d:2d:a1:e1:
29:06:da:f8:15:0b:c1:5a:10:b5:6e:9c:f4:12:4d:
39:31:fd:2b:04:e9:62:06:ca:87:fe:2c:56:cf:36:
7e:ea:b9:da:ce:55:eb:cf:4d:57:fe:47:2c:55:04:
35:d5:c6:77:a8:6d:3f:7a:91:c9:d9:b6:8b:aa:44:
c1:61:45:a3:b4:ba:17:16:6e:ee:e9:be:ea:ca:36:
be:01:e2:1f:73:2e:62:3a:4e:0a:13:b3:5d:9a:5d:
7f:33:f3:5d:97:b2:fb:7d:80:50:5e:76:59:78:2e:
0d:46:22:71:c3:1f:04:0a:83:dd:fe:54:c6:36:e3:
a2:d8:2d:20:91:4b:e0:af:66:1e:27:f5:f4:ef:f4:
65:22:66:7d:59:17:41:bb:23:e8:17:ca:01:7d:b4:
89:a4:ab:02:d1:5d:8e:96:2c:90:b8:d1:bf:57:c0:
e6:9e:cd:5c:c0:03:ac:45:56:2c:72:7d:74:fb:d3:
c7:7b:43:96:07:f1:1a:4b:e4:93:c7:3c:f9:28:06:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:F3:A7:7E:0E:4E:85:02:42:B6:D9:3E:04:6A:F2:E7:A5:8F:F2
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/K97zp34OToUCQrbZPgRq8uelj_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2b:9a:65:5f:fb:be:2a:48:88:69:0f:f8:e0:88:35:fc:52:
2a:59:29:3a:3e:c2:45:b0:b6:7c:9e:e8:ae:b9:1b:a3:d9:0b:
4f:a4:85:59:8e:ab:9d:47:37:63:2e:f2:26:ee:30:b0:7b:2c:
3b:7c:03:b7:a0:29:c3:c6:14:9c:3e:df:12:ed:b4:e1:66:d9:
0f:b8:b2:ea:9a:32:83:e2:2f:30:26:17:2c:ed:31:3e:a3:06:
1e:a2:4a:83:a0:ff:29:5a:a0:12:fc:31:6a:dc:a6:96:de:eb:
60:5d:9f:09:48:21:1d:cd:80:57:47:c1:50:fe:b7:0c:21:16:
b2:56:75:ee:dc:da:e1:ae:dd:21:16:4d:7f:10:06:11:77:83:
8a:77:b6:8d:da:03:cf:13:fe:0e:b3:0a:6e:6f:45:e4:23:b2:
3a:35:1f:86:ce:7f:6e:63:d8:e1:9a:c8:f6:fe:9e:8a:64:ec:
7b:e9:ca:94:f4:2d:58:15:86:cc:ba:c0:6c:5f:8b:2f:9f:b9:
46:d0:b5:72:e1:46:26:ae:fc:df:24:2d:60:d5:bd:0d:cf:00:
7e:8c:d0:66:23:11:93:3f:0e:43:34:a8:c9:11:53:a7:f3:d5:
4e:c4:5e:d4:e1:80:89:ca:ca:98:94:82:3e:94:ca:ff:08:20:
3a:a5:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:27 2025 by rpki-client