Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ExzZcEDDPK8coOGqZF_YdjfXfTY.roa
File: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (raw, json)
Hash identifier: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=
Subject key identifier: 13:1C:D9:70:40:C3:3C:AF:1C:A0:E1:AA:64:5F:D8:76:37:D7:7D:36
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 0194274708B79DEF7B43D66943733C35117A
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ExzZcEDDPK8coOGqZF_YdjfXfTY.roa
Signing time: Thu 02 Jan 2025 13:49:14 +0000
ROA not before: Thu 02 Jan 2025 13:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 45.158.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:08:b7:9d:ef:7b:43:d6:69:43:73:3c:35:11:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=131cd97040c33caf1ca0e1aa645fd87637d77d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:22:7b:3f:57:b3:a0:9a:e2:30:c2:09:52:
2a:d1:85:8e:06:93:06:4d:51:17:86:21:37:40:80:
8d:4c:fd:9d:d8:54:7f:4d:61:8d:bc:2f:be:99:8b:
09:67:02:f1:20:fc:b1:7c:7b:42:51:a8:cf:82:f8:
c2:97:c6:3b:e2:d4:51:5f:25:b1:72:37:0e:22:5e:
a5:77:48:c8:84:d3:47:7d:e2:0a:0d:8a:df:19:e1:
81:d8:d9:b0:4f:12:24:d5:c1:fd:08:c4:8d:a2:9f:
9a:33:9f:cd:a5:e9:6e:a1:3b:c2:4a:55:2b:f7:10:
40:8e:17:c9:a9:0f:aa:49:f3:27:fd:99:df:67:bd:
6d:cb:9a:2b:e9:3d:e8:bf:c4:3a:a0:47:0c:1a:b8:
b1:56:81:86:66:b9:8b:dd:a6:81:ce:9a:11:de:4a:
c5:00:87:92:19:c7:53:9a:56:a1:d8:02:36:fb:08:
04:77:08:00:02:fe:8f:88:cb:d2:61:97:92:db:d9:
81:bf:a5:3d:bf:9a:10:e2:21:14:b7:4d:d2:3e:86:
4a:b9:8c:08:97:c8:52:d4:95:08:2a:f9:e1:16:85:
95:1c:df:18:38:8a:12:15:db:99:34:41:f1:f1:55:
d1:85:0e:d5:ba:7f:00:65:39:78:d3:8e:f6:b6:b1:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:D9:70:40:C3:3C:AF:1C:A0:E1:AA:64:5F:D8:76:37:D7:7D:36
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ExzZcEDDPK8coOGqZF_YdjfXfTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f3:04:dd:bb:ab:a7:40:db:6f:08:b1:3f:dc:c5:fa:45:a6:
5d:fa:14:9f:7c:62:93:ac:67:b1:62:2b:ee:2b:19:22:05:c0:
57:bb:83:eb:d1:af:65:86:d9:63:2e:b6:d3:2a:b3:3c:6b:2c:
af:b9:10:9f:bc:db:87:37:b7:b5:56:10:84:65:c6:99:38:bc:
bd:52:27:de:97:4f:1c:62:09:ff:21:d6:fa:47:41:9f:47:0c:
c1:35:cc:e9:31:b7:37:d6:8a:1b:7a:9d:73:09:73:a1:9b:f0:
8c:da:69:2d:86:f2:68:2a:01:b0:9a:32:96:f9:c6:d3:aa:a0:
01:3f:88:d6:55:3f:bc:78:c5:4d:a7:33:2f:ed:ef:a2:a6:0a:
52:7d:a2:c1:74:b9:8b:f9:01:6b:ed:41:46:6c:72:57:f0:09:
11:72:7b:96:a5:ba:51:63:f7:c6:6e:ca:3b:7a:33:5a:a2:3f:
f7:23:95:35:44:ba:ce:5b:de:77:41:12:7a:88:9a:b0:e0:e9:
5f:ac:96:0c:64:24:05:89:82:33:32:e2:43:28:9b:e2:81:a2:
f8:a6:c1:5c:8f:30:52:5c:59:ff:e0:36:fd:0e:3c:3b:6a:9e:
47:6b:27:80:97:3d:22:62:0c:63:2d:40:ec:a5:a0:58:4b:2d:
1a:91:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:53 2025 by rpki-client