Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa
File: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (raw, json)
Hash identifier: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=
Subject key identifier: 9A:7E:26:B9:23:2D:A9:FD:DD:9F:FE:72:1F:2B:8C:47:56:5B:4C:C4
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01942747090E294851DB161A07281986F44A
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa
Signing time: Thu 02 Jan 2025 13:49:14 +0000
ROA not before: Thu 02 Jan 2025 13:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209275
IP address blocks: 45.158.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:09:0e:29:48:51:db:16:1a:07:28:19:86:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a7e26b9232da9fddd9ffe721f2b8c47565b4cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:6c:36:18:8d:49:58:b6:9d:2f:f0:76:47:
d3:36:36:f4:33:06:50:34:97:60:7f:42:19:86:6a:
09:97:4e:a4:7d:9a:95:7c:20:e3:4d:f3:e0:59:10:
02:04:fc:d0:be:9b:c5:88:1e:91:5c:b0:c7:81:d8:
6e:3a:31:87:37:41:dd:6f:e1:13:52:0e:eb:60:87:
d8:e0:b0:0f:f5:74:22:62:cc:00:0e:af:0a:6d:97:
03:65:13:6a:82:7f:9e:64:ca:b3:fd:31:07:73:e4:
fa:2e:54:e2:79:87:b8:bf:21:14:c5:17:78:98:8a:
93:83:4e:ca:4d:29:21:32:50:74:8e:46:7a:db:51:
a8:17:52:bb:52:32:ab:3b:08:63:44:2f:75:6e:8c:
12:29:89:f9:2d:2c:46:fe:36:f0:d5:52:51:f3:6a:
54:fd:fa:50:9c:af:10:d0:49:08:4b:d0:25:c7:f8:
37:c9:3c:a1:c1:a2:90:30:d4:1e:0c:98:c3:b4:de:
ef:8b:38:a4:bb:04:3d:ae:47:93:37:7d:31:85:12:
43:38:4c:1f:3e:82:c7:21:f7:b8:df:21:2b:b2:9f:
ba:fe:a5:be:27:b8:3d:da:17:98:0c:12:7e:79:15:
94:84:94:73:bb:58:c0:df:44:6a:5e:52:28:1e:ea:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:26:B9:23:2D:A9:FD:DD:9F:FE:72:1F:2B:8C:47:56:5B:4C:C4
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:31:94:05:37:cd:26:ef:39:8c:6d:ea:1d:eb:ca:d0:2c:ec:
54:49:e6:65:30:14:95:da:1d:9f:11:5f:1c:19:42:c7:c6:bc:
bc:0a:d9:12:ee:38:2d:2d:71:b9:2f:90:8b:76:cd:e8:0a:a4:
58:9f:e2:f8:87:bc:a2:09:95:9e:2e:ab:51:1b:88:d4:b3:78:
51:ef:06:f7:7b:2c:3b:9d:1f:40:83:88:0d:72:5f:aa:ea:45:
4c:df:ab:9a:6e:9b:61:07:67:94:03:65:14:38:83:ea:dc:bb:
a3:79:a4:09:fd:95:ad:c8:4e:08:8e:b2:5c:dc:ec:51:7a:77:
b3:6e:bd:0a:59:35:bf:c2:71:7a:5e:fb:70:6c:c6:88:a0:1f:
9d:96:ad:7a:d8:f3:ff:e8:44:2a:ae:d5:9b:bf:1c:13:2f:62:
c5:07:da:b1:59:77:25:52:fa:5a:4c:f4:7c:85:81:83:79:9c:
72:08:29:df:85:06:18:53:91:5b:2f:c3:bd:66:6f:0a:57:e3:
fd:90:81:82:89:3e:d8:e1:4f:55:15:e5:82:ca:1e:34:0b:90:
77:74:d5:a1:5d:b2:2a:a6:95:aa:c3:24:db:51:f2:1b:ca:4e:
6d:ed:09:31:7d:26:f7:3a:ad:5e:0b:50:cf:d0:6f:49:3b:6c:
9a:5c:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:33 2025 by rpki-client