Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/nwRRU278nZ-OoZkxunLEdDGvAcI.roa
File: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (raw, json)
Hash identifier: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=
Subject key identifier: 9F:04:51:53:6E:FC:9D:9F:8E:A1:99:31:BA:72:C4:74:31:AF:01:C2
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019421B19C872F6D1B33ECC1E2A57680C4AA
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/nwRRU278nZ-OoZkxunLEdDGvAcI.roa
Signing time: Wed 01 Jan 2025 11:47:55 +0000
ROA not before: Wed 01 Jan 2025 11:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212953
IP address blocks: 45.10.151.0/24 maxlen: 24
45.143.98.0/24 maxlen: 24
185.148.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9c:87:2f:6d:1b:33:ec:c1:e2:a5:76:80:c4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 11:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f0451536efc9d9f8ea19931ba72c47431af01c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:49:2f:92:97:a9:67:21:c4:60:4e:4b:db:
98:f7:b9:bb:a6:bb:eb:ac:08:cc:3f:8b:97:2e:15:
53:45:67:1e:57:64:a0:9e:47:b8:a4:7b:dc:50:6c:
ba:3d:bc:35:37:d7:87:f4:e4:6f:af:01:2c:57:55:
cd:4c:4c:db:e6:13:1c:b9:94:e1:a0:96:19:49:d6:
fb:f7:da:aa:f2:3d:6f:85:34:4f:7a:30:53:f2:44:
99:0e:30:32:58:a6:0e:e8:1b:aa:45:46:7e:97:9c:
4e:ae:6a:4a:0f:13:e8:28:6d:96:46:93:d1:bd:af:
65:0d:53:43:b8:2a:82:be:14:ea:0e:69:af:64:b0:
6a:a0:a3:b3:1d:e8:f5:e4:6f:91:a8:84:13:bb:f6:
ab:9f:c4:59:83:99:4c:09:97:45:b8:fc:43:56:9e:
43:da:87:21:28:31:16:53:da:4e:54:66:bb:87:2c:
de:75:68:f3:7a:01:05:6e:eb:86:3e:23:b7:ca:d9:
7c:3b:49:b8:7a:d2:ff:1f:b2:5d:70:27:85:7d:6a:
07:2d:13:e3:e8:a2:26:98:eb:28:03:bd:82:e3:4c:
32:3f:e8:f9:29:26:4c:cd:97:84:04:04:d5:8f:29:
bd:5f:cd:60:cb:4d:cc:12:81:d4:d5:29:e0:35:1a:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:51:53:6E:FC:9D:9F:8E:A1:99:31:BA:72:C4:74:31:AF:01:C2
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/nwRRU278nZ-OoZkxunLEdDGvAcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.151.0/24
45.143.98.0/24
185.148.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c7:9f:8c:09:f3:3c:fe:13:1f:0b:17:22:7d:de:56:de:b6:
da:67:c0:40:32:c5:42:a8:44:63:d8:68:23:61:51:90:f2:93:
04:59:d1:75:5b:e6:4b:b9:12:95:53:04:ff:fa:a1:66:a8:14:
a0:6d:58:74:2c:34:a9:be:c6:fa:58:c2:c5:52:20:a9:d5:9c:
55:de:4e:e3:14:6f:e7:8f:f8:5d:54:4c:c3:bc:ba:58:ef:21:
7b:84:4e:9b:98:4c:66:ef:82:00:c0:7f:90:36:f0:57:6f:af:
98:f7:7c:49:03:9d:15:3f:4f:ca:fb:b4:78:c6:34:f5:c7:c1:
4e:6b:44:29:0f:af:de:d7:bc:38:09:8d:c1:bd:fd:1f:e9:d7:
fd:83:4d:6f:6c:ab:6d:d5:c7:dc:21:f8:d6:9f:b4:90:df:bd:
75:64:48:78:5b:41:8c:bd:da:9c:34:c2:a0:ff:98:fc:83:46:
92:f5:88:55:1d:10:98:fc:ef:82:af:d5:27:a7:95:3a:73:01:
0a:2d:96:a4:a5:e4:4f:36:70:65:a2:be:52:45:5f:a2:aa:e5:
52:0b:bf:05:07:19:a7:26:e9:22:2f:9d:b9:d8:f3:c8:b2:ac:
b6:79:a1:d9:a1:39:fc:4c:44:ca:23:17:64:12:45:1b:3b:ed:
48:5e:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:49:12 2025 by rpki-client