Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/CSpNr80FvoJXN9ZfztFVeZJu2dY.roa
File: CSpNr80FvoJXN9ZfztFVeZJu2dY.roa (raw, json)
Hash identifier: xjwSVmlVGgcseTx9+nJV5eZL5y6c+Vbmy9OOc+sD1WA=
Subject key identifier: 09:2A:4D:AF:CD:05:BE:82:57:37:D6:5F:CE:D1:55:79:92:6E:D9:D6
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 01942143DC2D88DE71EC79E0920C281AD63A
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/CSpNr80FvoJXN9ZfztFVeZJu2dY.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207867
IP address blocks: 45.159.104.0/22 maxlen: 24
45.159.104.0/23 maxlen: 23
45.159.104.0/24 maxlen: 24
45.159.105.0/24 maxlen: 24
45.159.107.0/24 maxlen: 24
188.68.188.0/24 maxlen: 24
188.68.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:dc:2d:88:de:71:ec:79:e0:92:0c:28:1a:d6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092a4dafcd05be825737d65fced15579926ed9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:3b:39:c6:f2:52:f8:18:a1:c8:bd:97:18:
fd:cc:ca:7d:8b:65:5b:cd:d9:a4:fe:2c:40:4d:f9:
3b:ad:2a:31:f7:0a:ae:e2:75:f4:cc:eb:71:61:9a:
ed:cb:0e:f1:c8:8d:77:5d:40:d0:33:df:5c:da:c9:
20:ad:e4:0e:76:fc:23:70:1f:4b:ab:74:76:1e:df:
a0:09:ed:9c:5f:cc:2a:88:2b:4a:da:91:aa:8f:b6:
81:72:b7:0b:ac:4a:aa:6f:1b:76:5d:1e:dd:e6:26:
66:31:20:18:59:84:5b:b6:58:ac:24:66:30:06:9e:
15:98:92:2f:f7:31:64:35:1d:82:08:a1:c7:37:66:
b2:a9:5e:5b:d3:76:46:bd:7c:86:bf:ec:f0:4a:13:
1d:32:73:3d:fb:1e:16:45:51:ed:ed:af:43:0f:a4:
1f:b1:bf:35:cc:06:59:5c:27:13:03:d1:2e:d4:24:
5e:51:ad:2b:f4:4c:bd:9a:36:d7:e8:79:08:0b:8a:
b1:9f:38:ad:ac:2c:98:b5:67:4a:8c:c5:8f:ee:81:
35:93:42:81:d1:10:6d:0b:be:be:b8:cd:0d:05:dd:
04:fe:24:4f:98:bd:dd:bf:bd:6e:de:4f:00:2b:71:
21:ad:98:e9:81:42:4d:b6:e1:6d:23:d2:f0:ce:53:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:4D:AF:CD:05:BE:82:57:37:D6:5F:CE:D1:55:79:92:6E:D9:D6
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/CSpNr80FvoJXN9ZfztFVeZJu2dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c5:3a:08:17:9d:95:fe:39:97:b8:18:2c:65:04:f3:5c:00:
93:fe:d3:7e:94:14:ea:84:ab:c7:af:65:c8:c2:b0:b8:bb:ab:
f8:f5:5e:9f:9d:54:98:41:3a:d2:ab:f2:2a:48:0b:3f:4d:51:
23:f8:49:31:a8:e4:b5:dc:bf:d4:de:2b:2f:e4:ff:06:3b:a6:
c6:38:8e:a0:78:46:0f:48:42:bb:0a:60:af:d9:88:ca:40:37:
9a:8b:13:82:00:ba:2f:0d:32:f0:92:0f:89:4c:50:b8:cd:03:
ff:5d:ab:28:20:3f:aa:a2:41:07:59:b4:05:ec:4d:c7:23:1c:
da:ea:55:90:77:db:e3:db:8d:6d:78:d3:7f:6a:7d:76:0a:9b:
fd:0e:e1:61:6d:19:c1:18:d1:0b:5b:9a:28:1f:cf:d8:0f:63:
1e:8d:80:eb:8a:ee:a7:06:29:6e:f4:94:3d:78:ac:2d:09:c8:
e2:0e:17:2c:19:fd:af:11:f3:cf:3d:65:91:b1:93:b8:d8:fe:
f9:16:01:15:ea:47:b1:7a:cd:6c:7a:3c:e6:d5:d2:57:d0:33:
6a:7d:0e:05:ac:82:7b:bd:a1:d3:74:21:cc:0d:69:3b:b6:5e:
f0:56:d6:07:d7:62:69:7e:e0:a3:ec:99:3d:04:25:24:f3:ea:
a9:f8:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:26 2025 by rpki-client