Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/D51k8Yufzem8ogKjVaG-BE3-N9Q.roa
File: D51k8Yufzem8ogKjVaG-BE3-N9Q.roa (raw, json)
Hash identifier: LfZnqpQQPapIc1GbVrcmd90U2aDXCgwED1y7JLo14nI=
Subject key identifier: 0F:9D:64:F1:8B:9F:CD:E9:BC:A2:02:A3:55:A1:BE:04:4D:FE:37:D4
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA987D508D71925372D61B4C1832E8
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/D51k8Yufzem8ogKjVaG-BE3-N9Q.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 45.135.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:98:7d:50:8d:71:92:53:72:d6:1b:4c:18:32:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f9d64f18b9fcde9bca202a355a1be044dfe37d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:70:36:9e:28:33:3d:24:5c:a1:78:4e:6a:
83:6c:cb:71:2b:6f:09:64:1e:64:ad:7f:48:2a:58:
b2:e2:b5:e0:19:5c:36:91:e6:dd:b9:3c:98:c8:e0:
0b:ae:76:fc:a9:d5:c3:9b:e2:03:6a:5c:50:0e:e5:
10:0a:70:e4:59:e5:5d:d5:67:58:18:21:5d:1d:9e:
b1:a8:66:b5:85:5a:a4:73:c0:68:98:5a:97:af:df:
8b:54:25:02:2e:75:c8:96:7f:f6:46:f6:ed:75:fc:
63:bd:74:09:92:2c:9a:43:74:ab:4e:39:f0:87:46:
f1:9f:29:0d:ae:c9:33:43:b9:2b:38:25:c6:37:cb:
52:b9:a4:a1:1d:0b:c0:95:06:13:c0:57:3d:2b:68:
d1:9d:33:35:06:ec:f9:7f:1b:e2:47:85:4e:a2:72:
c8:40:ba:29:46:5e:f5:90:73:c4:81:a7:57:2e:f8:
6a:d8:54:2c:d4:2e:69:5f:89:ef:74:7a:53:09:0d:
2f:f1:5c:81:98:f2:fe:c2:a2:89:59:ca:94:4b:a7:
2e:d2:52:91:cb:47:5e:ea:f4:6c:87:68:79:20:24:
9e:64:44:89:1a:ae:fb:86:15:a1:ff:e9:c8:71:3c:
24:08:dc:54:3e:5f:77:dd:a1:bb:15:e3:ec:41:7f:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:64:F1:8B:9F:CD:E9:BC:A2:02:A3:55:A1:BE:04:4D:FE:37:D4
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/D51k8Yufzem8ogKjVaG-BE3-N9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5b:56:4c:90:c6:48:32:9e:02:5b:94:0c:ff:fe:e2:ca:bc:
ff:07:45:0e:a0:f1:de:e7:95:d6:0e:42:77:73:e4:0c:12:73:
4d:35:43:fe:5e:7a:b9:3d:db:90:5d:ba:03:20:43:77:00:c7:
6d:71:65:cc:b9:1c:50:00:c7:e8:eb:ee:88:d4:78:a0:bc:01:
79:06:27:5f:30:2d:bf:79:26:8f:34:a7:10:67:0f:9a:86:9b:
ec:58:c5:e7:1f:39:55:71:da:4f:e3:b2:e6:54:5f:6f:53:6e:
84:da:d2:00:12:69:85:c6:62:c9:35:a5:07:ea:97:0a:45:e5:
e7:57:04:07:2f:60:00:a4:99:39:bd:90:95:57:13:6b:0d:0a:
22:f1:e4:5c:78:16:1b:b0:98:d8:09:e1:c7:47:a2:12:a1:69:
bd:9a:ec:1e:dc:42:1d:45:1e:a9:ac:48:7a:16:80:14:be:cf:
2c:8e:5c:d9:cc:c9:0f:7f:d0:e5:52:e9:ee:4b:83:fb:d8:54:
2f:a6:e1:97:54:2e:e4:90:9a:86:41:29:5f:b1:52:ed:ea:39:
02:d5:a7:bc:01:27:c9:00:05:e2:b1:44:7a:dd:b6:9d:a2:d3:
cf:ea:bf:21:66:25:d1:99:12:bb:e9:50:39:f6:85:a8:cd:19:
23:5c:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:56 2025 by rpki-client