Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/oZ13AtjecChXKw5f_3lLaOPw8Ks.roa
File: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (raw, json)
Hash identifier: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=
Subject key identifier: A1:9D:77:02:D8:DE:70:28:57:2B:0E:5F:FF:79:4B:68:E3:F0:F0:AB
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 0195A337CE4D2F9EC6C8BE6BC1837C2EE939
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/oZ13AtjecChXKw5f_3lLaOPw8Ks.roa
Signing time: Mon 17 Mar 2025 08:28:18 +0000
ROA not before: Mon 17 Mar 2025 08:28:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211335
IP address blocks: 45.11.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:37:ce:4d:2f:9e:c6:c8:be:6b:c1:83:7c:2e:e9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Mar 17 08:28:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a19d7702d8de7028572b0e5fff794b68e3f0f0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:f1:60:7b:e6:54:10:67:70:dc:25:05:7a:
3c:f1:40:5e:46:b3:8d:57:e2:7f:51:56:3c:c5:53:
cf:d1:90:af:f0:d9:70:b8:fd:86:08:97:e8:a2:21:
5e:68:a6:24:13:63:1f:71:97:23:a3:c7:87:c5:76:
90:b7:dc:b4:5c:e0:5d:2c:1e:96:79:33:dd:a7:01:
64:fa:12:24:2f:e8:26:0f:7a:db:26:7c:f6:e3:a7:
ac:50:31:99:71:52:bc:ba:16:d5:68:88:58:28:d1:
5b:06:27:2e:53:1a:4f:c6:2e:b6:b8:4f:42:6b:47:
eb:d5:91:7c:df:cf:cb:8c:77:5c:d1:26:7f:00:e3:
85:b7:44:be:b8:6d:73:29:a1:08:87:ff:a6:dc:8e:
83:09:43:bb:5f:e5:d5:30:a4:56:fd:91:54:14:c8:
16:49:01:ca:1f:f6:93:76:0a:8d:ea:04:7f:06:57:
7e:00:51:a4:4b:0f:6b:a3:54:98:53:83:49:c5:ad:
fd:f9:36:a7:e7:2c:96:c9:4f:65:28:55:98:02:07:
70:51:fc:dd:cd:54:79:df:a8:96:8e:a5:b6:07:9d:
75:54:ec:7e:a8:ef:37:ab:2a:cb:9c:a9:f4:dc:91:
94:5e:a3:a1:bd:5a:9d:61:a2:c0:3f:98:a9:00:0d:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:77:02:D8:DE:70:28:57:2B:0E:5F:FF:79:4B:68:E3:F0:F0:AB
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/oZ13AtjecChXKw5f_3lLaOPw8Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.41.0/24
Signature Algorithm: sha256WithRSAEncryption
18:de:49:32:54:1f:8c:0d:95:c1:a1:9c:84:5f:e6:a9:6b:56:
d4:5d:22:2f:01:48:4e:d4:75:ab:af:bf:71:f1:7b:58:0e:34:
61:56:ab:4d:b1:53:65:22:9d:6f:85:99:43:c7:b5:d1:64:24:
ed:a4:c9:c7:0d:b0:21:25:df:f8:43:63:93:36:a2:3f:29:d3:
ae:64:9d:c0:41:e9:3f:89:c0:1d:5d:0a:fd:de:48:77:77:8d:
73:b5:08:fb:fa:3a:c8:c9:af:fd:fd:5f:3d:7d:fe:08:f6:f4:
6b:dc:fd:0a:0f:99:9a:80:bf:2d:0f:5d:8d:a3:b1:5b:2f:87:
be:b3:5d:c5:f0:a9:98:6b:ab:3a:bd:c4:3d:56:e9:63:c9:6b:
d0:0a:5e:56:ba:b2:87:bf:69:4e:70:05:5e:ad:66:8a:73:8d:
d8:00:0a:5d:54:d6:3c:5c:84:3b:c1:41:e9:46:f7:12:ac:9b:
47:97:97:2c:46:c8:ae:1f:4d:34:81:f0:f7:eb:f8:1b:66:d7:
48:72:12:4e:4f:b3:46:98:4c:4b:f6:b2:8d:e7:43:62:a9:f3:
70:a8:32:2f:44:d5:13:34:1b:c2:fa:9e:d7:f3:97:ea:95:7a:
36:28:d6:e9:6a:c5:73:10:4f:e9:73:4d:c1:44:f2:73:99:ad:
df:a6:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:46:03 2025 by rpki-client