Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/olCZzHEOZSOjj4yqtahX2zJkhMQ.roa
File: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (raw, json)
Hash identifier: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=
Subject key identifier: A2:50:99:CC:71:0E:65:23:A3:8F:8C:AA:B5:A8:57:DB:32:64:84:C4
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 019423D7BA06835E399BDAAE4C15B31040C1
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/olCZzHEOZSOjj4yqtahX2zJkhMQ.roa
Signing time: Wed 01 Jan 2025 21:48:47 +0000
ROA not before: Wed 01 Jan 2025 21:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199614
IP address blocks: 45.15.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ba:06:83:5e:39:9b:da:ae:4c:15:b3:10:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jan 1 21:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a25099cc710e6523a38f8caab5a857db326484c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:f1:b7:77:27:45:a2:a6:41:76:a5:b4:9b:
06:e5:3f:e4:be:80:e8:33:54:bf:95:ad:17:90:10:
98:be:00:b7:c8:7c:dc:9d:2a:cf:a0:38:28:4c:46:
7f:00:6d:68:ed:31:2e:ee:18:5d:dd:25:ca:b7:f5:
a8:ab:97:3d:24:25:d9:b1:78:04:6c:e2:23:b3:85:
49:c7:ab:ac:e5:5a:74:f1:f5:15:aa:80:e9:dc:74:
7b:20:a4:dd:a3:af:b2:69:98:65:10:93:07:5f:61:
27:9e:e9:61:dd:33:41:52:6c:0f:45:fd:59:52:27:
72:c5:97:c0:4a:55:02:1e:45:d4:a5:92:ee:99:3b:
15:0d:79:5a:ef:d6:99:17:3e:21:b2:20:ae:9e:2d:
8b:0e:f6:5d:33:92:74:10:8d:9d:93:b4:9b:41:84:
92:80:6c:74:27:ab:aa:6b:52:9f:05:24:f7:10:4e:
1a:47:98:db:93:ca:5e:43:39:80:eb:52:10:3b:0b:
6d:5f:13:fb:a6:e3:ef:ba:92:45:d0:62:28:c8:d0:
fd:d3:74:19:48:8b:1d:25:4f:08:c9:b6:c0:73:60:
59:71:55:aa:9e:8b:fe:68:d1:f6:e2:85:5c:a6:1e:
65:74:ef:d0:01:6e:e2:c7:a6:97:08:2a:30:d4:b0:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:50:99:CC:71:0E:65:23:A3:8F:8C:AA:B5:A8:57:DB:32:64:84:C4
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/olCZzHEOZSOjj4yqtahX2zJkhMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:08:f2:54:c0:11:db:ee:fa:47:dc:d5:11:c7:ff:96:30:77:
ff:42:e3:cd:4d:3c:fa:96:58:7b:39:42:7c:16:79:3c:99:f8:
09:57:b2:a2:5f:61:e1:43:12:ae:d4:b8:df:b7:80:aa:ef:e2:
c5:82:94:6e:7e:3d:37:e8:c3:52:88:2f:70:6b:fe:e0:42:97:
5a:07:15:79:4b:02:a6:d6:df:64:89:06:d7:59:ea:d6:a1:c9:
83:88:14:13:7a:8c:c7:75:1e:cf:a3:94:27:96:67:04:52:75:
fa:4a:2f:03:f8:2a:89:15:ff:b7:6c:b3:56:a4:ee:3d:fe:67:
5c:0c:1b:88:67:70:75:23:79:f2:69:01:ba:e6:e0:26:ca:6e:
0f:c1:4f:59:3e:e5:e7:55:81:9a:c4:20:18:09:f6:00:1e:49:
2c:36:45:8d:ae:fa:16:7d:db:c4:01:9f:63:db:2a:42:f8:fa:
13:d6:83:fa:82:ee:c3:76:ca:88:e8:01:40:71:15:2a:ae:17:
a0:0a:75:71:29:66:1d:d4:5f:a8:54:2e:f6:67:35:ea:ba:bb:
77:0c:63:f5:6d:68:f8:2d:6e:9a:e6:74:51:07:82:ab:5e:ee:
84:8e:9c:cf:3a:54:72:d5:be:d4:2d:ae:bf:2b:32:7e:76:49:
26:36:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:49:19 2025 by rpki-client