Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0qo8fZn7OfT8YqeHK8qmFM96pq0.roa
File: 0qo8fZn7OfT8YqeHK8qmFM96pq0.roa (raw, json)
Hash identifier: BBLGkPq2fCZOXrINXhuNtPwfiUOQxCdPk1e7yhRcEYA=
Subject key identifier: D2:AA:3C:7D:99:FB:39:F4:FC:62:A7:87:2B:CA:A6:14:CF:7A:A6:AD
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487A10EF6AF0E1767D4F73E4C51D45
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0qo8fZn7OfT8YqeHK8qmFM96pq0.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.134.36.0/24 maxlen: 24
45.142.105.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
92.118.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7a:10:ef:6a:f0:e1:76:7d:4f:73:e4:c5:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2aa3c7d99fb39f4fc62a7872bcaa614cf7aa6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:69:b5:62:b4:61:30:fa:4d:79:e8:03:1d:
dc:00:e8:d7:bb:2c:df:42:35:83:71:60:4d:6f:35:
6f:2d:ee:e7:fd:75:7d:16:95:2d:70:cb:01:45:1e:
5c:6e:8f:fb:ec:73:6f:6d:46:81:1c:3b:e4:98:59:
a5:03:92:51:1f:91:b8:f5:1f:59:8a:5e:55:c8:c8:
2c:d3:5c:e7:57:d0:70:96:28:97:a0:8a:24:9a:7e:
fd:f0:94:0e:a4:f4:a4:3b:29:f8:d7:ce:94:6c:da:
af:f6:25:21:bc:df:88:7f:bd:1a:3f:6a:56:12:f3:
5b:0f:70:71:13:f3:0d:e6:7a:87:e2:27:41:ca:fa:
d1:7e:19:0d:d0:c1:f4:4b:e8:f9:56:c5:e7:06:65:
36:ba:99:e6:8b:f4:4f:9c:f1:69:43:57:6f:18:00:
85:df:50:e4:7d:50:aa:7b:13:25:67:1c:88:c3:60:
c0:9b:3d:3f:4a:6f:24:9c:38:5c:d0:8b:94:b8:7c:
4c:86:5c:95:7c:8f:a1:35:73:03:f7:bd:96:e1:8b:
0d:62:d5:9b:cb:5f:53:6b:a2:96:22:02:0f:28:a4:
43:38:dc:f8:a5:cb:84:ca:a9:a5:1e:a3:79:64:2c:
49:b7:7f:0f:f8:67:1e:e2:3c:33:77:2c:0c:ac:a2:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:3C:7D:99:FB:39:F4:FC:62:A7:87:2B:CA:A6:14:CF:7A:A6:AD
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0qo8fZn7OfT8YqeHK8qmFM96pq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
45.142.105.0/24
45.151.56.0/24
92.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
87:ce:1d:a7:31:87:4f:c9:26:e5:2d:9c:9f:c1:2a:b0:8d:58:
5b:e0:c5:77:48:da:22:f6:0c:3e:7d:6e:4f:e1:8e:fc:33:70:
9b:a4:41:d7:6d:ce:c9:13:49:c1:2b:e6:75:f8:e9:51:3b:04:
ea:5c:e0:75:54:6e:b6:19:e2:b4:91:97:ff:27:9b:60:55:2e:
57:bb:28:ae:c4:c3:82:7b:e9:29:4a:f9:a1:a6:d1:9d:b7:8f:
20:19:61:d9:cc:7b:b9:23:f7:aa:7a:a8:66:d0:6f:dc:59:94:
54:88:e0:85:f5:45:a5:33:fe:f5:79:be:6b:fd:11:33:17:24:
55:20:9e:ed:bb:fa:b2:a1:f7:94:16:db:39:8b:c8:66:3f:95:
9c:97:9d:86:48:df:7d:51:14:1f:61:0f:3f:ba:20:88:c8:f6:
d0:1a:d0:bf:f2:6a:21:ba:7d:26:91:e9:ab:bc:bd:c5:0a:67:
cf:b1:4d:44:e9:f6:d0:69:93:c6:9f:60:54:0c:21:83:33:07:
ad:30:93:82:66:4d:5e:f7:e7:cb:a5:40:4b:71:51:50:3c:16:
ee:2c:a0:a6:52:15:b5:ff:71:de:03:cc:42:ae:48:52:80:3a:
ee:e4:4b:5e:bc:e8:37:fc:f0:89:11:7b:98:f4:ce:3b:01:01:
31:1f:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:04 2025 by rpki-client