Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/A1zec-CskqolW7mJ1F7FSCJEjOk.roa
File: A1zec-CskqolW7mJ1F7FSCJEjOk.roa (raw, json)
Hash identifier: a6GR8G8FznT3aQI7UdFnGLQo/05YXaz40zz7lTqWm+M=
Subject key identifier: 03:5C:DE:73:E0:AC:92:AA:25:5B:B9:89:D4:5E:C5:48:22:44:8C:E9
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489604C19DD51CA47A74836567EB26
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/A1zec-CskqolW7mJ1F7FSCJEjOk.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200056
IP address blocks: 45.133.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:96:04:c1:9d:d5:1c:a4:7a:74:83:65:67:eb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=035cde73e0ac92aa255bb989d45ec54822448ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:c1:7b:23:ad:77:89:04:7e:cb:6f:05:28:
07:ea:62:6e:1e:8d:49:78:50:70:8b:59:ca:e0:23:
92:af:36:d8:0f:33:ee:a6:9a:f5:1c:12:ec:1b:3d:
55:f8:9d:20:0e:02:c5:52:77:39:59:5f:c4:87:6d:
34:3e:bf:de:ea:2b:b2:0e:30:32:fb:3d:c8:82:57:
33:de:1d:00:c2:75:9e:e4:78:b2:2f:87:39:86:b3:
51:d1:9e:2c:ed:a7:10:52:00:3d:d0:db:51:57:f5:
75:f4:71:d7:3b:4d:bd:24:ad:20:33:09:8f:e3:7f:
ed:20:91:32:fa:20:d7:fb:41:bb:a0:7a:ac:85:27:
9b:b1:58:8b:b9:2b:b2:fb:6d:4e:d9:6f:a9:84:2b:
96:27:44:4b:0c:44:a1:a9:c7:6f:d2:12:30:56:47:
fb:de:56:8f:e0:83:2d:20:3e:ff:a4:70:31:1a:d1:
ac:b0:ef:d9:4e:b2:d1:7e:23:d9:ef:58:05:fa:a0:
8a:47:e8:6e:44:d9:ef:79:1f:f6:29:ee:b8:c8:55:
b3:4e:5d:2a:f3:19:fe:c8:2b:9e:2b:c9:f3:b6:a3:
0a:fb:94:c6:3d:58:10:54:4a:64:e1:c6:7a:87:2e:
b9:81:28:f2:6f:78:9b:e1:15:5a:a2:ac:89:09:46:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:DE:73:E0:AC:92:AA:25:5B:B9:89:D4:5E:C5:48:22:44:8C:E9
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/A1zec-CskqolW7mJ1F7FSCJEjOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
93:be:88:66:d6:c0:91:8b:e8:82:94:14:9f:ac:b4:c6:e6:6a:
f6:8f:11:89:d8:fe:e2:a2:5d:31:43:0d:b7:f4:13:3a:07:59:
0c:4e:09:f2:59:ba:f2:07:ca:13:d9:5d:6f:58:0e:32:95:d9:
18:c7:f0:aa:40:34:77:af:7e:8f:7d:54:bc:4d:0c:e4:43:5f:
91:56:4b:91:63:b0:74:30:95:f2:2b:6f:f0:49:0b:18:8e:36:
a1:ca:9a:1a:7d:be:c6:8f:5c:67:15:9e:ba:40:44:78:33:5e:
13:38:24:c2:02:ae:0b:ab:d2:56:c4:aa:f1:d9:b8:e5:0e:af:
3a:74:3c:da:e9:fa:01:fa:c6:55:ca:ac:9f:aa:55:09:d7:a2:
b8:b7:23:13:a1:04:4a:a4:bd:f0:b8:81:2b:bd:34:84:cb:0d:
3d:99:d7:a3:5b:ca:ca:46:f4:f3:21:11:29:69:28:89:df:0f:
65:9e:90:74:12:20:e9:c1:6d:8a:6c:d1:91:ab:e3:df:a8:a1:
81:27:17:f6:7a:ac:5f:85:6f:4d:23:5f:e5:da:1e:0c:4d:13:
dd:8a:9e:1e:8a:a1:4c:6d:b3:72:12:af:6d:a6:0f:17:6a:f3:
c9:6b:aa:55:99:23:da:65:73:d3:3b:b8:a1:06:32:e4:b0:df:
cf:e2:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:59 2025 by rpki-client