Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DQSfE8mPnSO4uy7DV2IZ9nbH9Ls.roa
File: DQSfE8mPnSO4uy7DV2IZ9nbH9Ls.roa (raw, json)
Hash identifier: GDYauSBt4o1FSvFkmptgDKIWxEwlUOOcke+MX380VTY=
Subject key identifier: 0D:04:9F:13:C9:8F:9D:23:B8:BB:2E:C3:57:62:19:F6:76:C7:F4:BB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489203E677721A5F03378A048265A3
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DQSfE8mPnSO4uy7DV2IZ9nbH9Ls.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135343
IP address blocks: 45.141.118.0/24 maxlen: 24
45.141.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:92:03:e6:77:72:1a:5f:03:37:8a:04:82:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d049f13c98f9d23b8bb2ec3576219f676c7f4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:71:eb:a0:99:dd:42:93:d2:d2:a0:e7:11:
ac:6a:f7:dd:40:1f:c3:ab:c3:ae:ff:15:f5:46:d7:
ff:77:d1:f9:75:b7:16:df:d6:66:e4:6f:17:9e:01:
c0:b8:ff:15:bc:71:4d:d0:1c:4a:35:c3:ae:7a:17:
56:9d:c7:f2:11:8c:b7:bd:19:2f:e1:38:5f:2a:de:
b5:d0:0e:1b:20:a8:a8:9b:62:9d:17:15:d7:02:75:
ca:c1:7f:89:7b:83:3f:9a:1d:d7:af:fa:09:f8:84:
51:33:f5:c9:08:6c:ab:5f:c8:e1:82:3f:5b:09:8f:
a4:5b:b0:33:b0:a4:28:06:61:80:5a:20:7a:3c:62:
9f:c1:6d:8d:fd:a2:32:35:f2:b5:de:e8:0e:8a:3d:
f1:0f:c5:16:98:9a:c9:26:10:1d:85:9b:8d:c3:d1:
7a:25:5b:53:8e:a7:ac:9b:7d:b4:40:30:7f:5d:d5:
f3:93:d2:f1:a7:b2:2d:e2:a4:9c:73:ab:b1:eb:76:
31:5c:71:a7:bd:44:a1:82:cb:bf:4e:df:02:ae:b2:
3f:fd:db:4d:83:a5:09:6f:f1:61:b7:da:85:3c:a8:
4f:55:e6:0a:9a:0b:6c:db:14:1d:0a:e1:ed:40:dc:
78:d0:06:1b:b8:69:8f:84:3b:c8:27:eb:ac:cf:e1:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:9F:13:C9:8F:9D:23:B8:BB:2E:C3:57:62:19:F6:76:C7:F4:BB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DQSfE8mPnSO4uy7DV2IZ9nbH9Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.118.0/23
Signature Algorithm: sha256WithRSAEncryption
56:7b:00:b1:9d:f5:8c:2f:2d:a1:fa:6c:06:b7:7e:5f:0d:76:
96:3f:90:4b:f8:b3:94:b0:10:ce:5b:93:14:66:f1:52:3b:1c:
ef:67:06:af:2f:89:b3:d8:55:67:a4:18:f6:aa:15:51:db:2c:
4f:34:e3:6d:c4:e9:cf:6a:cf:6c:5e:4c:0a:01:87:e1:3f:63:
a2:bc:e3:39:02:67:a5:97:c0:ae:ba:17:17:04:cc:a6:68:19:
d5:88:69:b4:4f:75:91:b6:32:5f:59:35:7b:2f:d9:2a:ab:46:
fe:9e:06:35:f6:ed:c4:32:08:3f:20:83:eb:ad:7f:35:7f:0a:
fd:e8:04:a9:7b:ad:1d:52:5e:0b:98:cc:b8:ca:89:2e:a5:a3:
d7:d0:0a:8f:93:b6:40:d2:9b:c9:97:9e:b5:bf:be:63:aa:54:
b0:d8:1e:39:92:71:d7:58:67:74:c6:2b:82:f8:c0:49:87:56:
2a:ed:2a:45:61:44:e8:6a:80:5f:49:73:cc:6c:49:81:ab:0d:
c2:31:35:b7:5a:a5:5a:ad:a5:23:ae:49:f1:f8:ef:58:70:2b:
f5:78:62:6c:d7:39:ef:8e:57:93:89:b7:85:33:9a:53:29:1f:
21:d2:0b:40:99:70:b9:50:ce:31:94:53:e2:d8:b8:46:32:5b:
e2:c2:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:10 2025 by rpki-client