Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cdMOxOLEeFiWFHe49iS7n45M3Dc.roa
File: cdMOxOLEeFiWFHe49iS7n45M3Dc.roa (raw, json)
Hash identifier: nsm8K8XK6B9m4Tku6AueMjtapov2rWdRNvAzlDtVqWw=
Subject key identifier: 71:D3:0E:C4:E2:C4:78:58:96:14:77:B8:F6:24:BB:9F:8E:4C:DC:37
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A36914D7AECC1403F94C66C02632
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cdMOxOLEeFiWFHe49iS7n45M3Dc.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216463
IP address blocks: 45.153.24.0/22 maxlen: 22
45.153.24.0/24 maxlen: 24
45.153.25.0/24 maxlen: 24
45.153.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a3:69:14:d7:ae:cc:14:03:f9:4c:66:c0:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71d30ec4e2c47858961477b8f624bb9f8e4cdc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:68:a3:9b:9d:62:45:81:eb:fa:6d:80:e4:
36:9a:b7:d9:b4:e0:d0:e8:d9:5b:aa:dd:d1:dc:7d:
99:18:70:46:b5:e3:e6:db:43:3f:87:1e:c9:8c:84:
2b:7b:fc:b6:ce:36:65:98:76:48:8a:2f:0c:5e:db:
54:d5:ae:70:88:02:1b:f6:aa:74:fd:ff:e3:a4:98:
63:92:47:b5:e0:de:64:bd:ce:32:07:b4:8f:fc:a1:
89:56:e6:60:2b:5c:80:6d:30:2c:bc:2c:0a:55:4a:
9f:85:0d:34:9c:c8:43:b7:31:17:20:9e:3f:ee:8e:
8b:a8:31:73:b1:a0:1f:7e:9f:e5:e6:51:f7:5a:8d:
ba:22:01:69:19:07:57:6b:b6:7b:22:69:03:3c:43:
46:a4:15:37:4d:66:86:6a:99:3c:0d:8a:c6:1b:f5:
63:aa:33:22:00:41:c8:cf:ac:57:5f:26:2c:66:f9:
03:d1:0a:26:0e:76:fc:e6:25:3e:6f:a2:4e:e4:a9:
b6:72:09:b0:5b:c4:1d:8b:2b:97:11:e0:78:91:dd:
45:de:56:66:b6:2c:69:f2:73:b2:9b:a5:a6:66:a9:
0e:23:f1:d5:b4:28:47:c4:a7:a2:6e:61:a2:ed:db:
9a:fc:23:43:03:3d:7c:06:30:f8:37:06:8c:3b:86:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:0E:C4:E2:C4:78:58:96:14:77:B8:F6:24:BB:9F:8E:4C:DC:37
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cdMOxOLEeFiWFHe49iS7n45M3Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:e5:5a:97:2f:b8:f2:70:c0:30:2a:59:93:7d:2c:d3:44:2c:
ed:61:ea:54:76:31:21:30:ea:69:37:87:c5:a1:ce:09:63:28:
0b:22:30:c3:61:84:af:b2:78:db:d2:1b:b0:a6:6c:57:92:ad:
c3:a4:cd:6a:1e:7f:ac:16:23:4e:70:94:8f:b7:00:12:c5:f5:
60:07:46:3e:4e:1f:17:76:ac:66:fc:3a:a0:33:5d:9e:00:c2:
c0:4e:d0:82:a2:54:67:92:59:e5:55:08:53:be:b2:20:16:0a:
93:43:b9:78:3b:2d:97:06:e4:36:2a:24:45:eb:f5:ac:6a:82:
17:98:44:65:6d:48:fa:6d:9e:75:36:ab:7a:b2:4a:2c:62:d8:
82:88:12:94:be:18:c2:b1:01:0e:2d:ae:9e:a3:04:8d:b4:f7:
81:8d:bf:bb:d0:e0:a3:eb:d7:ad:88:db:3d:e4:f6:72:9e:1d:
ac:bd:65:0f:f5:1c:f2:94:fe:3e:ca:60:0c:af:12:9e:a3:d3:
21:3e:45:f8:76:52:83:ea:00:59:db:3e:de:22:db:7c:c2:0a:
47:f2:f3:a7:61:ca:80:44:6d:ab:f9:0b:8d:0f:3f:99:91:53:
24:7d:df:0d:55:1e:b2:43:39:d7:24:68:a9:42:7f:98:21:53:
ec:f8:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:49 2025 by rpki-client