Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/m7w43aC0r7fpecfk5AR-baLyzjA.roa
File: m7w43aC0r7fpecfk5AR-baLyzjA.roa (raw, json)
Hash identifier: PENMFKUo4tVeZd69qGE3VC7knWBqQaH+ik7GC1wVNRQ=
Subject key identifier: 9B:BC:38:DD:A0:B4:AF:B7:E9:79:C7:E4:E4:04:7E:6D:A2:F2:CE:30
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274894143981F08ECB433C0A97791628
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/m7w43aC0r7fpecfk5AR-baLyzjA.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149440
IP address blocks: 45.134.36.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:94:14:39:81:f0:8e:cb:43:3c:0a:97:79:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bbc38dda0b4afb7e979c7e4e4047e6da2f2ce30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:5b:5f:b8:60:c7:b0:db:d1:a5:7f:a0:eb:
5d:25:75:f4:62:51:89:1b:7d:1c:99:92:85:9c:7e:
81:b0:1d:1f:64:45:5f:00:a3:29:2c:66:ab:a0:db:
62:fb:d2:74:d4:49:5f:a8:5c:68:93:57:1c:f3:f3:
71:f9:d2:55:a7:5b:98:39:4e:85:03:16:98:1b:5d:
64:38:37:2d:5f:d9:43:d6:ed:67:1c:2b:4f:86:31:
63:1c:16:74:fd:b9:93:d8:f5:dc:61:1b:4c:f3:da:
8c:b9:f9:35:b2:87:db:30:33:ca:e7:94:60:b7:40:
79:22:51:30:41:c4:c2:f6:80:d0:9c:5d:c8:82:9b:
90:3b:8f:d9:ce:2a:d8:ee:16:2d:a7:6f:7e:a0:ed:
77:7f:8d:9d:d4:f2:b9:6f:13:dc:5e:4a:99:ea:9b:
4c:38:e3:b6:68:39:1c:da:b8:be:ff:c3:3a:b5:8d:
90:bf:c8:31:2c:59:6b:80:20:f0:87:3e:d5:57:e0:
9a:74:8c:d9:8f:2f:3f:b7:a5:2e:13:c9:0a:0c:a1:
1f:d4:da:20:be:d4:9a:9d:67:36:b9:f6:7b:27:09:
6c:c4:8d:1c:c8:cb:d4:7c:84:06:d6:b6:c0:60:d9:
4b:fd:f2:30:9b:f3:90:5b:1c:ed:72:e7:9c:a6:f9:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:38:DD:A0:B4:AF:B7:E9:79:C7:E4:E4:04:7E:6D:A2:F2:CE:30
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/m7w43aC0r7fpecfk5AR-baLyzjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
185.132.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:88:4d:b9:d7:67:5b:ff:36:01:8d:78:87:b5:66:10:f9:10:
aa:2a:2e:be:2b:b8:1c:92:cb:07:1d:6a:12:19:03:3b:da:7e:
43:8f:af:03:26:98:a2:1b:c1:fe:97:91:0c:e0:e3:33:92:ac:
fc:b2:2f:8a:ae:33:1e:3b:7a:3a:be:0e:d1:a2:4e:fc:80:8d:
ce:d1:71:c7:35:df:4d:ca:bd:7f:2a:44:af:1b:f5:08:92:f7:
55:2d:28:1c:cf:80:08:d1:e8:ee:bd:59:fe:77:88:aa:f6:25:
63:11:1c:52:cf:15:a6:60:c4:13:2a:7f:94:03:02:78:6c:1f:
67:ab:c9:17:41:b7:c3:33:dc:4e:27:2d:7e:0a:cf:ba:db:94:
4e:db:bd:c3:00:c1:5f:4e:c9:db:52:63:45:17:20:aa:23:40:
ef:0c:87:32:6b:fd:b5:6d:1b:f0:af:af:eb:19:81:74:51:33:
b8:da:43:d6:93:d9:5b:46:d9:46:92:4d:fe:f8:1e:1f:e3:c7:
fb:10:79:2f:6a:f4:2f:ed:e7:26:f5:cc:7b:c4:9f:43:36:3d:
64:de:c8:39:c3:24:80:13:45:51:2c:24:2d:44:01:6e:08:08:
fa:fa:9b:5d:b6:b5:ad:f0:13:d3:1b:f4:5f:85:84:cb:71:78:
ef:4c:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:10:57 2025 by rpki-client