Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/dDuXmy2-kOiyveIRPNO2zv9O6K4.roa
File: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (raw, json)
Hash identifier: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=
Subject key identifier: 74:3B:97:9B:2D:BE:90:E8:B2:BD:E2:11:3C:D3:B6:CE:FF:4E:E8:AE
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8F242DCF05593AA9278CDEB93444
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/dDuXmy2-kOiyveIRPNO2zv9O6K4.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 45.133.192.0/22 maxlen: 24
45.138.84.0/22 maxlen: 24
45.146.220.0/22 maxlen: 24
141.98.212.0/22 maxlen: 24
193.36.116.0/22 maxlen: 24
195.80.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8f:24:2d:cf:05:59:3a:a9:27:8c:de:b9:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=743b979b2dbe90e8b2bde2113cd3b6ceff4ee8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:88:0a:f9:3f:e4:76:c0:ab:cc:d5:bd:28:
fe:2b:bb:5c:6c:4e:fb:2f:f0:3d:9f:ab:f4:88:c2:
24:35:ae:f5:21:1e:68:a2:b2:a9:46:d8:a6:47:22:
8f:64:12:31:4e:aa:ee:99:c3:5c:03:08:1b:b5:bc:
7b:e9:80:fc:ca:d0:ac:ed:3e:34:0a:03:4f:b3:b4:
37:75:18:0b:70:14:81:cc:14:8a:ba:af:96:75:9a:
8f:d3:96:83:fe:6a:27:41:61:59:7d:ce:83:2a:38:
c6:9b:bf:3a:e2:94:90:23:1d:39:30:21:c9:b4:6f:
dd:3d:97:2f:fc:31:36:d5:c8:44:bc:21:d5:b3:62:
a9:67:83:77:8c:ae:d3:8e:f5:90:26:0a:e5:54:52:
0c:87:18:a0:39:48:fc:aa:70:13:80:f9:2b:fe:59:
9f:20:db:e8:3f:0d:0c:29:d8:23:88:eb:85:34:b7:
72:61:8b:c4:4b:b2:d3:c4:18:68:94:99:b3:78:14:
71:a8:b7:bc:76:30:f3:8d:e3:30:90:54:93:a7:13:
83:ac:33:73:97:ce:65:eb:e9:f1:99:cc:ec:2c:f6:
70:a6:ea:f4:ad:cf:29:f6:9b:28:fd:61:ec:dd:ae:
dd:9f:46:56:f7:27:35:c9:a4:06:56:57:c5:4c:e6:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:97:9B:2D:BE:90:E8:B2:BD:E2:11:3C:D3:B6:CE:FF:4E:E8:AE
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/dDuXmy2-kOiyveIRPNO2zv9O6K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.192.0/22
45.138.84.0/22
45.146.220.0/22
141.98.212.0/22
193.36.116.0/22
195.80.148.0/22
Signature Algorithm: sha256WithRSAEncryption
44:80:d5:19:78:e5:53:43:65:46:75:f2:34:28:b7:a7:ea:10:
b9:03:13:64:56:5b:f8:77:53:19:d3:df:fb:36:ba:dc:71:ba:
39:40:11:4c:f2:11:dd:2a:a5:c8:6b:25:01:5d:e4:eb:fe:d7:
af:c0:4e:65:44:e9:d4:52:d9:9f:37:77:bb:c6:ac:1e:a6:aa:
5d:a7:ff:dc:3a:a4:4e:74:17:db:87:dd:ff:44:d1:15:0a:2e:
eb:e4:ee:e8:fb:0c:e4:a5:6c:8c:e7:94:3b:64:03:73:60:f8:
15:c7:ae:c2:4c:d0:d7:c1:85:d6:fd:e3:bf:83:43:c7:d8:b0:
95:b8:2c:c5:c4:45:35:6a:15:ee:59:de:e0:8c:5e:89:5c:35:
41:ad:71:e2:5f:fe:db:3a:2f:07:e8:4a:49:d3:9c:13:9d:af:
a2:5a:0f:da:e4:80:1d:84:f0:cd:5d:3a:ac:17:d0:ab:99:da:
4e:d6:25:f3:fc:6c:70:4c:68:e8:25:f9:a0:c6:c3:46:bc:55:
0a:7b:11:af:a3:7e:f8:3a:f6:b1:e0:f3:a8:49:fa:74:e1:96:
a8:be:86:ce:a7:6b:89:7a:52:68:c6:ae:54:c7:20:6b:4c:84:
99:2b:d7:e5:d3:ed:ee:55:f0:7a:ae:3b:81:2e:94:38:27:fa:
cd:bd:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:39 2025 by rpki-client