Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AZC62770KiKI8dqBMwhR-AAzfRA.roa
File: AZC62770KiKI8dqBMwhR-AAzfRA.roa (raw, json)
Hash identifier: zOkUwCGYZe4NMLVCX8y/KIwY9vaHpv9HqkSIKpx5lx4=
Subject key identifier: 01:90:BA:DB:BE:F4:2A:22:88:F1:DA:81:33:08:51:F8:00:33:7D:10
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB56D6AD09B23C3DE8F7B4D32C8D7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AZC62770KiKI8dqBMwhR-AAzfRA.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60446
IP address blocks: 45.138.183.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b5:6d:6a:d0:9b:23:c3:de:8f:7b:4d:32:c8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0190badbbef42a2288f1da81330851f800337d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:43:20:2a:73:16:c7:d3:36:08:cb:29:b0:
e9:7e:19:39:5b:a9:84:c2:c8:f4:89:92:20:4d:dd:
76:b6:5b:8e:ae:eb:30:59:9c:30:05:97:42:01:17:
94:30:1f:c6:b8:ba:f6:98:ca:5c:52:7a:6e:5e:35:
9e:3d:30:cd:24:e5:a2:49:4c:44:d3:e8:a0:bd:e8:
ae:42:13:b5:99:78:34:5a:32:64:d1:08:45:53:6c:
e0:c7:73:6f:b3:80:af:2e:c7:c4:3e:a0:5d:46:6a:
5d:a5:80:dc:b1:fd:95:d1:69:6c:6c:15:2d:1a:e3:
70:8c:e3:b8:4a:99:a4:9f:d4:5a:86:81:c0:99:d4:
0d:72:90:d4:2f:37:ad:95:3c:af:b8:3b:0b:0a:13:
56:d6:aa:46:ee:47:d5:df:83:4f:e9:9b:95:5c:de:
12:31:64:34:f9:ef:3e:eb:aa:b7:63:fb:c3:7a:68:
46:1c:dc:7b:45:9e:cb:03:0c:c5:4c:a1:b5:2e:da:
09:18:43:e8:12:d2:c6:ce:9f:80:79:33:1e:03:da:
a5:1f:33:ff:1f:8e:01:ad:2d:25:d7:69:eb:2d:ae:
dd:ec:48:ea:41:49:bc:47:d0:84:4a:06:79:d2:4d:
3e:01:eb:28:99:a4:eb:13:83:ae:a3:ec:67:5e:c9:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:BA:DB:BE:F4:2A:22:88:F1:DA:81:33:08:51:F8:00:33:7D:10
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AZC62770KiKI8dqBMwhR-AAzfRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
45.144.214.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d3:9e:ae:e9:bb:c0:40:c4:81:10:1f:1f:bb:bf:57:6d:2e:
7c:26:48:5d:a5:fd:88:0c:d3:4c:77:b1:12:e4:3e:b7:3e:89:
19:36:35:59:48:08:05:e8:cd:75:fc:8a:2b:f6:03:ea:76:8e:
a7:60:d4:15:6a:4b:43:25:b8:a5:fd:ca:b3:76:18:b1:6e:c1:
fa:03:1b:d0:1f:41:21:1b:1c:bb:8f:a5:c2:03:75:e6:9a:dc:
5f:0a:7b:46:1f:28:79:33:4d:43:73:b5:4a:23:0c:94:e4:04:
cc:03:9d:a6:fb:0a:e4:00:78:5e:c1:7e:d6:d2:a4:f6:ec:3e:
8d:f4:06:eb:32:43:54:d0:97:c9:4d:a8:16:44:2d:4e:c2:ac:
ba:01:58:6e:09:7e:38:e5:db:e8:d3:60:91:6b:dc:25:6a:45:
f6:4f:e7:b2:94:90:0d:b8:d3:25:7a:81:87:62:ce:1c:f3:46:
52:cd:96:45:ae:10:8f:e4:da:56:cb:1d:22:5d:c4:3f:5d:b1:
f6:eb:78:68:e7:69:c9:8c:02:87:ed:5f:10:a1:6d:3d:45:64:
60:3c:82:df:d5:af:30:b2:cb:a0:cc:ff:e6:fc:71:00:6d:e0:
f7:68:34:20:67:ce:e7:64:71:2e:3e:59:65:6f:fb:a8:d5:37:
19:41:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:39:31 2025 by rpki-client