Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/I8DMWQAbEysV4PDmbb3bRruhjec.roa
File: I8DMWQAbEysV4PDmbb3bRruhjec.roa (raw, json)
Hash identifier: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=
Subject key identifier: 23:C0:CC:59:00:1B:13:2B:15:E0:F0:E6:6D:BD:DB:46:BB:A1:8D:E7
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019425FC8EEB13B4CEBC280ED96651A5F36D
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/I8DMWQAbEysV4PDmbb3bRruhjec.roa
Signing time: Thu 02 Jan 2025 07:48:16 +0000
ROA not before: Thu 02 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204798
IP address blocks: 45.128.120.0/22 maxlen: 24
45.128.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:8e:eb:13:b4:ce:bc:28:0e:d9:66:51:a5:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Jan 2 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23c0cc59001b132b15e0f0e66dbddb46bba18de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:12:cc:4b:3f:ea:79:fa:a9:ec:7a:e3:a3:
22:9b:2e:03:dc:9f:a0:4e:0f:1f:b8:b8:d6:35:9d:
1b:cb:9c:94:96:80:96:47:5f:03:90:15:e4:fb:da:
b6:0a:c3:86:92:54:c5:85:43:2a:ae:26:ed:41:ce:
4b:75:c7:8b:c2:a3:62:9d:fd:03:77:3a:31:26:83:
2f:18:7b:b1:c8:dd:fc:6e:dc:f0:12:58:aa:7c:e1:
9d:0b:81:54:ae:7d:ce:f3:cd:8d:12:bb:85:15:23:
a8:ba:2d:23:8e:92:d4:bd:9b:7a:0c:d9:25:a6:bc:
e9:7b:43:b8:53:22:2d:96:3e:c0:42:de:ea:ba:3e:
ac:52:1f:26:42:51:7c:d1:5d:a5:26:c0:08:40:01:
fd:f5:2f:f7:b0:e8:cd:db:f3:4c:6f:72:6c:07:09:
1f:a5:37:03:72:69:a7:c7:ac:7b:7d:7b:46:52:84:
83:54:29:b0:50:51:02:d4:28:a7:2f:1f:dd:9c:b9:
6c:2b:21:e0:a8:36:d4:0c:f9:f3:15:2e:07:d7:00:
b5:c9:98:de:c2:ce:30:40:d4:84:fd:48:0a:17:73:
ef:20:32:e3:46:85:09:29:8d:67:7c:3a:8d:64:69:
02:4f:f1:5d:bc:81:7f:78:b5:94:1a:5a:8b:3b:98:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C0:CC:59:00:1B:13:2B:15:E0:F0:E6:6D:BD:DB:46:BB:A1:8D:E7
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/I8DMWQAbEysV4PDmbb3bRruhjec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
66:fc:d2:d8:65:25:2e:12:48:1f:a6:f6:07:7d:99:a5:f5:3f:
62:51:18:d7:c5:a4:e7:a6:6d:d2:46:0c:62:86:58:de:8b:38:
86:92:e0:e0:4a:97:6e:d6:25:33:20:51:00:5e:06:b2:58:16:
9e:98:72:f1:d6:12:24:da:6e:3d:a2:a3:16:47:d0:c9:bb:41:
a9:7b:97:80:ab:19:b1:5d:50:76:a9:ae:e4:f6:64:eb:25:c6:
7c:69:87:54:50:e1:c6:9c:1d:68:c1:35:e9:e4:24:24:de:2e:
3d:84:7b:50:aa:27:d0:e9:fd:44:1a:76:04:cd:53:80:5e:66:
3f:65:51:e5:c7:fc:4d:4f:df:90:07:9b:ef:77:07:1d:0a:23:
c7:00:63:4b:d6:80:52:06:c5:5d:ce:fb:12:dc:02:6f:c8:ec:
8d:be:10:72:b4:ec:ba:03:7b:06:14:d3:18:19:f6:a9:c2:47:
14:8e:01:f7:38:7b:6c:04:6f:84:37:f8:e4:00:84:50:34:a4:
2f:32:f2:32:8c:f6:1b:6d:ea:3f:a1:1d:1c:c0:ec:e5:47:c8:
d4:97:b9:a8:e5:32:c0:71:db:34:17:5c:ca:7f:ce:ce:e5:7c:
6f:6a:5f:e7:cd:3b:49:20:1c:65:3d:9c:74:04:08:89:fc:f2:
ef:70:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:29 2025 by rpki-client