Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/7mmdjWWJmGS-vmCt9zKLVanQOig.roa
File: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (raw, json)
Hash identifier: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=
Subject key identifier: EE:69:9D:8D:65:89:98:64:BE:BE:60:AD:F7:32:8B:55:A9:D0:3A:28
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0194221F933DD227C62662EDC5A501862BC9
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/7mmdjWWJmGS-vmCt9zKLVanQOig.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 45.159.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:93:3d:d2:27:c6:26:62:ed:c5:a5:01:86:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee699d8d65899864bebe60adf7328b55a9d03a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:6d:95:05:29:c9:b0:71:01:14:78:db:d9:
c1:cb:99:fc:cb:46:9b:15:3e:a9:d7:01:0c:4a:c7:
26:f6:66:ab:9a:09:24:41:8f:39:d3:2e:52:a2:e7:
e7:f1:1d:26:f2:1e:79:89:50:a2:4a:d8:34:9c:fe:
4c:f1:a1:a4:f9:77:30:89:86:8a:41:61:a1:f6:b7:
40:1d:e2:24:6e:e5:8e:8c:68:a8:22:38:73:ee:28:
31:47:2f:76:8b:d7:d0:71:9e:a0:b6:93:7a:b6:64:
96:5e:8f:1c:0b:da:cb:5a:20:bf:bf:7a:9c:e9:03:
e7:6d:ce:a0:3d:5e:4e:cd:48:ab:d1:00:e7:8a:20:
a5:e9:ef:f0:42:4b:d5:e8:03:d0:5b:72:6a:a7:a6:
79:17:48:91:87:7a:30:35:e1:0a:a9:80:80:3b:be:
d2:02:49:ef:83:ea:a0:40:7b:01:cd:a0:61:27:2e:
d7:a5:89:d3:4f:58:9b:15:b6:3e:60:20:00:71:df:
8e:00:1e:38:24:0f:76:25:54:28:14:4f:a6:d5:14:
c3:90:23:ef:10:e5:54:2f:9d:e6:ab:d7:99:7f:ca:
78:86:9c:d2:e8:8b:1d:98:d0:c7:10:6f:6a:70:a0:
74:b4:bc:8b:8c:7e:af:3e:8b:60:9b:44:4e:7b:ee:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:9D:8D:65:89:98:64:BE:BE:60:AD:F7:32:8B:55:A9:D0:3A:28
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/7mmdjWWJmGS-vmCt9zKLVanQOig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.14.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8e:57:76:24:c7:60:bc:2e:ab:a3:2a:cd:a9:fd:f6:6d:97:
c9:76:ae:28:da:cf:ae:10:21:ba:a9:d1:39:73:fe:7a:31:7a:
ba:eb:09:19:89:94:8e:e3:58:7a:a2:4f:83:ad:65:a7:1c:bc:
01:03:28:a9:33:94:b0:ca:d2:dd:0f:79:1d:bc:0f:db:d2:4a:
5b:f7:c2:0e:8d:4b:61:0a:40:d1:b7:cb:e7:97:35:50:ea:b6:
08:b1:55:ba:a6:b0:96:ea:11:b3:0b:c8:27:d1:22:c3:b9:34:
61:77:8e:62:ef:b2:e3:74:d2:5a:1c:a5:ed:89:20:df:37:2d:
14:c8:06:53:9b:e6:c0:ba:c8:f8:43:4c:0d:8b:9e:db:51:51:
78:eb:64:50:9f:c9:5f:93:0e:3b:8f:79:32:56:73:b6:2d:d4:
5a:b2:38:4a:d6:9a:fa:ce:61:10:7a:0f:cf:f6:65:f7:0c:51:
47:18:5a:7d:b7:10:0e:83:0b:f6:51:32:a4:7a:f4:9c:e7:65:
c9:de:99:37:35:62:6f:9a:c2:77:a2:74:0a:c3:bf:7c:c6:f6:
7a:ab:6a:80:58:bb:4a:13:af:c8:a6:8e:5b:8f:63:39:01:6b:
55:85:70:fd:6a:a9:33:cc:d5:bc:81:cb:c3:0c:68:fc:82:83:
d6:78:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:00:09 2025 by rpki-client