Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eJBB5y6cJ3VQCdUL-DLmgaQC9Wk.roa
File: eJBB5y6cJ3VQCdUL-DLmgaQC9Wk.roa (raw, json)
Hash identifier: 2IJIh0jUvkmgXSeK36HJTPmovBn0ya9dv/miR0hRK0Q=
Subject key identifier: 78:90:41:E7:2E:9C:27:75:50:09:D5:0B:F8:32:E6:81:A4:02:F5:69
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369EF5F3E030466C6206C6F0D3746F9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eJBB5y6cJ3VQCdUL-DLmgaQC9Wk.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 45.88.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ef:5f:3e:03:04:66:c6:20:6c:6f:0d:37:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=789041e72e9c27755009d50bf832e681a402f569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:4d:29:3b:da:61:be:1b:aa:9f:b2:00:3b:
29:35:b7:45:a3:3d:f0:22:1b:7a:0f:c1:37:25:bb:
a3:d2:38:08:0b:cf:03:75:b0:b8:a7:9a:03:80:ad:
3d:00:5a:6b:3d:e0:e6:75:27:d7:99:1b:05:e3:d1:
7e:27:0a:57:59:8c:14:c5:e9:16:bd:a5:4d:6b:34:
30:db:db:db:e6:a5:d1:37:8d:25:87:2d:69:ba:9a:
7f:dc:21:f6:95:d5:49:c2:91:b9:35:5c:fa:54:0e:
48:f4:e6:17:2a:4f:54:fc:bb:fe:cf:4f:4d:53:06:
79:3a:20:6a:53:d4:97:87:a0:62:7f:1c:10:ff:a0:
e6:bd:f1:66:f9:49:9e:49:63:68:db:d7:d2:92:39:
6b:2b:81:a9:6c:93:fd:ad:8f:50:cc:06:be:62:fb:
1d:78:88:8c:26:2b:b8:7d:e6:da:00:fb:bf:d3:09:
2a:77:9a:a6:a5:b3:80:de:e8:ca:7f:61:8e:22:36:
ef:b6:42:43:c4:05:8c:a6:84:da:ae:5a:c3:e1:33:
41:b2:8e:85:8e:1c:00:45:7b:d4:19:6e:19:d4:80:
21:45:ed:00:e7:a4:75:bd:7a:a9:0b:91:29:4a:b2:
7b:3d:25:86:2e:54:74:ed:28:83:7b:cb:27:5e:6a:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:41:E7:2E:9C:27:75:50:09:D5:0B:F8:32:E6:81:A4:02:F5:69
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eJBB5y6cJ3VQCdUL-DLmgaQC9Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:59:3b:76:b0:14:53:2a:f8:cb:01:fe:1a:60:06:bf:ba:91:
fc:09:47:3f:89:69:a5:0b:28:75:af:a8:45:5b:e0:67:e7:2a:
2b:fb:86:b8:f7:f2:23:c6:d9:63:79:d8:7c:c2:74:cf:29:9d:
0e:eb:3c:43:c9:7b:36:ed:eb:fa:12:f4:bc:9f:bc:77:56:7d:
00:3e:ac:6d:26:d7:68:d1:eb:33:8b:34:7c:02:2e:30:06:bd:
3e:42:c9:6d:2b:1d:7a:d2:a4:4c:f1:d0:b9:10:ad:88:a8:5e:
26:ef:3a:ff:70:45:ba:ff:97:eb:ad:c2:c3:f9:7b:04:44:87:
90:83:29:bf:6d:52:78:21:21:d6:62:a2:7e:b7:b5:92:7a:98:
53:33:28:52:b5:c5:40:51:95:54:c4:c2:34:55:d9:55:70:37:
fb:2a:66:43:9f:8c:38:a4:cc:ae:f2:b3:4c:50:07:df:eb:65:
d9:39:cb:a8:26:de:da:f5:c2:53:2b:8b:d6:74:24:f9:0a:83:
a7:e5:f7:11:fa:5e:46:e6:8c:6c:f4:5c:1c:a5:e3:06:70:54:
1a:f5:69:9c:5f:8d:0d:52:55:8f:8c:1d:df:20:61:48:60:91:
69:6f:2e:73:8f:09:23:54:10:76:a3:6b:11:6d:f5:5e:76:7f:
f5:90:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:46:47 2025 by rpki-client