Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/c_W11dB19ZdeKd0Hkukk0DBHzss.roa
File: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (raw, json)
Hash identifier: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=
Subject key identifier: 73:F5:B5:D5:D0:75:F5:97:5E:29:DD:07:92:E9:24:D0:30:47:CE:CB
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 0194266A2FB83C899FADB70A42204DD1BC2A
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/c_W11dB19ZdeKd0Hkukk0DBHzss.roa
Signing time: Thu 02 Jan 2025 09:48:00 +0000
ROA not before: Thu 02 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35112
IP address blocks: 45.8.124.0/24 maxlen: 24
45.8.125.0/24 maxlen: 24
45.8.126.0/24 maxlen: 24
45.8.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:2f:b8:3c:89:9f:ad:b7:0a:42:20:4d:d1:bc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jan 2 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f5b5d5d075f5975e29dd0792e924d03047cecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:dd:01:85:2d:12:b7:12:d9:81:9f:c9:1a:
ea:ab:0c:d0:8a:7d:11:4c:80:e4:3a:dc:fb:8b:56:
58:4d:00:ed:6a:03:16:82:da:f8:7b:7a:34:21:24:
af:52:18:52:e6:58:c6:63:ec:6c:db:2b:7b:02:86:
7c:11:05:e8:0e:8f:f7:62:b6:3b:4f:e1:29:20:ad:
7d:78:d1:27:f9:7b:81:50:e1:b0:8e:74:5d:76:a1:
96:1b:3a:65:4e:cf:f3:0f:88:23:2d:44:8a:47:14:
fe:63:f8:32:c1:ee:b6:62:25:00:7e:a4:05:9d:6c:
24:ff:dd:e8:03:01:b9:23:3a:17:ca:b7:9c:ee:5b:
0a:39:de:0e:89:d9:2d:6a:af:d4:ef:4f:bc:2a:f4:
73:6a:12:c1:dd:dd:26:d5:49:c5:6d:c6:eb:6e:77:
2b:ec:03:04:5e:e3:f8:9d:be:04:77:83:b1:4f:8a:
65:bc:b9:63:17:17:b6:f6:56:bd:3b:da:17:2c:15:
ef:50:d1:27:03:23:bb:e8:ee:55:1a:c5:02:05:e6:
3f:e8:05:a9:1f:5d:99:38:e3:47:27:40:ee:28:4a:
10:68:b0:d4:70:64:1e:82:00:ac:f9:87:63:7a:92:
12:d8:64:df:cd:3e:be:38:e8:c5:21:81:65:5f:df:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:B5:D5:D0:75:F5:97:5E:29:DD:07:92:E9:24:D0:30:47:CE:CB
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/c_W11dB19ZdeKd0Hkukk0DBHzss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
59:9d:df:32:25:b2:fd:99:1f:50:5f:11:ef:68:f3:0a:85:9d:
23:85:64:82:a7:97:6d:af:dc:b9:0f:49:93:26:91:c7:63:8c:
79:4b:bb:b1:8d:ce:72:73:d6:f8:2d:c5:46:9c:f8:17:a4:9f:
f8:79:e9:bc:2c:a4:03:b3:0f:23:ec:d5:04:9d:9d:73:06:9d:
1f:32:57:69:15:b0:17:bd:c7:7f:dd:41:45:43:69:20:50:d7:
32:6e:22:ad:08:3f:0e:6b:29:f0:3c:af:6e:7c:a2:72:6c:58:
93:c2:c0:7f:f5:6e:e8:fc:a2:fa:8c:4f:be:4c:d8:60:2b:93:
c8:d9:bf:42:a4:a2:27:46:cf:ca:38:c5:db:28:d4:2c:05:16:
31:50:99:81:65:7c:be:46:9a:76:b2:07:18:90:a6:e4:6f:47:
ec:2b:05:72:5f:87:ac:22:aa:91:30:f7:b3:e4:a1:77:67:4e:
6d:fe:25:2f:da:b5:a8:eb:80:b2:52:49:5e:77:4d:97:66:0c:
fb:33:d5:a1:16:9c:d6:b3:18:64:9e:b5:19:83:91:8f:31:2d:
ad:b0:04:bc:12:a7:44:62:91:32:8e:e0:d2:3d:01:45:8f:08:
e7:a0:33:6d:e6:63:87:c9:76:fb:07:f0:b2:43:6a:e0:f0:88:
88:a0:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:32:11 2025 by rpki-client