Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/Da5ukIODRFZkZgl7acW52LzBL34.roa
File: Da5ukIODRFZkZgl7acW52LzBL34.roa (raw, json)
Hash identifier: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=
Subject key identifier: 0D:AE:6E:90:83:83:44:56:64:66:09:7B:69:C5:B9:D8:BC:C1:2F:7E
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019424B3DD2F9926E974391CFE8D39006C77
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/Da5ukIODRFZkZgl7acW52LzBL34.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15542
IP address blocks: 91.230.33.0/24 maxlen: 24
91.230.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:dd:2f:99:26:e9:74:39:1c:fe:8d:39:00:6c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dae6e90838344566466097b69c5b9d8bcc12f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:98:7c:2f:54:b5:bf:82:fb:c1:ec:5e:15:
df:9d:25:0d:f2:bd:57:7f:96:21:1e:c8:6a:68:5e:
cc:47:82:73:ae:4f:51:89:46:05:84:ac:fd:a4:2c:
3d:19:43:a5:42:76:dd:a6:40:e8:36:32:25:e7:8e:
4b:61:e4:fd:4c:86:99:d4:f9:83:31:74:ec:ce:38:
23:31:9f:d9:08:a1:95:03:3f:7f:16:b8:56:2b:92:
ac:43:9b:d7:1e:49:ab:18:b9:8e:3e:24:00:e8:ba:
7b:d0:ca:b2:0d:09:55:cb:39:62:0b:f7:2e:89:3f:
1c:66:d8:c1:ca:e3:3b:5f:d8:34:bc:4a:c6:28:94:
e7:66:66:30:3a:34:f9:08:f6:4a:2e:31:ae:5b:a7:
d9:2b:2c:01:1e:bf:8d:f1:e7:da:d5:cd:fd:ab:68:
44:6b:51:13:ba:d0:e6:aa:7f:16:ce:04:5b:f5:94:
7d:a6:da:be:43:8f:f4:bf:f3:69:fb:4a:f7:44:f7:
1f:d2:06:9b:45:9a:62:64:f5:15:40:c3:b2:4c:35:
e4:60:7e:a4:1f:e9:47:7e:b5:5c:f8:d4:07:1d:3c:
16:88:f4:47:3d:6a:0c:67:01:3c:1f:5d:82:07:03:
b3:3d:aa:13:a9:f3:08:ce:83:23:14:e6:e5:d4:1a:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:6E:90:83:83:44:56:64:66:09:7B:69:C5:B9:D8:BC:C1:2F:7E
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/Da5ukIODRFZkZgl7acW52LzBL34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.33.0-91.230.35.255
Signature Algorithm: sha256WithRSAEncryption
a5:4b:d6:97:8d:63:52:e9:a6:ce:93:f5:aa:e7:12:8c:cc:59:
ee:ec:34:c4:08:2b:21:86:83:4b:d1:5d:6c:3e:a1:35:67:46:
12:c9:3a:06:36:3e:3c:1d:76:42:29:29:e9:2a:f9:0f:05:71:
7e:92:fe:03:ed:b4:b3:b5:07:a8:a4:bf:38:5b:16:90:c7:fe:
c3:bb:61:78:3d:f0:e8:7a:57:72:f1:be:48:be:87:dd:e1:ea:
45:8c:47:6e:ff:6a:60:22:11:c3:ce:54:61:dd:36:d0:d3:d1:
ee:98:f3:9b:ae:08:ab:d9:c5:3e:32:d4:48:3f:f5:de:ad:e1:
fe:1b:3c:02:09:af:f3:e4:f1:81:68:18:a5:3a:d0:6d:52:b4:
1e:95:99:9f:e5:ce:05:b6:ab:76:96:24:1a:e8:df:fc:bc:1f:
71:aa:4e:d7:49:56:a3:f0:f5:28:26:a6:6e:ee:5c:bf:41:bb:
a7:e9:3f:8a:df:cd:d9:68:e8:68:12:65:61:7e:7b:df:d6:a0:
95:b5:24:d3:fd:c5:5a:36:b5:56:99:3b:ab:ba:b5:7e:fa:c4:
a0:7f:7b:76:02:2c:59:46:26:d8:ac:d9:38:a7:cb:f9:d9:45:
36:c5:6b:5c:80:60:3e:05:50:d0:9a:88:bd:78:c0:d8:39:75:
63:ec:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:03:55 2025 by rpki-client