Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/dIg4TNKkMSnsTJTQVJ3Ejrbskbc.roa
File: dIg4TNKkMSnsTJTQVJ3Ejrbskbc.roa (raw, json)
Hash identifier: PWSy8/5JjoBCA/zGiy62FNSv3d86zc+ySEbRw/F/ETk=
Subject key identifier: 74:88:38:4C:D2:A4:31:29:EC:4C:94:D0:54:9D:C4:8E:B6:EC:91:B7
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01946E67D8F77B6948E41D7AA145969C6AB6
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/dIg4TNKkMSnsTJTQVJ3Ejrbskbc.roa
Signing time: Thu 16 Jan 2025 09:18:07 +0000
ROA not before: Thu 16 Jan 2025 09:18:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 45.139.76.0/24 maxlen: 24
45.139.77.0/24 maxlen: 24
45.139.78.0/24 maxlen: 24
45.139.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:67:d8:f7:7b:69:48:e4:1d:7a:a1:45:96:9c:6a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Jan 16 09:18:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7488384cd2a43129ec4c94d0549dc48eb6ec91b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:c5:27:a0:a3:56:37:ba:2b:48:11:a5:84:
47:d3:8c:53:77:43:94:a0:be:7a:06:ba:e8:d6:fd:
fb:2d:40:14:64:e1:8f:07:8f:49:b1:f7:15:59:f7:
fa:3d:94:0d:9b:17:02:2f:d3:05:71:44:4f:4a:6f:
23:ec:22:29:d5:7e:5b:d8:3d:e8:53:76:91:28:ad:
21:40:d1:3c:95:e0:8b:c8:27:fa:44:49:b8:5b:c7:
65:1e:7f:da:8a:96:16:58:90:2a:69:ce:95:66:ad:
01:fc:31:b0:2f:90:43:83:13:ff:fd:10:5e:d0:ac:
b1:aa:6a:f9:0f:3a:27:c1:ca:af:49:57:3b:7b:24:
9e:70:8c:49:a1:2d:ec:54:99:0a:f3:f4:f4:f2:e2:
98:5a:8c:ef:99:d6:fc:27:f6:af:18:73:3f:6e:a7:
11:d1:ad:2c:0b:32:0c:9f:53:10:6e:99:07:e5:82:
7d:42:b4:87:bf:b9:91:bc:6a:c1:f9:63:8c:3f:3d:
d9:27:6d:cd:59:45:89:45:22:ce:7d:61:6b:8f:7a:
37:87:3d:09:ef:22:22:98:98:54:9e:6a:56:8d:b3:
4f:7a:44:18:c4:94:71:81:dc:15:ad:d1:94:29:ae:
2b:86:b7:35:d8:eb:cb:73:ca:0d:a4:d2:9f:fa:cc:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:88:38:4C:D2:A4:31:29:EC:4C:94:D0:54:9D:C4:8E:B6:EC:91:B7
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/dIg4TNKkMSnsTJTQVJ3Ejrbskbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:53:51:bf:3e:12:8d:6b:3f:73:1b:42:0f:70:93:ff:79:86:
05:42:4d:0e:70:ae:2a:48:41:73:74:3e:63:bb:75:14:ee:e2:
6e:40:4b:01:d4:32:17:72:ba:4f:95:f9:7b:fb:2f:b2:14:dc:
ca:28:60:1f:13:48:fa:a3:8d:91:41:46:1a:33:71:ee:df:17:
6c:ad:6e:1b:56:12:12:e1:7d:2d:ea:51:d8:d2:93:06:37:85:
7a:0c:af:a0:61:92:04:25:22:f9:6b:e8:e5:f4:56:3e:c8:f0:
57:c8:27:86:82:53:be:f1:ed:b5:20:b3:a8:f1:26:35:ef:3d:
57:5e:64:89:72:97:12:9b:a5:3d:7b:78:0d:63:eb:e4:09:a4:
7a:69:4d:f8:71:d6:aa:32:c0:4b:c5:6d:95:be:bf:72:4c:fc:
6d:44:9b:39:34:fa:ad:36:76:eb:02:82:d5:de:aa:41:cb:4b:
21:9e:ff:5c:1c:c9:75:ff:dd:ad:31:5e:21:cf:75:a6:2f:39:
45:cd:dc:3b:d5:2e:fc:71:3f:5a:a1:32:9f:4b:2c:96:43:e9:
2b:86:5c:cd:47:10:04:c4:d6:e8:c8:81:cd:d4:3c:25:58:41:
7e:8a:14:5c:12:1f:60:fb:c0:3b:f3:20:39:21:75:bc:f4:88:
7f:f1:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:50:34 2025 by rpki-client