Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/iuZIYZ0Q_9xllOx0JShQ49jTsMQ.roa
File: iuZIYZ0Q_9xllOx0JShQ49jTsMQ.roa (raw, json)
Hash identifier: e6DjFwBCGOrJwzBM1pVGgmVe+0POPsOMUBPxv2SOmLA=
Subject key identifier: 8A:E6:48:61:9D:10:FF:DC:65:94:EC:74:25:28:50:E3:D8:D3:B0:C4
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019424454C05108C9A0B19F9DAEB6AA80C69
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/iuZIYZ0Q_9xllOx0JShQ49jTsMQ.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 45.155.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4c:05:10:8c:9a:0b:19:f9:da:eb:6a:a8:0c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae648619d10ffdc6594ec74252850e3d8d3b0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:4a:ab:e3:dd:90:5c:36:ec:d1:4a:08:c6:
93:89:b4:1a:4d:3c:ee:76:0b:e7:a7:f5:4f:a4:67:
dc:5f:a7:e9:33:1c:09:10:0f:a2:57:37:9d:37:7f:
c3:40:5f:9d:ad:27:a3:20:6b:ea:9b:77:ce:93:ce:
d4:3d:62:e9:0a:82:ac:8a:70:f5:ef:ba:73:98:98:
46:2b:de:df:83:5a:31:a0:b1:28:32:46:2c:87:6e:
ce:28:c4:82:88:66:7e:9f:80:7d:44:61:12:7b:fd:
d5:19:61:15:16:74:3f:2d:14:7b:8f:36:2a:62:73:
bf:24:a9:fc:ed:e4:f0:a4:b1:d2:52:a6:90:b5:57:
a3:54:15:81:89:aa:ce:b0:57:e9:d6:7e:f2:d9:44:
a9:c9:9c:25:fe:2a:a4:30:c8:30:b6:4b:83:7d:80:
c1:a3:f2:61:bf:d9:91:a3:7d:1c:36:e3:eb:90:f5:
88:bb:89:96:a3:e9:58:ea:22:72:37:4a:4a:4d:7c:
b1:6b:ee:91:8d:88:df:6e:28:4c:a2:0d:04:53:95:
99:bd:a7:3c:dc:24:52:1b:e9:1d:ab:58:7a:85:f6:
af:ab:7a:22:c1:27:19:f0:bd:37:9f:ef:9a:a9:d5:
63:a6:55:25:bc:f3:8b:f5:9f:ce:0a:59:6b:1c:b0:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:48:61:9D:10:FF:DC:65:94:EC:74:25:28:50:E3:D8:D3:B0:C4
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/iuZIYZ0Q_9xllOx0JShQ49jTsMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ec:51:c4:74:73:4f:dc:f7:d5:51:72:6a:2f:4a:7e:75:32:
b3:36:1a:32:4f:35:0a:f3:6e:69:33:b6:ff:3e:3e:d4:50:1e:
43:f8:86:ac:60:3b:cd:d4:71:c9:24:fc:eb:34:80:57:86:a9:
39:73:6f:a7:0a:5f:ca:92:d0:a3:3d:7b:b6:18:cc:0a:63:63:
c2:54:3f:13:39:85:00:80:58:f0:86:42:82:3e:92:61:4d:a8:
8c:1e:e5:59:94:a0:00:16:dd:d8:ec:33:97:a1:9d:50:8a:e3:
91:fb:98:72:cd:62:5e:17:ec:f8:3e:33:97:ce:c0:30:e8:66:
be:00:69:e0:7e:44:33:82:49:3a:d5:b2:97:5f:ad:a6:a3:74:
06:0a:ff:af:74:40:3e:e5:cc:10:24:a2:9c:9d:46:a6:2e:d2:
98:39:b8:f4:ed:67:f2:d3:fe:c8:f0:28:30:ff:31:dd:e0:10:
95:1f:1c:98:67:81:31:f9:5b:29:f1:bd:5d:65:b5:ef:55:f6:
01:a9:52:7d:81:99:55:82:8c:c5:70:00:59:a6:11:f7:0a:ba:
ac:a6:89:cf:68:7d:44:7c:79:b1:da:85:87:ed:b4:76:fe:4e:
46:89:7c:5a:de:9b:60:22:36:57:05:39:38:e6:89:c8:a0:e1:
b6:23:2d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:47:44 2025 by rpki-client