Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/De225tD85-F1qbUEFGgafancbWE.roa
File: De225tD85-F1qbUEFGgafancbWE.roa (raw, json)
Hash identifier: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=
Subject key identifier: 0D:ED:B6:E6:D0:FC:E7:E1:75:A9:B5:04:14:68:1A:7D:A9:DC:6D:61
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 01942747DFA8EC95B5BB8E35B6DFDF809769
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/De225tD85-F1qbUEFGgafancbWE.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142594
IP address blocks: 45.139.225.0/24 maxlen: 24
45.139.226.0/24 maxlen: 24
45.139.227.0/24 maxlen: 24
2a04:ff00:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:df:a8:ec:95:b5:bb:8e:35:b6:df:df:80:97:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dedb6e6d0fce7e175a9b50414681a7da9dc6d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:78:e4:9b:16:42:00:b0:6a:dd:24:96:50:
5d:5a:a9:f9:d2:bf:9f:57:96:67:72:94:2e:4d:aa:
a0:09:2b:aa:9f:ad:79:77:79:b2:b7:bc:65:2e:ba:
6e:ee:94:d3:30:74:78:cd:61:d9:6c:49:b0:b2:7c:
68:55:b1:0f:5a:48:2f:16:2b:e1:da:a7:0a:ca:25:
28:13:32:ec:74:f2:5b:2a:28:76:e9:ed:a8:e6:89:
35:7f:f1:f7:b8:f8:c0:43:56:78:18:8c:c3:50:8c:
6a:11:73:04:87:05:d5:a5:3a:d7:bb:71:5c:c4:be:
5b:4a:9c:83:5d:41:d9:e8:6b:18:b8:38:b5:dd:b1:
15:3a:ed:0a:0b:35:9a:b1:56:b8:f9:23:c6:97:bd:
0b:48:27:4d:f1:d0:7f:00:0f:9f:19:b0:9c:e5:11:
fe:ce:bd:ac:98:4d:a6:fb:18:6f:e7:66:1e:c6:a2:
19:18:00:aa:8f:6b:20:99:da:01:7e:b8:e5:f3:ef:
21:53:ea:c2:65:8a:e4:d5:b0:31:5c:50:ff:64:38:
5f:13:96:e4:83:9e:13:34:cb:66:aa:8b:bd:42:da:
91:a5:96:c9:ee:ea:85:af:1c:06:24:89:1c:8c:61:
90:64:7d:db:f4:74:70:5d:d7:13:1f:d6:c5:22:c7:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:B6:E6:D0:FC:E7:E1:75:A9:B5:04:14:68:1A:7D:A9:DC:6D:61
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/De225tD85-F1qbUEFGgafancbWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.225.0-45.139.227.255
IPv6:
2a04:ff00:800::/40
Signature Algorithm: sha256WithRSAEncryption
4f:b0:c6:b8:d0:11:f3:ef:76:48:8a:d7:52:21:c7:a1:d3:3a:
b6:19:33:c5:15:31:51:36:99:ca:e5:08:ee:a6:1e:20:09:67:
9d:a7:b0:fa:3d:8e:9b:c3:05:5d:fc:2e:ab:75:0d:2a:d5:ad:
1b:ba:0a:0e:94:6c:74:cb:96:46:95:e1:e9:9e:03:65:47:ad:
97:58:50:92:53:ce:eb:b8:38:63:57:95:cc:05:17:34:f0:db:
25:e1:a2:d6:70:db:07:1d:c4:15:f7:ea:1b:48:af:20:14:d7:
9d:4d:92:26:ae:20:86:77:75:93:5b:3a:7e:14:11:22:44:5f:
91:a5:d9:5d:37:16:32:f3:98:8c:40:8e:95:65:a3:eb:a2:a7:
d2:5e:06:8e:b0:21:3e:f0:2d:59:83:94:ee:96:bc:da:5c:0f:
f6:26:72:7c:e2:b7:15:59:34:88:81:b5:2d:77:0c:a3:d5:66:
44:43:8f:6b:24:e2:90:e6:61:50:ec:46:a5:a6:a0:93:03:e7:
8f:be:76:02:bb:47:97:92:fb:f1:4f:0e:0b:2f:18:5e:41:c8:
10:db:5d:fc:a1:d5:7f:20:bd:0a:63:9f:3e:65:41:4f:2c:99:
08:79:99:1e:5f:f6:e8:aa:92:b1:13:97:bd:4b:1b:6f:bc:0c:
00:d1:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:45 2025 by rpki-client