Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa
File: Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa (raw, json)
Hash identifier: rW8mc8/vAfi5HR0gCnT0PC1Da6a+T1zVjRQOt1IWh/0=
Subject key identifier: 0E:FE:6F:AC:F9:B2:62:EF:CC:9D:12:1D:45:BB:E3:3E:D0:26:4C:24
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0194730A5DCFC9B7A7483ABB9663AC4C025A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa
Signing time: Fri 17 Jan 2025 06:54:06 +0000
ROA not before: Fri 17 Jan 2025 06:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62390
IP address blocks: 45.155.88.0/24 maxlen: 24
124.155.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:0a:5d:cf:c9:b7:a7:48:3a:bb:96:63:ac:4c:02:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 17 06:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0efe6facf9b262efcc9d121d45bbe33ed0264c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6f:96:34:15:ac:82:5f:b0:a1:f3:5c:f5:cf:
d8:13:8e:d7:fc:d5:82:e9:50:50:dd:be:4d:a5:5a:
9f:be:23:b5:8f:8e:2c:c1:6a:8f:5f:74:4e:c6:23:
5f:58:e3:c6:1b:7f:81:85:cc:78:04:41:a8:87:cf:
f7:06:1d:3d:48:62:2d:f6:5d:25:ec:85:4b:d2:5d:
33:79:87:29:aa:4b:4d:58:6a:c8:56:03:44:1a:ba:
7b:8c:af:6e:05:1b:ad:d9:51:9c:6d:aa:2a:ea:01:
dd:b2:79:73:32:b5:08:e5:9f:3f:56:a0:c7:eb:e9:
ed:40:05:24:da:65:cc:a2:34:10:69:c1:1c:5f:6b:
ef:12:9f:4d:75:a0:99:41:ed:29:3f:33:d9:cf:ca:
8f:62:3b:6c:f8:36:1a:02:7c:4b:db:f0:25:d1:aa:
7f:96:a9:12:ed:a2:23:10:0e:d0:87:ea:65:29:13:
a4:10:30:6d:c6:a4:0d:3a:7a:22:57:ec:1b:78:db:
4d:21:86:b5:26:7e:73:6e:8a:94:dc:41:ca:62:47:
46:7e:c0:55:5c:6d:70:73:6f:43:29:ba:6a:50:9c:
7f:5a:ed:a6:11:b5:5d:9c:44:4d:df:95:f2:e5:4e:
f2:ff:16:47:88:5e:94:7f:0e:dc:ae:24:96:ea:7d:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:6F:AC:F9:B2:62:EF:CC:9D:12:1D:45:BB:E3:3E:D0:26:4C:24
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.88.0/24
124.155.251.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ea:e4:fd:03:5b:22:19:4c:a0:9f:60:e1:e7:16:9b:7d:a8:
c8:f7:bd:ca:d0:30:6a:5f:64:5a:b0:4f:c4:03:61:02:7d:3f:
f0:63:c7:8c:18:5e:d6:62:f5:8d:eb:a9:cc:56:bb:dc:a4:a7:
36:e4:ad:93:6f:f2:4a:26:3a:5d:8f:e3:b2:0b:e2:47:8b:d8:
09:fa:c8:06:e8:29:5d:01:15:f9:65:a0:d8:2d:d3:01:b9:01:
98:68:96:c5:90:7a:fb:b8:c3:4a:46:12:24:94:b4:1a:b9:4d:
c4:b2:f7:8b:e0:98:5c:e1:94:55:6d:c8:83:72:50:b3:ad:51:
3c:78:f9:f0:fa:7c:f7:bf:11:48:cd:8d:73:2b:b4:79:eb:b3:
90:37:fb:07:f1:51:b0:ce:80:82:68:b8:bb:c6:61:e6:c9:03:
1f:d3:fc:7b:4f:bc:e0:c9:1a:c0:21:81:ba:73:26:0c:f6:b5:
b9:b4:5a:f7:53:6a:bf:c6:af:b7:9a:1b:d0:83:91:4f:67:be:
95:03:2a:1b:1d:55:08:89:8e:e0:cb:d1:00:41:25:87:95:52:
d5:8b:6b:c2:06:2b:62:72:15:7a:82:1c:6d:cd:ae:e4:a2:2e:
11:73:c3:6c:5e:d2:3d:d0:dc:ba:f5:4b:1f:ad:bd:d9:a2:8d:
64:99:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:55:59 2025 by rpki-client