Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa
File: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (raw, json)
Hash identifier: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=
Subject key identifier: BD:46:66:EA:79:D0:B9:3C:56:BF:4C:F0:AE:A6:28:44:D6:8A:B1:33
Certificate issuer: /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial: 019423D6EA9B3A7C1568D05C8C3AC68B8E3F
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa
Signing time: Wed 01 Jan 2025 21:47:54 +0000
ROA not before: Wed 01 Jan 2025 21:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60609
IP address blocks: 2.57.100.0/24 maxlen: 24
2.57.101.0/24 maxlen: 24
2.57.102.0/24 maxlen: 24
2.57.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ea:9b:3a:7c:15:68:d0:5c:8c:3a:c6:8b:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Validity
Not Before: Jan 1 21:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd4666ea79d0b93c56bf4cf0aea62844d68ab133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:b5:a5:09:8b:97:7b:fe:8a:e9:65:d2:85:
9e:9a:9f:2b:55:32:3f:15:d9:e6:93:73:39:a1:dc:
1b:51:2b:af:87:04:c7:c7:4d:23:3e:41:f4:06:45:
bd:54:d4:83:05:04:5a:94:c1:02:47:57:e7:f6:02:
8e:19:e9:27:ac:9c:e9:8e:fa:02:cf:a2:b6:77:09:
91:04:e2:a7:f4:14:59:8c:e5:c1:4e:7f:01:70:0b:
c9:7e:24:3c:7c:4c:33:b6:c0:d0:1f:76:d5:b7:fc:
19:cd:19:ab:34:40:49:d7:7f:d7:7c:d7:e2:42:b5:
9e:56:3c:8d:54:06:a6:e1:2c:ae:3a:e1:af:48:f1:
a6:da:85:a3:1d:47:62:d4:04:87:88:bf:2e:e8:cb:
16:36:0e:6f:03:b9:28:e2:9e:af:ee:48:dd:b5:01:
6f:f0:a5:96:0e:ba:d9:9c:ea:6f:b6:7f:ba:32:69:
f4:30:4f:3f:18:24:66:d3:55:0b:c3:26:fb:27:76:
19:63:a2:e4:a2:3a:c5:67:c5:b1:1a:4c:54:b5:2c:
d6:67:93:3a:17:56:6c:6f:ea:7d:42:de:5a:83:51:
88:70:08:62:01:9d:af:46:37:84:00:ee:86:2a:d5:
74:40:ea:94:21:19:87:8a:bd:62:a7:cb:4d:2f:f9:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:66:EA:79:D0:B9:3C:56:BF:4C:F0:AE:A6:28:44:D6:8A:B1:33
X509v3 Authority Key Identifier:
keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:38:cb:99:97:36:8d:80:6b:46:bd:09:2c:8d:80:b8:4e:a7:
f6:cc:94:2f:27:4e:c7:26:b7:a5:c3:5e:d8:61:ac:95:d3:cc:
fc:be:95:71:61:f8:6f:fc:a4:1f:33:f0:47:95:f2:d1:61:dd:
ab:fd:ab:22:c4:fc:ef:d1:77:1b:1a:b0:4d:aa:eb:a9:6b:a6:
13:b2:23:1e:53:d6:6d:c6:b2:b7:4f:1b:02:20:3e:8d:90:46:
b9:4e:5b:0f:24:04:a3:81:28:e8:96:7a:5d:2a:0e:bb:cb:bf:
15:f7:d9:10:e0:30:1e:37:9a:0a:a7:23:16:86:d7:8c:e1:ce:
39:07:c8:e7:8f:2f:38:dd:72:fc:4e:ed:5d:a5:85:66:e3:13:
de:1b:91:a0:e7:48:07:43:74:df:82:59:e0:14:fa:16:ac:d7:
a7:09:f6:f3:5e:bb:9b:39:6e:d1:08:cd:2f:4c:b4:e7:33:3c:
0f:93:33:70:0b:2b:8a:50:10:62:63:19:71:27:66:64:cf:81:
e1:5f:04:4d:86:f2:88:b0:f0:cd:a2:95:06:50:b0:1f:9e:c7:
66:c1:e2:92:0e:7b:4a:4c:a7:5b:b0:b6:95:30:70:05:6f:4d:
5e:a0:09:29:46:d5:d2:ef:d7:10:f6:d4:d2:c4:7d:aa:b6:fe:
4f:a8:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:50 2025 by rpki-client