Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/D7FjlWMe6-PwuPG3BMpV_LKIyz8.roa
File: D7FjlWMe6-PwuPG3BMpV_LKIyz8.roa (raw, json)
Hash identifier: bII3KO9txgZTag71uUVlyzOnHGrD7kmSU4//JJbzkZo=
Subject key identifier: 0F:B1:63:95:63:1E:EB:E3:F0:B8:F1:B7:04:CA:55:FC:B2:88:CB:3F
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3CFA540EAA4C98BDC411C666551BA
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/D7FjlWMe6-PwuPG3BMpV_LKIyz8.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214869
IP address blocks: 45.133.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cf:a5:40:ea:a4:c9:8b:dc:41:1c:66:65:51:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fb16395631eebe3f0b8f1b704ca55fcb288cb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:75:9e:13:47:a4:cb:10:c4:bc:8a:64:19:
99:32:85:99:00:0c:0d:86:df:c1:ec:19:0b:b6:5a:
63:27:76:97:a0:94:b9:e0:d6:3f:c3:d5:a3:2b:53:
15:5f:2f:37:f1:e1:78:be:78:0c:8d:f2:a3:92:9c:
d5:ac:79:ce:3e:b1:71:20:15:92:c9:66:fb:c6:de:
ba:76:57:24:23:21:3e:13:4e:9f:a6:ae:e5:e3:3a:
83:42:15:49:e4:56:6e:51:e5:c5:9d:cd:86:cc:30:
a0:db:95:13:b6:30:a4:e1:e8:d9:45:da:39:e3:8c:
4f:65:ae:55:c7:40:43:df:96:50:87:d5:de:67:89:
a1:7d:a3:11:c6:2c:64:34:2c:82:b3:f9:e5:ec:31:
a0:b5:87:25:63:a6:69:db:b4:5c:03:f3:06:89:1f:
63:08:2f:d0:e3:04:da:ca:3a:1e:f6:95:c4:09:b3:
10:1e:4b:bc:7e:2c:26:de:42:9b:13:56:a9:7e:15:
06:17:bf:63:7d:6b:ca:2f:18:94:0f:27:a5:45:3c:
d9:ba:2a:49:8f:af:e4:cb:c1:ac:5c:14:47:b2:ed:
1a:dc:b3:a5:9c:d1:f6:69:4c:b1:e8:59:f4:7d:28:
22:1b:eb:49:0a:8a:18:2c:d9:03:48:bb:f3:c2:5c:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B1:63:95:63:1E:EB:E3:F0:B8:F1:B7:04:CA:55:FC:B2:88:CB:3F
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/D7FjlWMe6-PwuPG3BMpV_LKIyz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9b:9f:37:35:79:7f:00:72:7c:23:c6:cb:bf:ef:36:d8:a0:
51:07:f3:3b:18:a7:52:3c:ab:1a:e2:2d:bf:7a:df:f9:90:4d:
54:32:51:5e:d1:06:93:23:ea:a1:eb:4b:5e:d6:b4:fa:f9:00:
a1:5a:50:09:a7:63:44:12:c0:68:5a:96:eb:f8:bc:2f:ce:05:
2b:ed:23:88:b1:f0:05:1c:9f:73:c2:08:c1:e1:cf:ed:f6:67:
5d:01:24:53:bd:ba:5e:3a:42:c7:37:67:e9:b0:e2:eb:a8:b1:
94:56:03:49:dc:55:f3:55:7a:d5:ed:d6:ee:30:f5:b5:03:8c:
7b:6a:55:1d:f7:d4:7d:cd:0f:c0:4c:16:12:87:95:cd:31:0f:
5d:12:1c:d9:fc:29:b3:d6:45:9b:6e:da:87:71:92:36:cb:6d:
41:9b:7b:19:ae:06:3e:d2:65:4a:83:dc:5d:d4:b1:f6:ec:d1:
e1:78:13:92:4c:89:3b:e9:80:10:c1:7d:24:7a:91:e2:57:68:
4b:e0:97:f6:7c:fc:d7:ec:ec:47:5f:b1:33:41:1d:bf:7a:fc:
0a:9c:cc:14:a0:35:84:2c:8c:b9:32:f7:f2:1e:84:9b:1e:e6:
a0:c5:0f:2b:74:7e:ca:a1:17:22:1d:73:61:49:a7:21:fc:fc:
e2:7a:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:54 2025 by rpki-client