Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/00zUmefDnJyqqgzSdsn0MV9Tkqo.roa
File: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (raw, json)
Hash identifier: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=
Subject key identifier: D3:4C:D4:99:E7:C3:9C:9C:AA:AA:0C:D2:76:C9:F4:31:5F:53:92:AA
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019424B3F3108FC4594188440696B9BEF4F8
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/00zUmefDnJyqqgzSdsn0MV9Tkqo.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211127
IP address blocks: 45.142.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f3:10:8f:c4:59:41:88:44:06:96:b9:be:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34cd499e7c39c9caaaa0cd276c9f4315f5392aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:be:d3:6f:c0:5a:18:6f:5b:a5:f1:6a:f3:
fd:1e:27:9c:65:b5:b6:f2:0c:47:38:28:a4:d9:2a:
28:c4:db:58:d0:2a:00:dc:18:c8:f4:6c:d8:08:97:
5a:3e:b4:6f:61:13:3f:b7:97:9a:40:b4:28:f1:b5:
58:03:8a:ab:a1:f3:1b:0b:5d:97:d5:09:4b:c6:5d:
71:7b:e2:e9:87:f5:c9:be:cb:c2:88:86:23:9a:a0:
d6:84:18:d3:5b:8e:04:7a:5f:a4:42:5c:63:f9:3f:
cb:67:e7:83:22:6f:fe:2b:b1:d1:87:04:a4:61:b7:
d0:93:de:ab:ef:db:82:91:12:d0:63:2d:ec:8c:0c:
a6:dc:d7:fd:32:9e:18:58:45:6e:9d:15:6d:04:b5:
81:6c:e7:0f:0e:44:92:30:aa:cc:72:c9:db:54:1c:
a0:c7:46:36:8c:ea:6a:73:a5:1a:ae:e3:63:98:87:
80:9d:dd:2b:95:68:7b:ce:5b:ed:3c:d2:2c:5c:dd:
f2:e4:24:e5:a1:b1:77:7a:74:7f:44:8f:8d:08:8b:
3b:75:1a:12:4d:e2:fa:19:41:c7:e0:52:95:50:f0:
bc:36:21:70:86:55:4b:67:5c:45:2d:08:6c:66:52:
17:4e:33:d3:b4:d0:53:13:28:1f:b3:38:e0:89:9a:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:D4:99:E7:C3:9C:9C:AA:AA:0C:D2:76:C9:F4:31:5F:53:92:AA
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/00zUmefDnJyqqgzSdsn0MV9Tkqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:14:12:5f:21:ff:f9:3b:c6:c8:a9:e5:49:87:d8:9c:3a:5a:
c1:6f:62:c7:d0:aa:af:f6:97:85:90:69:36:62:e8:f8:fc:80:
cf:f3:47:1d:89:b7:cb:94:99:a9:df:e7:7d:e5:f8:b7:3a:41:
88:fc:c3:f0:59:50:cb:d6:cc:55:d0:b0:ab:2b:6f:54:81:5b:
80:ff:2e:c3:61:ce:c1:60:9f:6f:1d:cf:fa:8c:25:ce:b7:fc:
30:2f:36:49:07:0d:3f:fa:6a:c7:c7:fb:cb:bf:2a:3c:89:17:
88:6f:c6:72:ca:84:42:cf:44:f1:78:8d:46:01:c9:6c:3d:ef:
46:89:40:f6:c1:b0:13:48:5d:a5:4b:df:72:04:11:02:9a:9e:
75:57:d8:42:ec:18:74:65:99:c5:1a:9e:bd:5d:ae:eb:8a:6c:
d3:56:cd:d6:b9:f9:25:f8:49:65:8f:cb:a6:52:e3:c0:70:f7:
cf:4f:0f:9d:ee:e3:1f:0a:ba:f7:d9:5c:95:e1:18:c2:ef:91:
5d:f5:7d:8d:d8:86:f4:0b:66:53:9d:89:c4:5c:a9:11:f0:62:
60:3e:33:86:9f:8e:47:85:46:34:ef:a1:0c:05:57:85:ed:ec:
80:12:6a:e5:62:ed:5d:9b:70:47:e1:ef:d9:7f:6e:bf:13:6e:
21:b6:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:03 2025 by rpki-client