Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa
File: Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa (raw, json)
Hash identifier: vhJRnVcBvTImc9Sv3yScvOufw+og96lcsubFcpiYN6Q=
Subject key identifier: 0A:D7:9E:E4:56:6E:B7:A2:70:FB:21:AB:8E:B9:D3:0A:D4:CE:F8:73
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0194221F48A497D3C13C45821357D9340518
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa
Signing time: Wed 01 Jan 2025 13:47:43 +0000
ROA not before: Wed 01 Jan 2025 13:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.133.141.0/24 maxlen: 24
45.133.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:48:a4:97:d3:c1:3c:45:82:13:57:d9:34:05:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 13:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ad79ee4566eb7a270fb21ab8eb9d30ad4cef873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:b1:ad:4c:5f:c0:4c:b2:79:80:7f:a1:75:
28:94:30:36:7e:3b:c8:3b:f4:a9:1e:ae:4c:d4:70:
9c:c2:a0:dc:4d:db:1d:d3:76:a1:dd:db:59:e3:1c:
76:4c:82:29:7f:b1:d7:27:5d:c9:80:58:14:87:24:
5f:e0:fd:9b:1c:52:b0:f5:86:05:f6:53:09:5a:3f:
d2:bb:fa:3b:09:bd:6b:63:eb:30:fa:a4:d9:c9:9e:
e9:0d:7b:ab:04:3a:96:df:0c:cd:fc:3a:19:f2:1f:
60:2a:9f:95:a6:99:40:6f:3e:84:7b:31:5c:d1:a3:
b9:20:36:3b:b3:07:67:d2:4e:aa:53:43:4c:41:03:
00:e1:ce:f6:57:49:d2:d8:e5:be:6c:57:36:d0:d2:
1d:ed:3c:f4:48:43:bd:d8:fe:38:36:d9:f9:b2:5a:
cf:0d:f7:19:0f:55:99:77:7d:6b:a6:d0:5c:25:d9:
87:2f:03:37:a7:77:85:79:40:07:7e:60:52:06:8a:
62:6a:32:80:f8:f8:4d:19:56:e2:f4:bf:f8:e7:74:
9c:4f:5f:35:7a:ab:47:a3:eb:d6:0e:e7:a5:40:64:
5d:c0:0a:4a:1a:44:a0:8a:6e:ee:f8:2c:a0:a2:2a:
e6:e9:36:ce:a0:21:9c:72:9a:72:de:14:de:58:ea:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:9E:E4:56:6E:B7:A2:70:FB:21:AB:8E:B9:D3:0A:D4:CE:F8:73
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.141.0/24
45.133.143.0/24
Signature Algorithm: sha256WithRSAEncryption
21:09:ee:d4:7e:86:7f:6f:e6:2a:11:c4:ed:15:5e:e9:f4:df:
53:f1:1e:6c:fa:5b:82:dc:a7:59:13:a8:5b:da:d3:29:75:82:
4b:f0:77:4f:f4:0c:e7:7c:09:06:e0:e6:0c:e3:3e:e7:55:48:
b1:9b:46:d9:28:50:48:41:dc:15:6b:70:27:28:55:78:46:20:
ae:cd:31:fc:67:2f:b1:ca:67:79:da:d4:d7:a2:9f:d1:87:01:
60:d7:81:0c:2a:2c:5b:d2:2e:33:85:c0:35:e1:c7:b8:2f:ca:
37:5e:25:b9:45:6a:2b:5d:b7:94:7f:2e:e4:72:c8:47:79:aa:
a7:71:3a:c2:57:3a:81:5e:b4:24:6d:ae:64:21:ae:31:9e:c0:
64:ca:a8:23:c1:52:06:0c:48:fb:a5:60:f8:29:45:d2:53:49:
e6:a9:c2:a8:da:36:9b:4a:6f:7b:6e:b0:6d:4b:c7:d1:df:ca:
3b:8c:d9:96:d7:de:cc:f8:a1:87:86:ab:08:f7:77:f5:11:03:
80:bf:c8:44:7e:ea:93:72:6e:55:7b:80:02:64:cf:4e:03:fc:
f5:9e:ad:a4:64:18:f4:c1:43:86:5c:90:ff:72:a4:87:7d:57:
55:8c:bc:43:7a:00:1d:98:e0:f3:41:81:7b:ad:cf:17:d2:02:
91:f1:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:00 2025 by rpki-client