Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/0DRN21LljJdtVHsC3N6_SzZExUk.roa
File: 0DRN21LljJdtVHsC3N6_SzZExUk.roa (raw, json)
Hash identifier: 6/ACpw56h1ormLkfaB6chrUCUVN2+F3iGJiSWjNpnuU=
Subject key identifier: D0:34:4D:DB:52:E5:8C:97:6D:54:7B:02:DC:DE:BF:4B:36:44:C5:49
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0195C7A31BDFD86FC5543FCD5FAE9E001558
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/0DRN21LljJdtVHsC3N6_SzZExUk.roa
Signing time: Mon 24 Mar 2025 10:11:50 +0000
ROA not before: Mon 24 Mar 2025 10:11:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 45.140.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:a3:1b:df:d8:6f:c5:54:3f:cd:5f:ae:9e:00:15:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 24 10:11:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0344ddb52e58c976d547b02dcdebf4b3644c549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:69:99:9b:97:88:f7:54:fb:64:e9:2b:57:
c7:fb:ec:f6:b2:21:4b:0c:db:ec:27:87:07:8c:01:
e9:a4:c7:b1:b4:04:14:26:3b:d5:73:fc:57:3e:c3:
26:25:08:b3:c9:a1:4b:b5:4f:a9:c6:55:75:22:ea:
cb:11:a5:32:13:c3:21:53:dd:78:00:66:db:50:2e:
37:42:82:71:9b:67:97:84:8c:b6:66:5d:ff:ea:01:
9b:3c:54:43:4e:bb:34:45:01:4e:33:02:c8:12:34:
ab:84:4a:36:91:1c:f2:7f:d4:e5:b4:83:1b:45:a4:
d8:6e:e3:8a:c6:4c:34:ac:61:e0:34:22:ff:22:f7:
29:6b:52:2f:6c:63:7c:be:5d:05:08:27:40:8e:a9:
c0:2a:72:eb:80:67:74:76:c9:c9:57:6d:32:fd:9e:
c5:c8:3a:3b:63:9a:de:0a:0c:c6:99:56:86:aa:17:
b0:be:6c:25:a4:52:64:74:f4:99:d5:08:70:cf:ef:
ae:6a:0c:76:31:da:06:63:e3:89:f1:20:47:d1:42:
00:8b:21:91:84:a1:ae:bd:41:58:89:3f:a7:81:76:
4b:c1:4b:92:45:e2:78:f2:e9:e8:34:44:16:7d:78:
73:d7:1e:3f:a3:c4:77:af:1c:32:86:f2:12:eb:37:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:4D:DB:52:E5:8C:97:6D:54:7B:02:DC:DE:BF:4B:36:44:C5:49
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/0DRN21LljJdtVHsC3N6_SzZExUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:25:c1:3e:c3:56:d6:e4:24:cb:92:cd:d4:e8:e6:47:54:18:
de:70:16:d4:e4:24:90:d0:5d:78:bc:44:0d:c0:a2:45:29:61:
92:0d:01:2e:78:bf:0c:99:70:e8:4c:f3:32:86:c8:31:9a:bc:
a3:8c:7c:aa:bf:3d:c0:5d:7e:e4:fc:f8:21:ab:9e:b1:fb:9e:
80:17:f3:a6:45:6e:f6:5a:fc:c4:fe:30:d4:45:e7:59:9c:dd:
67:89:99:5b:4f:ed:d5:42:d9:ba:71:78:a0:b1:ce:33:7c:d0:
36:85:7e:8f:47:5d:a1:46:a1:1a:0a:36:c2:9f:f5:4e:4d:e5:
c2:10:e6:0e:e6:84:8a:b3:7e:42:01:51:63:1f:28:55:0c:d2:
7b:b7:df:59:f9:72:fd:0e:23:6f:80:94:46:db:ec:d1:17:ff:
fb:18:eb:df:70:49:2f:58:ce:b6:1c:1a:62:b7:92:66:4c:b7:
8d:33:00:80:e4:ed:7a:88:a3:b6:b7:b6:0a:bf:13:6c:12:fc:
89:0c:d5:46:c1:49:66:18:21:2e:79:8f:8a:60:9f:29:86:36:
f7:ff:ae:20:86:15:4b:12:2c:45:ab:d8:8d:61:43:82:f7:1e:
63:25:c5:4d:61:7f:42:d3:ae:7d:ad:2c:d1:44:42:e8:3c:aa:
7a:c9:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:24 2025 by rpki-client