Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/moJEdUBHDVi2zp5M9kPaQZCV2XA.roa
File: moJEdUBHDVi2zp5M9kPaQZCV2XA.roa (raw, json)
Hash identifier: 8HJi+A0f4O8X8PaPvCx3VK6lRwmpaRLN4YJB/1D2isg=
Subject key identifier: 9A:82:44:75:40:47:0D:58:B6:CE:9E:4C:F6:43:DA:41:90:95:D9:70
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194282758B4F51CEBBF891116F1A0910662
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/moJEdUBHDVi2zp5M9kPaQZCV2XA.roa
Signing time: Thu 02 Jan 2025 17:54:14 +0000
ROA not before: Thu 02 Jan 2025 17:54:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41798
IP address blocks: 45.144.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:58:b4:f5:1c:eb:bf:89:11:16:f1:a0:91:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a82447540470d58b6ce9e4cf643da419095d970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:40:6f:bc:99:80:42:0d:5b:37:b7:fc:cf:
d9:76:89:89:de:bc:c2:4b:29:3e:c5:54:67:0d:d5:
ba:3c:3e:94:6a:88:42:f5:ab:de:2e:c1:d0:73:97:
a6:b0:64:12:5d:b6:bd:19:d8:df:1f:f5:81:c6:0c:
a4:57:3d:20:19:7a:8b:cd:34:ac:62:54:c6:5d:3a:
9f:2b:ae:1d:1e:92:68:67:cd:cb:8d:48:ba:63:5c:
38:20:76:ad:6f:97:b4:7c:46:4e:c6:88:0e:8e:d1:
e2:6c:c2:33:6a:6c:f4:9c:b8:91:b3:c0:fe:0b:a6:
dd:53:33:4c:56:97:65:cc:e3:d7:74:d7:80:ad:b7:
21:12:1f:41:58:51:fe:22:2a:a9:ad:0f:f3:db:36:
ca:d8:12:c8:a2:31:d5:2d:e1:6e:34:70:bf:18:97:
d3:21:d6:c0:40:33:59:3d:69:11:fb:df:7d:cd:f8:
d1:00:76:b4:6b:74:59:c7:32:9b:e8:d0:32:56:7c:
9e:e2:c7:ac:77:63:77:a5:a4:64:67:ce:32:7a:2a:
8c:fc:c3:e7:0c:2f:63:3a:ac:11:36:b1:61:53:37:
46:f6:3c:ab:75:0d:9f:b1:19:f0:0d:bb:29:db:3d:
2e:54:c6:12:26:e9:84:79:ac:02:d8:b0:e2:e1:8d:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:82:44:75:40:47:0D:58:B6:CE:9E:4C:F6:43:DA:41:90:95:D9:70
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/moJEdUBHDVi2zp5M9kPaQZCV2XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.175.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f5:e3:a7:8f:90:df:40:8c:62:08:06:15:5e:7c:99:c8:9a:
16:ae:b8:aa:41:2a:d3:98:6f:5e:31:ad:f3:86:35:97:a1:5b:
d8:82:df:07:46:ef:a6:76:02:97:24:65:11:df:2c:8e:52:da:
c0:e0:bd:8e:c6:a0:dc:f3:7d:ad:ed:12:03:12:40:00:52:21:
ad:59:c9:67:58:b2:60:4d:a1:7b:47:94:16:60:57:c3:93:0a:
1b:c4:15:e1:97:cc:5d:e5:d3:64:30:73:d8:45:ed:90:ca:2d:
90:6c:4d:87:fb:56:6d:c4:7c:dc:0e:09:a6:81:8e:25:9c:a4:
af:6f:52:eb:ca:88:30:52:88:a6:e6:c2:db:a1:09:6b:00:33:
f7:e1:6b:2a:18:43:a3:43:c1:2f:1b:4e:90:a9:84:32:ea:67:
07:66:67:29:60:4b:a3:16:b6:b4:06:19:6b:3d:53:1c:bd:08:
e2:eb:a3:72:3b:8d:0a:ca:14:c8:1a:6b:f8:65:3e:06:e3:0f:
ed:01:82:46:97:e1:72:f4:3c:e0:7c:ed:d6:de:e2:94:a8:ff:
de:45:6e:87:a2:b0:3d:9f:5e:9b:b8:96:dd:4c:73:31:65:f4:
6f:6e:4a:59:3d:bb:be:5c:91:17:82:0d:f0:9e:0b:73:a8:5b:
c7:a9:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:50:57 2025 by rpki-client