Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/zd8S8_RgIECBQgNFopt3gQi-4JA.roa
File: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (raw, json)
Hash identifier: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=
Subject key identifier: CD:DF:12:F3:F4:60:20:40:81:42:03:45:A2:9B:77:81:08:BE:E0:90
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01945E92E03DAE45AC8D89AC65D0EC4FAB9C
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/zd8S8_RgIECBQgNFopt3gQi-4JA.roa
Signing time: Mon 13 Jan 2025 07:31:11 +0000
ROA not before: Mon 13 Jan 2025 07:31:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.10.69.0/24 maxlen: 24
45.10.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:92:e0:3d:ae:45:ac:8d:89:ac:65:d0:ec:4f:ab:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 13 07:31:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cddf12f3f460204081420345a29b778108bee090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:d8:13:a6:d6:28:ce:c9:ee:ed:d5:f2:17:
74:5a:54:cd:ff:88:aa:10:57:c8:73:da:3a:4e:4d:
2a:07:c4:b6:74:7d:62:7e:ae:28:0a:60:1f:7c:b2:
b2:63:04:e5:dc:9f:49:fb:2c:bd:20:40:e3:af:9f:
32:0b:3f:9c:48:8f:9d:85:9f:22:e6:f6:0d:29:81:
3f:69:d1:f3:c5:51:c1:3e:98:c9:f9:db:fd:2d:10:
02:c4:3a:50:91:80:05:61:71:d3:56:6f:43:f4:1b:
a7:0a:d5:ae:29:62:0d:f1:8f:fc:98:e2:ea:79:4d:
a7:0e:22:58:2d:93:60:af:cb:69:c5:71:ad:c0:3a:
c7:0d:f1:37:9e:d0:1b:13:56:c4:c7:32:ff:dd:a5:
94:41:55:57:37:62:0f:81:e1:ce:b9:d1:ee:e6:51:
28:4b:b5:aa:31:cd:fc:4e:ae:15:94:63:7f:31:cb:
e3:a0:ac:ea:8e:b7:3a:08:8b:0d:bb:db:c5:d2:80:
6e:9b:e3:eb:de:16:77:be:31:22:c1:79:ff:0d:29:
27:7a:94:ce:90:c8:93:bc:75:38:38:d9:b7:bd:8d:
d5:81:f5:cc:d2:ea:14:eb:2c:54:02:e8:97:da:ae:
34:40:df:c1:f6:d4:5c:46:8b:d0:2c:98:30:fd:95:
0f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:12:F3:F4:60:20:40:81:42:03:45:A2:9B:77:81:08:BE:E0:90
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/zd8S8_RgIECBQgNFopt3gQi-4JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.69.0-45.10.71.255
Signature Algorithm: sha256WithRSAEncryption
b5:78:e7:7f:c5:96:68:6f:1a:40:1a:9b:f3:be:99:bc:8a:d1:
2c:f2:83:5b:8b:31:3a:62:96:ef:7f:86:26:39:14:e1:c9:84:
42:be:e1:cd:84:10:14:fc:52:9d:8e:4b:41:e5:c5:47:59:73:
aa:1d:98:04:5d:72:16:af:d1:73:31:be:72:18:6f:b5:d0:67:
f8:02:83:48:0a:c3:78:4a:f4:54:41:b2:9a:fa:2c:9c:af:3d:
cb:0a:0d:f3:1c:fc:c2:dd:0d:86:e2:7b:f2:d1:03:b2:42:22:
f9:b4:aa:e4:d5:1f:96:14:a5:e3:4e:c4:7f:11:91:9f:9f:a6:
90:e6:c6:f0:c7:6f:42:b5:3d:62:f5:80:01:6b:04:27:6c:c3:
ae:e0:e1:d4:2c:d5:61:88:27:87:c8:99:06:a7:bb:37:1f:54:
b3:6a:8e:6f:d1:b3:d7:c2:8b:91:e0:ee:4f:b8:2c:4e:e6:9a:
31:9f:88:03:33:2d:fe:cd:18:a4:90:6f:a5:3f:ca:db:dc:03:
74:1a:4e:99:f1:39:49:e4:e3:01:4a:dd:47:fe:c9:06:53:af:
af:06:3e:f0:7f:f9:b4:8e:d3:b9:05:28:93:1d:03:95:db:95:
18:01:d6:fc:ae:c6:c6:77:bc:3e:88:0a:b7:fa:7e:c2:d9:ff:
89:c4:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:12:42 2025 by rpki-client