Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/7IRfmWARQa1gscBNY6wwrdQkZww.roa
File: 7IRfmWARQa1gscBNY6wwrdQkZww.roa (raw, json)
Hash identifier: CmqSWp3rlUbIbUgWN9uSD/eKPbnLnNyBdNG11QBDz1o=
Subject key identifier: EC:84:5F:99:60:11:41:AD:60:B1:C0:4D:63:AC:30:AD:D4:24:67:0C
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 019426D960B5723854B738FCBF8359FFAFFF
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/7IRfmWARQa1gscBNY6wwrdQkZww.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203976
IP address blocks: 45.88.36.0/24 maxlen: 24
45.88.37.0/24 maxlen: 24
45.88.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:60:b5:72:38:54:b7:38:fc:bf:83:59:ff:af:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec845f99601141ad60b1c04d63ac30add424670c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:ad:8c:b0:df:bb:84:f6:85:3f:1c:cb:6f:
dc:fd:93:64:e4:f9:c6:96:2c:88:70:9e:56:6a:70:
e1:42:2d:2a:28:d1:44:e7:3a:71:7e:3e:8f:bc:d5:
d9:be:9f:cb:75:f9:9b:da:fc:53:68:0f:5e:4e:81:
71:2e:e3:e5:08:13:6b:55:2d:cd:90:71:56:93:d6:
9d:bb:3e:e2:6a:3b:91:d2:80:52:d9:78:44:50:d0:
ee:10:59:83:82:bf:a6:af:6f:99:ec:27:da:13:76:
e9:4a:5d:b1:7e:77:df:1e:7d:b4:cf:01:b4:02:fc:
22:3f:c9:05:f5:69:e9:b3:12:60:25:5f:99:2b:46:
b0:be:cf:35:c0:16:3d:b8:d6:40:ad:1a:5a:cb:85:
4c:7c:3f:4c:ad:04:7e:1d:54:37:45:9a:2a:3e:fc:
61:de:ec:43:8c:eb:98:f6:48:5a:8a:37:1e:a2:d5:
84:4e:7d:93:a9:88:f9:6b:17:e3:12:47:c4:4f:92:
26:96:b6:b8:ab:58:cf:5f:ea:c8:9e:00:61:f5:a5:
c8:c2:0d:55:b5:3b:1f:3e:03:6e:62:03:9c:a0:4f:
8b:07:ed:30:0d:c2:9e:b7:81:e8:d3:ea:21:a6:56:
dd:f6:f6:52:9d:09:c1:f0:ef:63:09:1b:d9:50:90:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:84:5F:99:60:11:41:AD:60:B1:C0:4D:63:AC:30:AD:D4:24:67:0C
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/7IRfmWARQa1gscBNY6wwrdQkZww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.36.0-45.88.38.255
Signature Algorithm: sha256WithRSAEncryption
1d:f5:bf:4a:38:43:3e:bb:8a:ff:b3:a9:e8:d7:c7:a8:40:e9:
03:22:90:d1:5c:4e:b5:43:d3:85:02:ad:3a:c6:7f:a5:2c:ae:
5d:21:4b:16:7a:cb:49:d7:6b:43:66:b3:44:87:7b:48:09:50:
6b:9a:36:8a:50:cc:fa:bc:80:57:e1:20:32:27:ac:e4:28:12:
0e:77:ea:f7:71:b5:3f:5d:67:ab:82:87:a9:e3:ef:b6:f0:da:
78:83:1d:02:d7:5a:a6:39:c0:06:0b:42:fb:f4:3f:18:f4:51:
73:d6:89:d6:11:d9:99:fc:eb:53:c8:f4:93:4a:ce:cf:f0:16:
77:9f:e5:09:d3:8a:d4:75:7f:1a:30:ee:70:2e:63:46:71:d3:
ff:51:93:bc:ed:07:df:d6:18:37:2c:7a:9d:d1:e5:36:85:34:
b2:e1:1a:cc:49:d6:d4:48:86:9b:e3:cb:7b:5a:2a:2b:b1:ae:
b6:43:f8:54:76:96:3b:51:b7:41:f2:76:c4:10:91:7d:79:b4:
ce:3f:a4:9b:9f:3e:29:db:3a:2a:72:90:9d:08:aa:7a:4d:21:
3d:ec:76:5a:c4:da:ad:04:94:da:ae:85:f7:1a:fc:a0:9a:ce:
6c:b0:98:68:54:25:f2:53:22:4d:4d:2d:48:4e:89:ab:1e:f1:
dd:88:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:27 2025 by rpki-client