Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/C_QylDjtmeXaqfQqwZx9bW-pizU.roa
File: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (raw, json)
Hash identifier: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=
Subject key identifier: 0B:F4:32:94:38:ED:99:E5:DA:A9:F4:2A:C1:9C:7D:6D:6F:A9:8B:35
Certificate issuer: /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial: 019423D7E3906315AB3F825283CDD3E8AE08
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/C_QylDjtmeXaqfQqwZx9bW-pizU.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208443
IP address blocks: 45.136.188.0/23 maxlen: 23
45.136.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e3:90:63:15:ab:3f:82:52:83:cd:d3:e8:ae:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bf4329438ed99e5daa9f42ac19c7d6d6fa98b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:e6:2a:c0:dd:82:83:f5:2b:95:c8:c8:15:
86:bc:f6:94:ad:99:81:84:09:63:7f:fb:36:8b:2f:
92:f4:16:0e:70:4c:b3:26:7c:b1:92:ab:b6:ea:7a:
ef:b8:16:4f:ee:23:b7:b9:d0:74:60:c4:b7:38:3b:
56:82:db:d0:f7:08:a8:d7:6d:47:8e:09:61:2d:ce:
35:56:c6:a9:2b:a3:2f:8f:eb:d4:c5:8a:ca:60:86:
16:47:2d:05:07:cc:67:c8:15:49:75:9f:5e:f7:33:
ad:3f:bd:d4:e8:6c:d6:df:b5:30:a2:3b:21:00:b3:
6d:f8:0f:60:1d:41:17:56:73:3f:79:26:a2:1b:69:
45:49:70:52:5c:b3:ad:0c:0f:98:87:e2:84:01:a5:
86:41:27:fb:f5:38:b0:3e:7f:46:b4:5a:3b:76:3a:
3c:2a:12:51:53:e3:c2:f1:95:e5:3e:68:63:17:95:
1e:88:7d:d9:d1:f0:9a:3c:a2:2c:b6:81:68:07:66:
34:db:56:0a:2f:b9:0e:6f:45:b0:4d:b2:70:04:0d:
5a:bd:b5:a5:32:7d:15:24:cc:e1:87:2d:e4:6d:57:
4d:10:50:ed:e7:e1:4d:e6:80:3b:a9:21:d1:cf:63:
cc:ca:d0:9b:3e:f8:a1:6f:48:e6:ea:5c:44:73:89:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:32:94:38:ED:99:E5:DA:A9:F4:2A:C1:9C:7D:6D:6F:A9:8B:35
X509v3 Authority Key Identifier:
keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/C_QylDjtmeXaqfQqwZx9bW-pizU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.188.0/22
Signature Algorithm: sha256WithRSAEncryption
20:7b:9c:92:ec:c1:b9:e8:b5:9e:f7:6f:7e:34:a6:53:4f:2b:
2c:02:36:0d:d3:0a:3b:ab:a4:9f:16:eb:2b:73:e8:a5:2f:c7:
3c:9f:ee:bf:4c:41:02:e4:fe:0d:2f:e9:77:8c:0a:ef:b2:d7:
f5:eb:45:2f:58:0b:94:f7:21:55:37:3c:ae:98:dc:df:ac:b4:
53:8f:dd:3e:9e:57:db:11:eb:f2:fc:82:d1:21:bf:5b:fa:b1:
cd:86:1a:f3:c2:4e:15:22:e7:ce:4a:0a:6c:d9:75:0d:37:da:
5b:8f:e6:66:14:4b:08:a3:0f:ba:a2:e2:e9:fa:74:34:69:3c:
48:96:58:5d:a5:dc:4c:b3:69:59:55:87:c0:ba:ef:6a:da:b7:
9b:09:4a:2d:f3:2a:49:45:ac:66:5f:2d:cb:65:a0:6d:92:ca:
8f:cc:11:9b:83:26:d5:2a:61:ec:36:a1:ba:0d:51:4a:48:d9:
90:af:83:b8:a6:16:04:5a:67:01:db:1e:7f:3b:a8:76:27:1d:
c7:03:6c:8d:15:72:c7:0b:5b:ea:d3:d3:6b:74:3b:98:3d:a6:
5a:63:48:56:65:86:87:27:50:45:0c:37:36:3a:f0:3c:62:5e:
77:25:95:90:b9:f6:80:08:d1:af:a9:e5:42:e7:0f:79:c8:b4:
fb:e5:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:43 2025 by rpki-client