Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa
File: iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa (raw, json)
Hash identifier: LWKn33EIgWdLazFAzsPhYYYyYUHzgB/1rOhW1vxG50c=
Subject key identifier: 89:65:31:90:E5:4E:27:47:47:1B:A5:F0:94:BE:8D:EB:61:01:03:C0
Certificate issuer: /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial: 01942067EB2E7303E1DB47C4E787E36928C5
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208891
IP address blocks: 45.80.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:eb:2e:73:03:e1:db:47:c4:e7:87:e3:69:28:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89653190e54e2747471ba5f094be8deb610103c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:04:dc:aa:97:81:20:26:f9:b3:14:bf:e3:
20:f9:36:95:ae:78:1d:73:88:5b:92:46:b8:aa:11:
82:d7:66:35:43:6e:c7:ca:a5:07:d0:be:47:9c:c9:
56:50:35:b1:83:d9:4a:75:92:40:d6:6a:14:ce:fc:
46:29:00:1b:eb:7e:28:b6:a4:ca:d5:c5:5f:11:14:
e9:6f:76:10:28:15:25:53:94:81:0b:d6:08:ee:41:
ea:b0:39:7d:90:7d:c8:a4:be:42:45:81:1d:d8:7c:
55:34:03:49:c6:5c:c7:71:56:55:c0:4d:bc:4c:ec:
fe:bc:c1:a9:5b:de:87:73:49:4f:ce:b9:b8:32:95:
3e:cd:8c:ee:d5:46:fc:73:1c:6c:2b:75:4c:f3:fa:
b9:7e:57:87:0b:30:50:de:d5:47:bf:76:82:74:cb:
43:38:c9:f2:65:15:ce:7f:94:8e:34:ce:ec:68:a1:
b4:8f:d8:35:5b:7e:9e:3b:67:83:f5:72:5a:a3:45:
f1:04:0a:0a:d4:c1:2a:b0:1c:4a:2b:9c:c6:2d:c2:
d1:a3:c9:0b:e4:19:5c:d7:e0:c0:e9:a1:36:7e:42:
b3:53:ea:8f:5d:88:71:f4:b3:e4:68:82:5b:d6:b2:
28:91:54:93:d9:13:3a:ca:99:56:f8:a8:4f:80:37:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:31:90:E5:4E:27:47:47:1B:A5:F0:94:BE:8D:EB:61:01:03:C0
X509v3 Authority Key Identifier:
keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:40:05:e0:cf:56:00:aa:3f:1d:8e:a3:2e:75:e8:c1:e9:55:
b4:24:2c:8b:4f:66:75:e7:c2:4f:cd:c4:24:17:8f:8f:ff:40:
e6:5b:33:b4:de:bb:18:b8:50:6b:11:01:29:bb:dc:fa:99:22:
fe:18:14:e8:d7:4b:ac:c9:2a:8a:d1:18:43:50:54:0c:d7:70:
1f:81:22:b9:f6:6e:7a:60:cc:d5:ab:54:df:67:eb:71:90:a5:
73:f3:2c:b0:77:66:69:ab:7a:06:f6:0d:d6:5e:d4:5f:2c:70:
b2:a7:f1:d4:da:7e:fe:68:6b:06:82:60:4f:08:2e:5c:8a:32:
01:d8:ad:cd:30:90:8d:f6:0a:d5:92:0d:59:3b:5d:54:1d:d0:
2a:c6:da:57:65:fe:e4:42:67:f7:b6:ae:50:32:10:49:c0:2d:
49:c6:c6:33:c9:43:00:56:ce:df:74:bf:cd:9d:33:5e:f4:75:
dd:91:3f:dd:ac:25:cd:71:f0:99:f4:2b:38:ea:7b:46:e3:d1:
c3:1e:b1:fd:2b:80:be:2a:52:57:d2:e2:4c:4a:7a:66:c9:f0:
ed:d5:25:12:df:a0:24:4d:3c:ed:5e:f2:8f:2f:08:aa:f9:c1:
ca:ac:9c:0e:50:37:d5:5e:f0:a5:5d:bd:5d:04:1e:42:70:b5:
5a:90:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:03 2025 by rpki-client