Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/DWF9Jo3FImxKenqMCCuMh99Ds_I.roa
File: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (raw, json)
Hash identifier: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=
Subject key identifier: 0D:61:7D:26:8D:C5:22:6C:4A:7A:7A:8C:08:2B:8C:87:DF:43:B3:F2
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0194244538374BC93D86F2AA0569FF20E30A
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/DWF9Jo3FImxKenqMCCuMh99Ds_I.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 45.94.24.0/24 maxlen: 24
45.94.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:38:37:4b:c9:3d:86:f2:aa:05:69:ff:20:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d617d268dc5226c4a7a7a8c082b8c87df43b3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:52:8a:25:c6:b8:8f:fc:90:1c:5f:e8:66:
26:ba:79:9c:a3:7a:66:ce:ad:56:cc:2f:05:dd:24:
7d:0b:04:6f:cb:58:d2:50:11:1d:3d:e0:91:31:ee:
79:ed:62:ee:22:e4:e9:6e:b8:b1:71:4c:cd:e9:eb:
81:2a:f7:b8:e7:9e:cb:9e:02:b9:a2:22:2c:99:69:
87:ae:9f:26:3b:0d:8b:d5:33:2d:66:15:6d:d8:82:
b5:25:b4:a3:0c:8a:e1:9d:e4:53:6f:f0:32:47:04:
37:58:c8:b0:fd:f2:95:c0:c8:91:90:9a:52:44:10:
7a:df:30:1d:2f:fa:8d:0b:67:1d:0c:55:f6:81:1a:
2a:57:b9:cf:8d:63:97:ac:cc:8b:08:25:99:24:f0:
a6:99:15:06:25:95:a9:47:72:ca:3b:4c:73:20:94:
32:1e:13:a4:18:67:32:9a:4d:ee:bc:f4:7a:36:2e:
c7:70:04:35:94:b7:9a:3d:6e:3e:f5:3c:79:68:2f:
33:d8:77:fd:76:c5:9f:90:6b:ef:13:1f:e8:81:f1:
a9:74:57:f9:71:ee:d0:58:2d:ba:27:70:df:9e:a6:
42:4f:c9:8e:40:b4:ac:5d:6d:c0:39:41:b0:e0:c4:
4e:70:fb:9f:86:ac:9a:eb:a7:2e:fa:4f:39:02:70:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:7D:26:8D:C5:22:6C:4A:7A:7A:8C:08:2B:8C:87:DF:43:B3:F2
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/DWF9Jo3FImxKenqMCCuMh99Ds_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.24.0/24
45.94.27.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3d:c0:6b:89:72:8f:8d:4d:01:7c:40:93:65:89:01:4b:dd:
4b:5a:db:25:79:45:76:fc:c2:44:7d:1e:8e:68:cd:89:68:43:
a7:37:0b:2e:67:24:d9:33:57:c9:a5:d8:07:c5:e3:ef:1d:13:
e4:8b:44:47:f4:af:5c:50:e6:5a:85:38:e3:91:64:08:15:96:
f9:57:6a:c7:be:3e:8a:2a:ab:a6:20:ff:cd:9e:ef:8a:48:f0:
e5:e3:39:2f:ff:ad:17:c1:a9:54:12:aa:f3:9f:d9:ef:b8:b7:
cf:af:66:7a:96:c3:e2:6d:24:39:98:b6:ab:97:36:b6:a2:7a:
50:61:1a:18:f0:05:5c:8a:02:d8:1a:b9:84:1d:7b:b1:9c:33:
4d:8e:81:54:af:06:c0:4b:a7:6f:ed:90:a4:8a:0a:df:78:be:
0f:90:f9:78:04:fb:20:df:c3:52:c1:6e:ae:f3:b0:d0:d1:90:
1a:10:09:84:cb:57:f3:44:aa:c9:75:93:ce:3c:23:0e:25:b3:
ab:22:48:96:4b:10:d1:cf:81:9c:d0:6e:2a:d2:72:91:df:7c:
7f:91:ec:72:aa:d1:e0:9d:86:a4:11:8c:14:71:05:b7:51:d7:
dc:ef:9d:fe:c7:05:cf:15:eb:33:d9:87:f2:38:fa:f1:f8:43:
71:9e:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:14 2025 by rpki-client