Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/do4MLi2XOROC_5hp-i0wtkMXxiI.roa
File: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (raw, json)
Hash identifier: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=
Subject key identifier: 76:8E:0C:2E:2D:97:39:13:82:FF:98:69:FA:2D:30:B6:43:17:C6:22
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 019423D70C8DEDD3390094DFED0F9DF2DC03
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/do4MLi2XOROC_5hp-i0wtkMXxiI.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.18.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:8d:ed:d3:39:00:94:df:ed:0f:9d:f2:dc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768e0c2e2d97391382ff9869fa2d30b64317c622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ae:b9:1f:9f:6b:4b:6d:f1:23:f5:69:86:33:
97:2c:67:92:b7:f2:21:5d:7d:2d:61:72:4f:4f:78:
8a:da:d6:cb:f3:e5:d1:6d:b7:2b:a1:e0:d3:b4:f3:
86:0b:a4:a6:9b:33:8a:59:64:cf:6f:22:55:c3:46:
f0:5c:22:1d:4c:ef:4b:cc:dc:c2:78:1a:09:ca:c5:
19:1f:e7:a5:2c:1f:77:e8:bd:1c:7d:f3:ac:e0:39:
00:6f:1b:b6:e7:c7:2e:57:39:37:0b:30:0e:98:6f:
a9:6e:64:ba:ad:a4:f0:11:02:ec:ed:37:4c:cf:ae:
63:5a:64:d0:95:af:b4:33:d6:c6:df:bb:34:00:56:
44:ab:16:52:74:17:3b:77:e9:53:2d:a8:72:a8:79:
d1:ff:82:2a:54:f3:b1:ef:fb:6c:a0:2d:c5:f9:c8:
8e:6e:bd:f6:96:6e:a6:57:91:e1:3a:a1:ac:fe:02:
5a:e4:b9:b1:14:3a:1d:ad:7f:aa:93:83:aa:9b:bb:
f1:c8:80:0c:d5:a1:2f:26:4f:1d:21:2b:54:8e:b2:
78:07:c1:78:d8:23:17:75:6f:e1:fd:3b:62:38:21:
f1:83:01:71:ef:78:35:71:cf:3c:9f:78:4d:04:4d:
55:81:0f:16:74:f8:69:c1:67:cc:15:f0:ae:f4:00:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8E:0C:2E:2D:97:39:13:82:FF:98:69:FA:2D:30:B6:43:17:C6:22
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/do4MLi2XOROC_5hp-i0wtkMXxiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:0c:f1:b7:95:91:8a:3f:34:94:22:c0:85:7a:aa:99:d7:8f:
14:76:72:0f:09:6b:a8:2e:76:0b:06:aa:1c:42:4a:23:7a:4e:
48:9e:d0:96:10:04:6f:d5:24:ff:50:f7:f8:ad:48:46:f1:18:
70:b0:a9:ae:c7:a7:ea:92:1a:cf:b7:56:e5:f2:11:ad:3d:3f:
b8:b8:04:b3:1d:08:35:72:f2:61:c3:a7:e1:ad:a3:67:67:bf:
47:44:47:a5:d9:f4:db:7b:45:80:a1:b2:3c:26:1e:05:84:84:
f0:ff:53:82:c7:01:94:4b:f7:6d:40:47:72:76:3f:b3:7d:a6:
d6:da:57:5e:69:9f:c5:55:d3:72:37:a0:c7:7a:11:ff:bb:d3:
fa:9b:89:26:07:bc:4a:70:f0:95:51:76:bb:0c:17:84:ef:4e:
39:c0:34:9a:d7:64:48:13:8c:19:5b:fd:a7:93:bd:44:f6:af:
f0:85:ec:fc:de:e4:d6:98:2c:1d:01:96:74:e2:d8:b8:03:fd:
31:ee:3c:d5:f4:10:d6:f0:d9:75:cb:6d:c2:c8:37:da:e8:f3:
66:d5:56:9b:d8:09:13:48:eb:b5:29:91:2e:09:5d:1e:83:20:
b0:f8:20:f1:62:ab:b9:0e:55:1f:c8:49:f7:f6:99:02:ec:fe:
1b:49:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:53:40 2025 by rpki-client