Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/7dKRnkH_61BL1vNIXpiNlOS77-4.roa
File: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (raw, json)
Hash identifier: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=
Subject key identifier: ED:D2:91:9E:41:FF:EB:50:4B:D6:F3:48:5E:98:8D:94:E4:BB:EF:EE
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019428271C8A1056FA12C21F363630E20261
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/7dKRnkH_61BL1vNIXpiNlOS77-4.roa
Signing time: Thu 02 Jan 2025 17:53:59 +0000
ROA not before: Thu 02 Jan 2025 17:53:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212123
IP address blocks: 45.129.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:1c:8a:10:56:fa:12:c2:1f:36:36:30:e2:02:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd2919e41ffeb504bd6f3485e988d94e4bbefee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:4e:66:25:0a:1c:ae:4e:6d:ac:73:b3:a7:
e3:cc:ee:62:1b:b0:9f:07:c6:18:49:a7:26:19:fb:
74:ae:10:14:b9:36:48:a7:13:32:c6:0c:ac:39:45:
fd:b5:da:c2:ad:34:bf:b4:60:9f:42:e8:b5:b3:9f:
f8:9c:e8:df:cc:8f:39:5c:4c:a1:69:5c:9b:7e:7c:
46:8e:33:97:7b:9d:57:cc:a2:29:6f:54:93:e9:82:
06:15:f4:bd:e9:af:ca:57:6f:50:7c:61:1a:03:a9:
d1:33:e9:ca:d0:bf:bc:83:02:66:5b:33:a4:56:fb:
97:c8:73:1e:10:82:5e:54:cd:7d:e5:c3:b4:f4:db:
b7:86:e2:51:8b:c9:98:95:da:37:14:d1:8c:24:17:
fb:8b:7a:a8:95:36:d8:dc:8b:86:f3:6c:8a:5b:98:
1e:4f:09:96:9f:10:66:fe:80:ca:b3:59:8d:84:3b:
e1:77:2e:f8:cb:30:cd:ab:6b:42:1c:82:67:27:49:
6d:9e:b5:99:83:cd:12:cd:df:58:f4:b7:28:83:ee:
5e:fa:fa:c9:83:42:61:e9:52:9f:db:17:1d:12:3d:
20:3c:ba:1d:0a:6f:31:6f:8e:45:d9:f2:63:f5:0c:
62:30:1d:9e:11:fa:c3:b2:4c:a8:98:1f:f2:5e:f6:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D2:91:9E:41:FF:EB:50:4B:D6:F3:48:5E:98:8D:94:E4:BB:EF:EE
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/7dKRnkH_61BL1vNIXpiNlOS77-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.94.0/24
Signature Algorithm: sha256WithRSAEncryption
92:23:d1:57:9e:ad:a0:75:20:b4:27:4d:4b:23:2d:89:5d:a6:
72:4e:ea:52:b8:90:49:c2:83:47:fc:b7:3a:fd:f1:88:ce:44:
c0:94:12:1d:97:4c:3e:7f:93:40:89:70:b8:12:bc:53:58:07:
ab:7f:50:1e:c6:24:50:6c:6f:a8:19:33:fa:0c:c1:73:b7:ea:
0c:57:bd:bc:bd:62:22:96:e0:17:d1:94:cd:52:0c:d5:6e:1a:
2f:83:7a:a0:1b:bc:d4:69:39:02:cc:03:60:31:7c:df:a9:67:
c2:48:89:a8:9b:5e:d1:d7:02:08:f0:ee:49:d5:84:17:89:bb:
d7:6f:6e:64:f5:19:a6:b2:6a:8e:48:d4:11:47:30:1a:89:f3:
fb:d9:dd:ea:28:d9:9c:72:24:e3:c5:58:18:01:18:ec:3c:09:
2d:53:88:d7:57:56:67:77:96:54:90:68:17:ae:d1:d4:04:b7:
d4:57:30:9d:85:a0:de:59:96:75:d1:56:5c:e1:91:c4:b1:a3:
6e:77:ec:35:3e:4c:25:38:50:36:7a:7b:09:99:02:ef:12:69:
c9:44:29:37:a1:3d:8c:62:73:ad:91:91:b9:96:70:16:af:29:
d5:ca:a0:d4:43:10:25:a0:ec:11:d0:88:dc:ec:9c:c4:06:20:
78:f1:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:05 2025 by rpki-client