Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/0N6QM3NJZ-wT4OAD7hiG7XUi8Sw.roa
File: 0N6QM3NJZ-wT4OAD7hiG7XUi8Sw.roa (raw, json)
Hash identifier: QX8Ytf+y5Mb5LkQGmTX2OCueH/OCwgJAg/ifPzN/RlE=
Subject key identifier: D0:DE:90:33:73:49:67:EC:13:E0:E0:03:EE:18:86:ED:75:22:F1:2C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A0D0B198C03EB94521C2AD2B6B62
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/0N6QM3NJZ-wT4OAD7hiG7XUi8Sw.roa
Signing time: Thu 02 Jan 2025 15:47:51 +0000
ROA not before: Thu 02 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56309
IP address blocks: 45.91.133.0/24 maxlen: 24
45.91.134.0/23 maxlen: 24
45.136.252.0/22 maxlen: 22
45.144.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a0:d0:b1:98:c0:3e:b9:45:21:c2:ad:2b:6b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0de9033734967ec13e0e003ee1886ed7522f12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:cc:5e:2f:ca:0e:cf:e1:69:1f:1a:08:fe:
99:e6:2a:d1:9e:8c:ea:c4:4c:7f:b3:d9:91:da:8a:
b0:07:75:0d:20:be:9a:9c:cc:d5:3e:ff:02:57:51:
75:63:22:d8:1a:21:e8:8d:2a:e8:d5:3c:c2:25:73:
c1:4b:f6:57:bf:8e:1e:6e:e3:0f:ae:d3:8a:19:c3:
55:97:7b:06:3c:1e:2b:ff:9d:00:11:c5:83:2b:9e:
a4:80:9a:13:4c:ee:cc:a9:c1:6b:87:0e:6b:76:f4:
5e:90:3f:76:14:71:36:46:e8:30:65:ea:8b:44:a5:
f8:f0:a0:d2:f8:a4:95:e0:5e:28:e0:f8:2d:ea:d3:
1e:14:16:44:5a:9a:17:16:09:0c:a6:1e:31:db:eb:
d1:63:51:b3:60:44:b3:35:c6:c5:dd:6d:30:8d:52:
71:ab:21:a2:37:55:d6:52:30:5b:33:21:b2:d8:36:
83:ba:de:9d:fd:ca:37:bb:bd:53:3c:a1:a4:7d:fd:
ca:18:c2:bb:eb:74:30:2d:3e:80:8f:6a:4a:f5:14:
12:fd:43:3f:00:4b:15:55:66:cd:ef:f8:a8:d2:1b:
93:87:4b:c5:58:1a:b6:b5:85:1a:6d:74:6d:a2:4a:
a3:6b:13:d4:08:84:66:e3:a4:3e:37:39:d3:02:be:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:90:33:73:49:67:EC:13:E0:E0:03:EE:18:86:ED:75:22:F1:2C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/0N6QM3NJZ-wT4OAD7hiG7XUi8Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.133.0-45.91.135.255
45.136.252.0/22
45.144.164.0/22
Signature Algorithm: sha256WithRSAEncryption
38:f5:f9:e4:58:49:fb:97:83:1d:c4:98:55:8a:46:33:6a:72:
e1:dc:3c:d5:6a:02:00:4a:1b:41:df:b9:e1:9c:19:18:7c:27:
6f:c6:28:0f:d1:d0:7d:64:98:03:e9:e2:b9:26:c7:78:50:ae:
b0:32:ee:7d:f9:b4:3a:0c:77:41:98:72:14:ea:83:a4:34:3f:
a7:41:02:0b:94:3e:0b:21:f1:dc:28:4a:39:b8:46:e3:03:61:
c9:f0:00:10:24:77:58:b8:33:ac:76:a7:e2:c4:03:ad:70:e5:
e1:f4:32:cd:a8:5f:0b:54:ab:c9:41:d9:ae:d7:c5:44:e8:3f:
4f:27:cd:4e:c5:4a:a9:db:4e:5f:c1:ec:a5:c9:26:19:d1:d2:
b0:9f:75:93:67:40:b8:97:f8:8a:e5:27:7d:d5:27:cd:af:00:
4a:76:7b:37:a5:1a:e4:d6:77:9e:7e:7e:c4:65:4f:c2:b3:60:
2c:7a:2c:c9:b5:11:d5:37:1a:78:77:bc:82:4e:96:1a:89:2d:
e0:08:26:70:16:3b:27:5c:fb:32:c0:10:3d:63:e1:a1:f9:54:
c9:30:da:bc:49:5f:1f:de:eb:56:7e:73:44:26:ca:33:3e:df:
93:f4:5f:e4:8c:4d:9e:3f:dd:03:95:af:00:1e:14:ef:da:74:
9e:72:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:56:08 2025 by rpki-client