Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-L1Iks80Jp2MwQg1uj1Z7zm-Fnc.roa
File: 1-L1Iks80Jp2MwQg1uj1Z7zm-Fnc.roa (raw, json)
Hash identifier: 6YGpJcrQ/W1lrB2ESnolque3B56ahF2RMMPVYLcYh9I=
Subject key identifier: F8:BD:48:92:CF:34:26:9D:8C:C1:08:35:BA:3D:59:EF:39:BE:16:77
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3AE47ECAB0176A5BFC08B7BADF5ED
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-L1Iks80Jp2MwQg1uj1Z7zm-Fnc.roa
Signing time: Thu 02 Jan 2025 15:47:54 +0000
ROA not before: Thu 02 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210558
IP address blocks: 45.94.31.0/24 maxlen: 24
45.138.16.0/24 maxlen: 24
91.206.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ae:47:ec:ab:01:76:a5:bf:c0:8b:7b:ad:f5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8bd4892cf34269d8cc10835ba3d59ef39be1677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:5c:2f:24:15:7a:51:1b:1d:dc:c7:ec:ee:
c7:c0:29:6d:11:27:79:1b:bb:40:97:42:85:77:de:
41:d3:b0:38:6f:cf:dd:61:10:a8:07:99:99:a9:2d:
10:53:97:5f:e3:00:f3:d8:47:cb:0c:f9:7a:c9:09:
77:57:bb:38:a6:5f:84:f8:eb:f4:45:80:40:56:36:
ef:b7:51:9c:25:36:fd:ce:94:06:12:33:41:95:a9:
fe:3b:0c:21:33:7d:a3:8e:0a:5c:f7:50:fe:42:cc:
50:08:8e:9d:d9:8e:ac:9e:13:42:56:60:dd:93:87:
56:89:23:82:0f:0c:cb:ed:1e:88:c9:2c:b5:71:af:
29:7d:17:58:45:c4:31:87:49:af:ff:03:3e:00:a6:
29:73:ee:49:d6:e8:99:79:6a:b9:29:a6:21:19:f6:
cb:f9:e0:c6:99:7f:e2:6f:15:ae:00:5f:61:5e:c3:
ae:ba:08:fd:30:39:80:f1:48:40:ce:52:c2:2e:f0:
33:a9:c5:09:4d:d5:4d:9f:79:8f:e4:eb:97:78:7f:
54:e9:1c:7c:1f:83:b2:02:7e:08:97:ff:0e:9c:91:
b8:55:61:57:73:64:ac:5a:2f:c9:7c:2d:00:18:3d:
d8:47:54:13:e1:d5:6f:a9:ae:b7:34:84:84:f5:76:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:48:92:CF:34:26:9D:8C:C1:08:35:BA:3D:59:EF:39:BE:16:77
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-L1Iks80Jp2MwQg1uj1Z7zm-Fnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.31.0/24
45.138.16.0/24
91.206.169.0/24
Signature Algorithm: sha256WithRSAEncryption
49:82:1c:1c:aa:c5:51:6a:3c:de:f3:e6:41:0d:40:c4:fb:86:
e7:99:43:6f:10:eb:af:f5:e3:bb:1a:ca:bb:7b:06:64:b8:82:
0e:7e:76:4b:13:17:8c:c5:9e:77:b1:98:a9:b6:32:9c:45:dd:
a7:16:24:05:4a:9f:49:bc:5e:5f:ab:59:82:55:3a:d2:db:50:
9f:df:48:6e:d1:73:1e:cd:d4:a4:8e:16:61:a2:57:b7:55:f5:
43:03:dc:8f:1f:aa:a3:db:42:c2:27:5d:78:06:40:0b:0b:f8:
44:c2:fc:3f:96:7d:0b:01:ce:56:d4:e4:e3:86:46:dd:2a:5b:
18:01:b4:93:dc:18:b6:d3:65:4b:b0:0f:63:0a:d7:f8:27:10:
0e:01:43:5b:9e:01:3c:da:40:d9:85:e4:f2:6f:de:ea:91:cf:
c4:f1:f8:ab:58:11:f6:0d:bb:35:9a:29:5a:80:c3:e8:bf:a4:
52:5a:c2:38:c4:3b:e6:69:7f:ac:9d:7e:dd:53:72:9f:93:14:
cd:de:58:a0:6d:71:7a:fb:3d:fc:6d:b5:34:fa:55:af:6b:c8:
76:b9:cb:fb:36:35:92:a1:bc:79:dd:5d:c4:90:a0:17:f5:c3:
38:b1:53:a4:95:c0:79:1a:16:82:55:73:22:2e:fa:1d:90:fe:
c4:19:6b:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:37:21 2025 by rpki-client