Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1T8c7EiiJBb1OIK-KV9_s67krKM.roa
File: 1T8c7EiiJBb1OIK-KV9_s67krKM.roa (raw, json)
Hash identifier: szeYswL9FCf7PYSfIJzc7Q0u/RLbXODKk8gTs/hwfRU=
Subject key identifier: D5:3F:1C:EC:48:A2:24:16:F5:38:82:BE:29:5F:7F:B3:AE:E4:AC:A3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B39787B1C76644FCF714E1601F2A2C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1T8c7EiiJBb1OIK-KV9_s67krKM.roa
Signing time: Thu 02 Jan 2025 15:47:48 +0000
ROA not before: Thu 02 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32181
IP address blocks: 45.84.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:97:87:b1:c7:66:44:fc:f7:14:e1:60:1f:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d53f1cec48a22416f53882be295f7fb3aee4aca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:12:38:e7:e4:bc:8b:3f:31:d1:c5:59:0d:
aa:13:f6:87:8c:f6:ed:da:c5:f1:bd:5d:db:00:c0:
93:d3:eb:76:21:ca:9e:ef:be:2c:fb:8f:6c:f4:ed:
2e:96:50:4d:fe:e6:f3:6c:1d:15:3a:c0:68:2d:3e:
b6:d8:55:b5:ea:42:a2:24:46:ba:4c:ee:47:05:76:
06:83:4c:f9:f9:43:0c:f0:fb:93:65:56:58:fc:65:
15:48:78:31:fb:3f:f4:d8:5e:fb:6f:2f:fc:d2:34:
32:18:d6:28:d4:76:52:af:27:f8:e5:e5:bd:91:98:
a7:e5:a3:7e:e9:34:8d:54:fc:95:67:72:a9:91:da:
46:df:eb:ac:96:a5:b6:29:51:0c:a2:9f:87:87:c8:
4a:c7:c4:25:54:11:43:eb:a1:d5:32:75:d5:55:25:
da:9b:f5:25:ea:84:d8:6b:7a:50:37:9c:2f:8a:fa:
b3:05:90:fe:1f:72:6e:6e:68:fb:53:d5:0d:99:9a:
1f:09:ad:bc:ad:59:7c:f3:30:99:76:15:03:e5:39:
3f:09:24:c8:01:ea:90:5b:3a:f8:13:b1:b4:dd:e5:
e5:0b:76:95:16:50:f1:12:11:e1:05:fd:fd:c3:74:
19:20:05:18:d4:3f:cb:7e:e0:86:fe:17:47:e8:4c:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:1C:EC:48:A2:24:16:F5:38:82:BE:29:5F:7F:B3:AE:E4:AC:A3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1T8c7EiiJBb1OIK-KV9_s67krKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a2:91:84:7a:ec:5d:09:60:16:44:94:bc:08:00:17:f5:ff:
c5:f5:08:30:ce:9a:d3:76:53:2e:72:c4:4e:1f:aa:22:2f:ff:
c9:c4:ae:e2:7f:73:8c:57:be:2b:98:27:9f:dc:60:2d:d1:bd:
6d:db:59:e2:6e:72:4b:9f:bb:f8:f2:69:78:f9:86:f7:ff:76:
e0:6d:d1:71:6a:65:25:e9:1d:37:eb:ed:07:1d:d5:96:64:c2:
1c:32:fc:cf:e9:e2:2b:1e:4e:aa:8a:0a:cd:c9:ee:05:1b:02:
db:00:57:59:a5:63:85:64:40:86:c3:40:45:ab:3c:56:1e:e9:
a3:8b:d8:21:33:44:27:2e:bc:a6:bb:1e:87:62:30:f6:5c:d1:
f3:24:93:0b:b7:28:0e:7f:a0:07:6f:bc:34:d4:35:49:cc:09:
cf:66:88:ba:5e:24:9e:3e:89:2d:76:56:dd:79:ac:28:59:80:
83:8f:57:6d:79:e7:b6:81:71:d8:87:1b:61:44:86:87:0a:2e:
46:19:5c:33:07:b6:b1:77:82:fd:d4:8f:ea:eb:d9:94:1c:3e:
d0:ce:01:34:c6:c4:37:29:bd:94:6b:d9:27:1d:3d:39:9d:e5:
cf:52:2a:2c:fa:35:72:f1:34:ce:9c:01:da:ce:d8:66:51:31:
28:15:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:49:26 2025 by rpki-client