Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/45nFwSfRSlaQjRkGCPcUJWvciEE.roa
File: 45nFwSfRSlaQjRkGCPcUJWvciEE.roa (raw, json)
Hash identifier: 9odU6BBNBHyqSisRw5u4WcFe37OW3V4ofyvQ43zqoHc=
Subject key identifier: E3:99:C5:C1:27:D1:4A:56:90:8D:19:06:08:F7:14:25:6B:DC:88:41
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B38F6D2DB99B3BF2E063B6FA7752A8
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/45nFwSfRSlaQjRkGCPcUJWvciEE.roa
Signing time: Thu 02 Jan 2025 15:47:46 +0000
ROA not before: Thu 02 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6848
IP address blocks: 45.131.62.0/24 maxlen: 24
45.131.63.0/24 maxlen: 24
2a07:e346::/32 maxlen: 32
2a07:e347::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:8f:6d:2d:b9:9b:3b:f2:e0:63:b6:fa:77:52:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e399c5c127d14a56908d190608f714256bdc8841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:69:ca:3e:da:f8:b2:61:f1:09:dc:9c:77:27:
43:03:cc:84:c0:6f:c6:5f:54:74:12:5a:38:96:48:
c8:81:7c:fe:5f:11:f6:98:0f:be:68:17:52:97:74:
67:53:eb:8f:97:60:0e:e8:dd:12:17:55:17:25:86:
3f:a0:a4:24:67:4a:0e:66:6f:e3:0b:a3:0e:3c:4d:
76:ca:a1:c7:33:8a:55:7c:b6:4b:ed:64:a4:ed:6b:
59:90:1b:3e:35:00:ee:18:59:7d:7c:b6:06:91:b8:
c0:56:45:e5:fe:c9:4b:67:23:cc:1e:0c:4a:bd:db:
8f:63:55:1e:73:81:74:3c:a2:1b:dc:5d:56:40:de:
8c:18:64:90:e7:d0:3a:7f:41:91:8f:c4:0f:a0:a2:
47:d6:e8:9c:da:56:fd:fc:fb:45:88:0b:42:11:26:
e8:0b:02:2a:34:4d:e5:48:10:8b:c6:7b:c1:de:2d:
9c:2f:3c:5b:c3:87:52:77:41:9e:ae:30:88:f2:cc:
bb:a0:dc:22:5a:a0:dc:f5:05:0b:fb:83:3e:0c:a1:
9e:af:4e:5a:66:01:d3:49:1b:74:8c:84:c6:b6:f7:
b9:0b:44:1e:7c:89:0a:85:30:cf:3c:86:8e:c0:45:
48:2d:5b:32:ca:9e:c2:85:7d:6b:fa:4b:38:2f:7d:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:C5:C1:27:D1:4A:56:90:8D:19:06:08:F7:14:25:6B:DC:88:41
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/45nFwSfRSlaQjRkGCPcUJWvciEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.62.0/23
IPv6:
2a07:e346::/31
Signature Algorithm: sha256WithRSAEncryption
63:39:4d:65:ef:95:d5:00:ef:8a:0f:9c:c3:68:d0:ab:bb:82:
b7:88:56:d2:bd:5e:1d:ee:c4:80:12:c5:f0:47:e6:32:7e:58:
26:ef:40:9e:cc:4a:56:aa:ec:51:aa:04:39:52:24:0d:9d:e7:
7b:14:62:07:de:8b:96:b2:13:06:43:6f:76:90:5e:4e:52:5a:
0a:1f:2f:2e:f1:5d:e9:be:86:ea:95:11:7f:42:5a:f5:5c:c6:
0f:8d:ff:cc:fc:c2:12:33:3a:8f:1a:55:0e:4b:02:0d:e3:0d:
01:fa:1c:b5:c4:04:bf:c2:fe:29:b1:32:c6:31:93:fe:6c:4c:
15:db:4e:75:aa:ca:71:92:46:c6:b7:9d:84:ca:1d:39:e9:ef:
26:0c:54:a1:3e:54:4b:09:45:74:d6:56:19:ea:17:a3:2c:6b:
10:7b:9f:d0:71:fc:e7:5e:da:22:06:1d:35:01:07:ff:26:ac:
9c:12:45:70:9f:ec:96:a7:b6:24:55:e0:9b:d0:25:96:eb:cd:
ef:c8:8a:c5:5a:d1:11:9f:84:73:4d:61:e9:21:35:2e:c2:3c:
cd:be:d4:e2:47:bd:36:26:28:ea:96:0f:ea:cb:6e:e3:f4:e5:
88:f2:de:28:92:03:9a:03:50:f8:5f:ee:b4:fd:18:fd:c9:1f:
aa:1e:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:41:28 2025 by rpki-client