Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9Wbr2DRSrh6Uccf349TtDS-JS9s.roa
File: 9Wbr2DRSrh6Uccf349TtDS-JS9s.roa (raw, json)
Hash identifier: qbMGmBgLJHw9g0auSSJpCpVi86GNLIVTtOoVrQSKzyA=
Subject key identifier: F5:66:EB:D8:34:52:AE:1E:94:71:C7:F7:E3:D4:ED:0D:2F:89:4B:DB
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A12C044D71AFC1A3F689F3881A4D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9Wbr2DRSrh6Uccf349TtDS-JS9s.roa
Signing time: Thu 02 Jan 2025 15:47:51 +0000
ROA not before: Thu 02 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57138
IP address blocks: 45.149.104.0/24 maxlen: 24
2a07:e340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a1:2c:04:4d:71:af:c1:a3:f6:89:f3:88:1a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f566ebd83452ae1e9471c7f7e3d4ed0d2f894bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:86:61:02:e2:de:6a:8d:4e:0d:a0:32:e5:
51:3c:09:60:e4:a8:d1:d4:00:ae:1b:3d:da:b7:e0:
c7:56:52:50:3b:ca:15:8c:13:11:33:b8:33:1d:40:
ba:9d:a7:19:10:5b:35:ff:96:a3:25:d3:8a:32:fa:
b3:81:9b:ca:e3:fc:28:50:87:53:df:8d:73:5d:27:
d2:80:25:6d:b3:9a:21:6c:c7:bf:2c:6a:59:0e:c6:
a1:4a:80:6d:b6:64:a7:84:11:a2:33:4e:40:a8:0b:
fb:31:7a:3a:d3:94:01:42:71:36:c8:9c:bb:12:48:
6b:7e:9b:c5:46:c0:8f:6a:e7:a2:89:a2:f8:15:20:
5f:77:88:9e:3d:c4:0b:68:c0:3d:bb:97:4f:3d:29:
fb:c8:e3:af:7c:f7:0d:58:ec:74:7b:e0:a4:ee:dc:
5a:3d:4f:3d:59:1c:cc:ad:67:55:03:43:ce:23:93:
ac:d7:ae:4b:d9:93:14:1c:f7:e2:6e:7f:1e:b1:d5:
53:9c:6f:64:df:53:75:33:b9:83:d6:9c:b4:dd:1f:
af:4a:d8:b9:36:8a:38:40:5a:8f:6b:31:31:4c:c2:
2a:ca:94:ab:ac:21:85:f9:01:ca:3e:cc:93:8c:d8:
67:dc:47:7f:5d:00:e4:43:57:ba:88:c2:d7:aa:17:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:EB:D8:34:52:AE:1E:94:71:C7:F7:E3:D4:ED:0D:2F:89:4B:DB
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9Wbr2DRSrh6Uccf349TtDS-JS9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.104.0/24
IPv6:
2a07:e340::/32
Signature Algorithm: sha256WithRSAEncryption
08:c2:a5:56:ef:af:10:d8:6b:da:92:f8:68:b9:fd:f4:e1:04:
9b:04:13:35:e6:cc:04:5b:da:cf:5b:09:5f:58:c4:01:98:b4:
54:ed:2f:7f:f7:37:62:f7:44:77:3e:91:7b:b1:bb:3d:56:26:
45:af:5f:28:b3:4a:ca:49:7c:28:5a:92:26:5d:64:3c:b6:c9:
f9:cc:d4:a4:78:56:3e:48:48:ce:2e:4d:76:41:24:77:da:6c:
06:37:c1:18:2b:fa:4f:6a:89:d8:86:dc:52:52:a8:71:0a:1d:
3e:72:63:2f:25:96:6f:dc:d4:25:22:0e:7e:f8:d7:8a:db:a6:
a2:25:0b:d4:b1:5f:2a:a3:3f:98:07:05:9b:01:40:28:6d:ca:
fc:c9:bc:31:14:5d:e5:5f:13:f3:5c:d6:1b:b2:63:64:c0:26:
73:04:86:d4:ee:4b:a3:a2:4d:45:39:9d:d0:ba:de:40:82:83:
2f:81:a5:85:20:d8:4c:1f:0e:ee:95:bf:86:38:51:65:47:cc:
f5:1b:5f:e4:7e:d7:b7:ff:eb:79:b1:6b:1d:69:69:8a:06:67:
da:73:d0:f4:5e:3f:ff:96:fd:38:49:3b:3e:f7:54:c5:89:ff:
fc:27:da:f0:42:e0:96:8c:df:74:ab:70:ae:12:4c:29:32:fc:
e1:08:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:38:53 2025 by rpki-client