Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I9x3LABNx8JreVUT4tJWrDRrP2o.roa
File: I9x3LABNx8JreVUT4tJWrDRrP2o.roa (raw, json)
Hash identifier: sg/uNWGsngtudfVYGWO74lUWY0zkLmvLOkNBStty3+k=
Subject key identifier: 23:DC:77:2C:00:4D:C7:C2:6B:79:55:13:E2:D2:56:AC:34:6B:3F:6A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3976142D91E607643BEB8F2384FD4
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I9x3LABNx8JreVUT4tJWrDRrP2o.roa
Signing time: Thu 02 Jan 2025 15:47:48 +0000
ROA not before: Thu 02 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31122
IP address blocks: 45.88.246.0/23 maxlen: 24
45.139.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:97:61:42:d9:1e:60:76:43:be:b8:f2:38:4f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23dc772c004dc7c26b795513e2d256ac346b3f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:0e:1d:a0:57:5c:5d:d9:7c:c8:f1:5d:66:
b2:56:66:19:c9:fb:24:62:41:b9:3d:ca:e1:da:f4:
43:4c:59:59:1b:70:ac:bc:e3:e1:6d:76:37:2d:de:
2d:c3:78:94:f4:fd:e6:b8:1b:ec:6b:62:c0:63:87:
5f:67:92:f8:a6:97:0a:be:fd:9f:2c:04:65:23:d6:
23:fc:b7:06:cd:dc:12:10:e7:22:6d:e6:c8:6a:9e:
aa:59:c3:c1:0b:d5:90:5e:dd:bc:59:40:af:3b:f0:
ce:fa:7c:19:1e:2a:64:20:7d:ef:e3:55:fe:f7:c2:
de:4d:81:b1:d5:b0:2e:c0:04:7a:44:37:5d:7d:f3:
25:76:54:1c:31:4a:a6:a3:58:7e:6f:9e:54:81:b9:
09:47:80:4e:a5:da:47:6f:fd:08:a0:03:0f:bf:1c:
ca:c3:9f:bd:1c:da:28:b7:d3:09:ac:1a:0d:d3:5f:
3a:d8:e6:16:36:03:fe:b9:7d:60:e9:15:b1:70:dc:
52:e1:25:76:ce:dd:73:43:3d:c0:5b:55:d4:36:ff:
4d:fc:ff:9e:bd:c0:0b:d5:13:89:3e:24:b2:fe:df:
54:46:fb:de:0d:e6:9c:37:f5:99:1e:ff:76:5b:d3:
b8:7d:c9:26:31:af:d2:38:b2:fa:69:e1:bd:e6:1a:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:77:2C:00:4D:C7:C2:6B:79:55:13:E2:D2:56:AC:34:6B:3F:6A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I9x3LABNx8JreVUT4tJWrDRrP2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.139.254.0/23
Signature Algorithm: sha256WithRSAEncryption
92:e8:4c:1f:fe:6f:b4:a7:6d:97:2a:c9:da:16:f3:ee:15:20:
74:d1:5e:0a:b0:6c:9c:d6:7f:90:e2:3d:97:18:dd:9a:14:e1:
2d:8c:6a:43:bb:ab:61:26:7b:d9:58:ea:0e:61:8e:5a:fd:d7:
b1:76:fa:33:26:f0:60:ac:ed:34:3b:a7:20:54:d7:08:11:05:
df:71:38:6d:d5:97:ba:23:68:de:bd:5e:55:56:42:1d:df:b5:
6a:14:c4:87:8d:85:c3:dc:db:3b:3e:60:63:f7:4b:c0:b1:a3:
95:fa:e0:18:8b:03:00:e4:4a:40:61:83:a9:c2:a6:05:ce:b5:
56:2f:96:cd:71:5e:ac:08:e2:36:3d:28:9f:ea:3e:f2:07:08:
e3:b4:be:c0:9a:6d:22:a8:a2:4b:93:ad:84:0d:0e:c1:ba:07:
42:fd:7b:4a:7b:bb:5c:34:b1:b2:e9:e8:68:58:b2:00:b2:27:
15:1c:9e:fe:77:3d:45:ef:93:47:4d:e6:71:ab:00:0b:c3:41:
e7:87:7f:a1:8d:db:65:78:98:71:80:25:fe:a3:e7:5a:2e:e3:
9a:7d:1b:ba:7b:d8:57:b0:c3:04:b0:c7:b2:f7:19:98:0d:a5:
19:42:23:19:b1:00:b2:01:e1:70:74:d9:4d:29:96:3c:1c:95:
0a:ed:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:47:10 2025 by rpki-client