Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ki-boVSsV6IZARXZIsiCPsm2IDo.roa
File: Ki-boVSsV6IZARXZIsiCPsm2IDo.roa (raw, json)
Hash identifier: SPITWrNdg6oarpvSu+8CUNcCCn4wgP2n+8G4oKX0n5M=
Subject key identifier: 2A:2F:9B:A1:54:AC:57:A2:19:01:15:D9:22:C8:82:3E:C9:B6:20:3A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B39FE6249BE25FAFB545774FEE6131
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ki-boVSsV6IZARXZIsiCPsm2IDo.roa
Signing time: Thu 02 Jan 2025 15:47:50 +0000
ROA not before: Thu 02 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53107
IP address blocks: 45.148.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:9f:e6:24:9b:e2:5f:af:b5:45:77:4f:ee:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a2f9ba154ac57a2190115d922c8823ec9b6203a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:77:06:ab:c6:7a:c4:21:de:9b:d3:0c:66:
b6:34:0c:99:5d:93:78:41:99:02:1d:a2:b1:06:5a:
7c:39:fc:d2:d6:09:77:a5:66:40:8c:16:3d:84:6a:
25:b5:e0:04:7e:a9:ca:2f:ae:80:3c:8a:d4:a0:fe:
3a:8b:1a:08:7c:02:08:35:af:38:0c:91:c3:81:ed:
ee:34:ca:9b:8b:13:65:8d:d4:8f:4f:45:74:7b:59:
a9:0c:46:3f:15:bb:2d:02:43:dc:b2:00:57:62:d3:
03:72:39:f2:2b:aa:6c:bf:fa:8f:77:9c:6d:4e:a4:
82:c3:01:3f:e0:f8:c3:73:fd:52:94:cb:80:69:b7:
9b:01:4f:06:70:8d:a5:8c:36:bf:40:5d:26:b6:79:
1f:a6:05:aa:63:85:bc:ea:af:e2:64:e4:5a:c7:50:
7b:98:3f:20:13:67:02:10:47:3f:e4:d3:0d:31:b1:
9f:e2:d0:a3:9c:42:a7:90:d3:c6:d5:b5:b7:a8:25:
7c:e6:ea:b8:1b:14:2d:33:56:e1:60:6e:ca:7b:6c:
d4:c8:2a:e6:0c:11:73:64:c3:f2:85:48:05:67:67:
1b:dd:d6:db:8d:a0:36:09:cc:36:f3:5d:fc:7b:cc:
c7:d1:e7:f4:9d:71:c5:e9:a5:cc:9b:e1:97:bb:e6:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2F:9B:A1:54:AC:57:A2:19:01:15:D9:22:C8:82:3E:C9:B6:20:3A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ki-boVSsV6IZARXZIsiCPsm2IDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cb:b4:2c:37:5f:de:8d:d9:32:7d:44:82:d6:2c:02:b4:c8:
81:1f:87:b4:45:de:c1:c2:58:e6:95:22:bd:a4:c9:98:57:19:
cf:17:ea:b3:67:3d:34:f2:4e:c0:67:78:f4:75:59:1e:ba:bf:
80:57:67:86:ff:10:b1:9b:27:36:fa:93:de:40:26:f8:7c:8c:
52:20:18:23:f8:72:6e:9c:74:69:b1:d4:8d:e0:f9:2f:01:4e:
77:22:c7:47:8f:e3:c0:4f:aa:33:c3:42:e6:c6:ae:df:51:c7:
f4:02:b2:f0:34:32:c1:d0:b3:a6:95:8e:fa:b9:79:ec:ee:a2:
0f:25:d4:53:5a:fd:08:f6:f1:ea:70:f0:c2:ce:9d:12:ad:be:
5a:65:db:3f:59:9c:f1:93:ee:67:84:9d:ef:61:da:76:b5:57:
cf:68:ef:6b:37:40:16:e7:fe:02:8e:83:e5:30:83:a4:34:42:
29:02:58:3c:de:58:7b:ca:88:33:3c:85:2f:22:0c:50:22:ef:
87:79:a0:eb:02:a4:7d:ae:60:0e:e3:fd:6b:af:39:be:c7:92:
c6:73:d7:94:22:d4:10:e3:67:25:25:94:4a:22:d1:38:f4:5b:
07:a9:9b:b2:83:9a:fe:c5:05:00:65:1a:c2:a9:2a:01:3c:75:
69:5d:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:45:31 2025 by rpki-client