Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa
File: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (raw, json)
Hash identifier: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=
Subject key identifier: 2A:7E:40:39:E2:2F:A8:38:F4:43:26:34:6B:A8:2F:49:53:98:2B:4E
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194222001A6C928B4E66FCA75BE8A0DEBFD
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35771
IP address blocks: 45.135.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:01:a6:c9:28:b4:e6:6f:ca:75:be:8a:0d:eb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a7e4039e22fa838f44326346ba82f4953982b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:dc:b3:ae:6b:5f:e9:2d:d6:be:67:b6:67:
80:b4:62:86:14:cd:a0:f6:9f:e1:c2:25:ce:c0:89:
39:9e:79:45:66:42:b6:47:12:48:58:c6:07:9d:97:
9c:15:93:aa:18:21:68:06:7e:9c:fb:49:2e:4d:4b:
d0:ea:61:bc:fb:93:98:91:5c:59:f8:13:8b:d4:15:
7f:de:6e:14:6f:74:96:d3:de:e9:fc:e0:ca:0b:7b:
43:c3:3a:f6:e6:97:a6:42:5b:6a:9c:57:10:8a:43:
20:ae:f8:b9:36:96:47:94:ec:ab:c2:0f:93:ec:91:
a1:1e:00:3f:36:fb:65:1d:77:9d:59:6d:c4:aa:b4:
8b:0c:e1:bf:89:0b:26:b5:a4:c9:54:68:63:ab:ad:
01:20:4b:5b:92:05:ac:41:1b:e0:17:73:e8:76:83:
0d:01:0d:82:e9:9e:6f:fa:6f:62:a6:c7:64:d1:bf:
fe:3a:ea:66:ec:15:19:23:c8:5a:05:d5:a0:70:ad:
d9:4b:40:07:da:79:67:3e:0a:76:58:2c:1a:6b:c2:
bb:9a:5d:e7:13:98:b7:ae:f6:f3:86:34:f5:bf:e5:
b8:c2:92:6d:db:d1:4a:0c:69:8b:0b:5e:32:6c:8a:
78:1f:9f:87:34:28:69:b9:60:08:81:8a:9c:7e:5c:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:40:39:E2:2F:A8:38:F4:43:26:34:6B:A8:2F:49:53:98:2B:4E
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:89:67:1c:4e:64:a4:e0:55:cf:95:89:09:c2:bd:0a:8f:ec:
81:ef:0f:ce:ca:e2:28:a0:99:49:e6:70:e4:1b:df:55:9c:e6:
b2:76:5a:9b:65:50:3b:09:2e:d2:de:35:96:e9:bc:f2:fd:b6:
e6:9e:91:ea:89:d6:60:f9:a3:17:70:55:d4:b7:c6:df:1b:58:
35:a2:0e:ee:da:6f:7e:11:58:98:25:5e:bf:f2:e3:a3:68:75:
3f:e0:26:55:60:2f:16:0b:c3:62:86:45:e1:98:74:a3:62:07:
e0:e8:07:b8:80:1f:4e:52:20:cd:bf:f5:83:df:f3:2b:7b:88:
cd:88:61:4e:6b:a4:6c:2e:1a:c1:25:99:e2:a2:60:11:12:b1:
cb:87:11:de:2b:e0:91:98:5c:ca:c4:f0:b0:1d:93:7e:76:ee:
bb:d7:9d:d9:c3:72:63:70:8d:f8:78:bf:3a:4f:f2:24:7b:92:
59:60:be:2b:e3:f0:34:6d:30:79:bf:58:0a:fa:34:ff:64:2a:
8e:77:9b:04:9c:c2:1e:88:fc:9b:ae:d1:5b:24:52:e5:c7:90:
7d:e6:5f:e0:a5:2d:0b:0b:62:be:ec:a9:ef:d5:b8:0f:60:a4:
cf:0f:e5:f6:73:89:81:b3:95:6c:61:54:ba:93:78:d0:d5:0d:
19:00:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:49 2025 by rpki-client