Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LL7AEgR132RnJITVXb1v0I3LCyw.roa
File: LL7AEgR132RnJITVXb1v0I3LCyw.roa (raw, json)
Hash identifier: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=
Subject key identifier: 2C:BE:C0:12:04:75:DF:64:67:24:84:D5:5D:BD:6F:D0:8D:CB:0B:2C
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01942220053563C0C83582C3723A8B68F282
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LL7AEgR132RnJITVXb1v0I3LCyw.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52044
IP address blocks: 45.135.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:05:35:63:c0:c8:35:82:c3:72:3a:8b:68:f2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cbec0120475df64672484d55dbd6fd08dcb0b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:ed:9b:0a:fc:d0:8b:dc:39:c8:96:43:b8:
8a:fb:15:8b:95:d5:07:17:63:69:d9:a4:a3:1b:d9:
20:c6:f0:ba:38:d8:05:8b:6e:d2:19:f2:4c:81:5e:
3a:08:a6:c8:6d:a7:43:20:ea:53:2d:6d:3f:2c:d3:
68:e7:b4:5e:66:78:a3:ef:03:6a:d6:a3:05:a7:f2:
2a:04:c7:e1:b8:2f:f0:cb:08:21:2c:bf:99:bb:1e:
1d:57:fd:08:0e:93:04:e0:fe:15:3b:01:63:ad:70:
fc:5c:77:57:db:2e:9f:c4:1b:1d:9d:85:4e:33:c4:
8f:e9:e0:79:71:85:ec:ae:0f:70:ce:49:b5:37:7c:
37:34:a2:ec:17:7c:78:49:f5:9e:3f:61:15:d6:5e:
fb:52:48:56:ac:de:d7:8c:61:01:4f:25:18:e8:e3:
c6:df:c0:90:c3:a7:40:f4:a4:89:96:e6:11:05:d1:
82:4e:ec:67:1d:0f:ec:3f:67:c6:a5:87:3b:1f:d8:
af:0f:d4:13:95:09:2b:be:74:49:0f:b5:f7:96:7f:
bc:f9:f3:a5:07:5d:a7:dc:d3:f0:4f:d6:f4:85:c3:
88:45:c7:ed:1b:4d:47:66:36:c4:38:59:8e:0c:7b:
99:1d:14:81:b6:68:cd:73:5f:af:26:99:70:20:e8:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:C0:12:04:75:DF:64:67:24:84:D5:5D:BD:6F:D0:8D:CB:0B:2C
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LL7AEgR132RnJITVXb1v0I3LCyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b1:e6:b9:23:b3:e9:26:e5:1b:8f:0c:4b:05:f4:4c:cf:d7:
7a:18:1f:17:21:f8:c7:12:f8:d0:2c:7c:c0:8a:b0:c4:17:5a:
a7:4a:bf:e8:ea:62:64:71:ba:e4:35:16:0b:37:ab:60:e9:0c:
fb:19:e1:fb:fb:4c:fc:ed:88:be:c7:fc:65:6a:0e:18:1d:d1:
b7:28:4b:66:b2:6d:95:0a:b7:b7:33:53:3c:cc:e6:85:7c:88:
42:79:b5:ab:16:e2:03:01:9d:2d:c2:eb:98:86:ea:d6:5f:13:
ab:2c:72:5e:9a:f8:42:7a:d2:14:d9:b2:fb:03:4f:ee:61:d6:
06:22:ce:6f:2a:1e:28:f3:e5:96:08:9f:fc:26:0f:2e:59:71:
20:db:e9:ee:d9:a0:ab:56:80:6e:39:a5:f0:94:1a:57:b2:5e:
1f:49:7b:da:3e:87:88:7a:57:10:f2:d5:52:6f:b0:a9:1a:e3:
ba:6a:5e:74:4c:b7:cf:99:94:f4:d4:f6:9c:31:74:84:e0:9a:
aa:92:ee:ef:46:a6:f8:bb:cb:6f:f9:a7:4b:8a:1e:8d:15:6c:
bc:8e:65:05:78:2d:81:15:b3:1d:d5:c0:0c:20:4d:cd:f5:9d:
0a:01:87:0a:bd:bb:6f:13:bd:a7:23:5c:e4:b9:ba:28:9c:14:
e5:cb:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:57 2025 by rpki-client