Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa
File: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (raw, json)
Hash identifier: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=
Subject key identifier: 9F:72:21:33:5C:C1:45:AE:A9:49:56:87:59:BC:11:95:69:41:73:D7
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5B94CA246349C416224C638E33BFB
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211407
IP address blocks: 45.149.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b9:4c:a2:46:34:9c:41:62:24:c6:38:e3:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f7221335cc145aea949568759bc1195694173d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:95:59:24:a0:bb:64:7c:97:c6:71:f9:4a:
3d:c8:1c:e9:a9:79:3a:b0:37:6a:cd:1d:b7:2e:9f:
84:a4:79:f6:e7:ab:93:d9:cf:78:fe:0e:f1:e6:b9:
af:3a:6b:97:72:78:4c:f0:c5:1a:7f:90:87:a2:c2:
a6:78:52:09:95:71:85:78:d7:dd:fd:54:03:e2:9d:
31:22:2e:35:70:7d:3e:3a:4e:a1:44:85:fe:d8:5a:
5b:bc:5e:1f:37:16:8c:69:46:53:1f:f5:ff:08:88:
a8:01:e5:79:cc:0a:e6:d0:4f:93:47:94:a1:0a:d7:
97:2c:20:00:90:e8:26:c4:d9:9a:17:89:1b:19:ea:
b8:40:7d:af:85:38:a6:b9:1d:1d:12:d9:61:8d:bd:
5a:77:bd:d2:37:df:f3:dd:d6:0f:87:13:66:e7:33:
f7:42:18:03:f7:90:2f:97:b2:0b:5f:25:ea:8e:a2:
a0:d6:32:54:33:57:86:1f:3f:0c:a5:6e:6e:dc:ac:
5b:62:af:23:ca:60:f2:61:9d:8c:54:d3:e1:22:08:
f9:3f:d0:70:3f:fb:4b:bd:6d:75:9a:6f:f7:16:3f:
52:06:e8:d3:f7:62:e8:1d:f2:1e:93:84:6c:88:94:
0b:6a:fd:ab:fd:33:be:70:56:ef:e7:85:b3:62:3a:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:72:21:33:5C:C1:45:AE:A9:49:56:87:59:BC:11:95:69:41:73:D7
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.93.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1e:98:6b:3d:1f:59:14:eb:43:24:a3:98:d8:77:a8:0d:79:
ad:53:30:3f:aa:d7:fb:85:d2:60:a5:8c:48:96:f0:43:7b:4b:
22:7b:fa:6a:8b:ae:98:0d:62:19:9a:0c:94:88:51:78:36:59:
c9:5f:f2:ed:75:46:33:2e:d2:58:1b:0c:22:d2:71:8e:db:e6:
aa:83:ec:5c:51:c0:ea:3e:63:cf:b9:a1:99:f1:97:d4:e2:ac:
06:cf:e7:ff:ab:5a:11:1b:11:d5:d5:12:58:05:75:f0:e0:89:
b7:6f:4e:79:bd:f2:f7:63:84:18:a1:60:ae:98:a2:2c:7c:37:
41:f6:74:f1:ca:e5:01:64:a8:71:a8:74:1b:9e:87:4e:16:fb:
f3:68:fb:7c:c1:51:9e:4d:1b:64:77:81:dc:66:3b:3a:84:69:
33:b3:ee:ac:79:b6:ef:13:7a:16:18:28:f3:0a:b1:91:40:b0:
a0:45:09:ea:be:cf:7b:b3:96:41:0f:53:72:7c:5d:d0:22:59:
ba:84:98:82:bb:d1:1d:11:f4:87:a1:f7:7e:eb:9d:bb:66:6c:
af:fa:54:14:4b:66:31:e4:56:74:fd:2d:9d:3a:11:2a:b9:b1:
e6:95:41:41:aa:24:56:05:8f:07:c3:f2:e1:3f:bd:09:75:c0:
81:f3:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:22:00 2025 by rpki-client