Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/_abtUqDmMxDQ2RmQqkGL8N8DjTE.roa
File: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (raw, json)
Hash identifier: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=
Subject key identifier: FD:A6:ED:52:A0:E6:33:10:D0:D9:19:90:AA:41:8B:F0:DF:03:8D:31
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 01942521E1998184E29F1C4CB307200A6282
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/_abtUqDmMxDQ2RmQqkGL8N8DjTE.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208131
IP address blocks: 45.157.148.0/24 maxlen: 24
45.157.149.0/24 maxlen: 24
45.157.150.0/24 maxlen: 24
45.157.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e1:99:81:84:e2:9f:1c:4c:b3:07:20:0a:62:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fda6ed52a0e63310d0d91990aa418bf0df038d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:81:ad:ba:4c:1b:61:70:29:64:1c:b4:f8:
22:0d:80:49:e4:54:75:8e:36:44:e5:83:b5:2b:07:
5d:46:f5:e8:c8:47:b4:22:9e:0b:2a:74:db:8e:c2:
70:dc:6b:35:85:86:c7:16:c2:d4:6c:c1:7b:9d:91:
e3:74:7a:ce:b8:88:17:7e:66:06:89:c9:a1:23:96:
e4:75:77:85:9b:da:d2:1d:72:74:68:99:1b:f7:2d:
85:4c:5e:13:47:64:40:a8:2e:bc:77:7e:f9:32:f7:
ea:9b:89:81:74:78:db:c8:0c:e7:eb:6c:9d:d1:4c:
1c:fd:6d:36:e8:16:95:ae:8a:f5:2b:6e:5e:9a:2c:
c2:95:e2:8a:27:b8:6f:cd:e7:32:27:f7:a1:3d:1b:
a9:5c:9f:97:4f:2d:5e:94:8b:39:f8:d9:4b:57:08:
c3:2c:eb:90:13:aa:66:31:4d:94:a8:ce:c2:e7:12:
16:56:c8:34:a4:43:77:e2:bd:2a:60:aa:7c:6d:eb:
21:2c:bf:fe:10:4e:40:ae:62:d3:a8:d5:df:ae:fd:
cc:dd:0e:99:79:40:73:7e:05:2c:34:9a:59:2f:84:
27:36:91:4d:92:ee:07:31:f1:63:b9:cc:db:c9:98:
ea:a4:e9:6a:b6:c3:de:65:34:a9:b2:f0:bc:32:95:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:ED:52:A0:E6:33:10:D0:D9:19:90:AA:41:8B:F0:DF:03:8D:31
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/_abtUqDmMxDQ2RmQqkGL8N8DjTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.148.0/22
Signature Algorithm: sha256WithRSAEncryption
10:b8:eb:a9:17:3e:a0:28:c7:50:ad:ba:a9:57:33:ff:49:b7:
7e:8b:d1:bd:e1:3a:c5:b6:12:5e:c0:71:aa:ba:8a:8c:51:2b:
67:c2:c8:11:98:3c:af:7f:b2:0b:fe:f9:31:a6:99:36:a8:96:
3a:41:ce:eb:0f:fe:39:66:f0:fc:67:a9:21:2e:47:eb:7e:45:
66:f3:75:61:78:29:5d:f5:a6:f5:7e:d5:0f:8a:b8:0c:24:34:
6a:13:1b:4e:a3:5b:db:8e:84:21:fb:c7:7d:72:b5:60:da:cf:
2f:0c:7e:e4:7f:82:96:f4:d4:1f:c9:f4:96:cf:b9:14:6f:23:
1b:76:13:62:eb:a7:78:e9:1e:aa:cf:09:87:58:a1:2c:27:9a:
ca:20:c6:05:a3:1c:6b:76:51:37:33:4f:12:9a:ce:31:00:3e:
f6:85:8e:8f:11:23:ae:d3:33:ef:2a:84:18:38:a9:cb:fe:9b:
dd:e7:f8:9d:83:32:26:52:a8:3e:35:ff:29:19:f4:87:80:55:
06:5c:a5:cf:17:6a:af:68:62:bf:d7:23:41:d6:83:c1:b4:35:
fc:46:a1:73:38:a7:b6:d8:96:da:e1:c9:a8:bc:22:4a:21:8d:
f7:ba:25:3f:1b:df:7c:be:0b:18:3e:f8:5f:ec:44:4d:21:04:
c2:a5:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:07 2025 by rpki-client