Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/wTHnefFYASN9t7OgaDJP2pTz5W4.roa
File: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (raw, json)
Hash identifier: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=
Subject key identifier: C1:31:E7:79:F1:58:01:23:7D:B7:B3:A0:68:32:4F:DA:94:F3:E5:6E
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 01942669D1BB98E0CC5E99CE43E07C736238
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/wTHnefFYASN9t7OgaDJP2pTz5W4.roa
Signing time: Thu 02 Jan 2025 09:47:36 +0000
ROA not before: Thu 02 Jan 2025 09:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 45.133.24.0/24 maxlen: 24
45.133.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:d1:bb:98:e0:cc:5e:99:ce:43:e0:7c:73:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jan 2 09:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c131e779f15801237db7b3a068324fda94f3e56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:8b:1c:2f:9d:df:d9:1d:00:c6:3a:b4:0c:
13:ad:e7:7a:02:c4:cf:91:82:c9:25:02:8c:df:60:
b8:01:8f:47:78:ba:a5:fd:0f:bc:61:57:15:4c:15:
a5:99:39:f9:5e:4f:0f:8f:df:e1:60:7f:3b:36:a4:
7f:bf:b4:61:03:90:c6:fe:33:2b:21:7f:e4:00:80:
1d:02:c8:5e:6e:b7:d7:41:ca:9c:59:97:4c:c7:e0:
42:bc:f6:80:fc:96:18:42:f4:fa:a6:57:71:11:c8:
68:aa:50:96:7f:9e:c8:7f:64:44:da:18:a5:ee:e9:
b9:08:94:6e:36:06:9a:fd:d7:6d:8c:9a:a8:aa:3b:
32:52:00:09:e8:2c:9d:67:41:1d:a1:54:38:1a:40:
fa:95:f6:ff:7b:20:7a:3a:ac:7c:34:46:a7:4d:93:
51:45:b6:26:49:e5:68:d4:5f:ef:83:90:97:57:2b:
fe:c9:b0:8f:23:ec:12:69:65:4f:fc:17:37:ca:49:
79:06:30:44:95:86:6b:87:e8:48:52:6b:74:fa:97:
75:93:c1:e8:be:91:24:b2:a4:b3:3a:7a:0d:c2:1d:
64:83:88:41:86:6c:81:4b:e3:74:69:9a:90:43:42:
b9:2d:32:bb:10:3b:a7:1c:dd:5f:f4:82:fa:0c:22:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:E7:79:F1:58:01:23:7D:B7:B3:A0:68:32:4F:DA:94:F3:E5:6E
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/wTHnefFYASN9t7OgaDJP2pTz5W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.24.0/23
Signature Algorithm: sha256WithRSAEncryption
49:cb:ed:de:c0:03:68:14:63:55:4d:c8:d2:ab:b1:a9:60:aa:
f5:6e:fd:f8:3a:f9:f8:0b:28:a2:8d:49:b7:79:2c:34:de:74:
e0:43:9a:ad:a0:f0:0f:bd:6b:f9:42:50:7c:79:d8:b5:6d:f6:
7f:e6:b6:1b:79:64:03:41:f3:0f:34:c2:6c:83:a7:d6:cb:0a:
bb:d7:21:29:a1:f2:18:ca:2b:74:1f:51:56:7e:35:87:2a:9b:
c0:25:6f:9d:a9:64:14:ef:e4:c9:39:48:a0:2c:19:db:ca:02:
96:b4:1c:82:61:3c:02:ba:cd:10:52:cb:ec:d6:bc:f4:99:4b:
c7:d9:9d:db:eb:48:b2:c4:81:b2:48:14:c7:c2:e1:21:3d:c4:
f0:df:2e:42:d9:56:fd:9b:80:fd:98:e2:61:91:23:7b:20:59:
fc:11:5d:1c:79:58:3d:53:98:09:86:f9:14:9e:59:95:3b:e4:
a7:0f:f2:2b:72:ba:8b:52:3d:b0:a3:6a:ae:2a:93:8d:20:7e:
df:6e:52:40:6b:47:b8:b5:92:19:ab:48:d5:0a:23:97:2c:b1:
cc:c9:fa:74:e8:a0:5d:9b:f1:37:8a:05:39:6b:ca:23:7b:67:
b9:b9:54:14:1b:6c:bf:02:8c:3c:d8:d4:22:62:a9:ab:1c:eb:
8d:78:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:14 2025 by rpki-client