Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/_ts8OAlwojVR7RrxU45171xnFEQ.roa
File: _ts8OAlwojVR7RrxU45171xnFEQ.roa (raw, json)
Hash identifier: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=
Subject key identifier: FE:DB:3C:38:09:70:A2:35:51:ED:1A:F1:53:8E:75:EF:5C:67:14:44
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01942143E46282EADA76994B14587BDFC877
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/_ts8OAlwojVR7RrxU45171xnFEQ.roa
Signing time: Wed 01 Jan 2025 09:48:05 +0000
ROA not before: Wed 01 Jan 2025 09:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 45.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e4:62:82:ea:da:76:99:4b:14:58:7b:df:c8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fedb3c380970a23551ed1af1538e75ef5c671444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:24:fe:9f:f0:70:5e:45:cb:82:f1:36:cd:
e8:d8:6c:e1:ff:2a:5d:df:76:a1:25:35:5e:33:b4:
c7:3c:63:70:e2:e9:7b:bb:93:35:fd:16:0b:7d:e9:
2c:25:12:34:6b:ab:2d:9d:d8:40:8c:8c:54:1b:18:
e6:6f:ba:d7:02:d1:58:ab:1c:b7:24:6d:e3:24:92:
81:dc:f6:17:90:23:b2:83:d7:19:7f:bf:d9:c4:34:
57:dd:f1:3e:bd:ac:92:c8:bd:b7:18:ff:07:6f:f2:
a2:cc:b7:7e:e1:53:92:d7:64:0f:72:ca:b7:01:26:
91:01:bc:c6:6d:57:f1:71:1f:f1:9d:11:7c:b5:81:
e1:7e:35:6d:2f:11:46:d4:ff:e3:8b:b3:c2:97:82:
bb:b9:f1:23:c1:17:ee:7e:f1:95:ff:02:d6:9e:6b:
bc:23:2a:d5:98:4a:47:82:ad:97:8d:f9:de:b4:01:
26:6e:77:f5:90:f5:95:01:29:72:e4:64:84:e7:20:
15:08:5a:71:fc:67:cf:e3:6f:ea:71:6e:57:d6:b7:
ea:ab:4a:17:31:a8:a4:b6:84:bf:ac:d0:6e:a8:a1:
ef:ff:56:4f:62:fc:b8:f9:b7:c5:06:88:06:ce:c7:
e3:27:72:09:38:ea:3f:87:03:25:e4:e7:5e:03:7d:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:3C:38:09:70:A2:35:51:ED:1A:F1:53:8E:75:EF:5C:67:14:44
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/_ts8OAlwojVR7RrxU45171xnFEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7f:fe:96:46:f2:6f:ab:dd:f9:9b:26:0b:95:ac:f5:67:1e:
00:03:fc:c5:55:bc:8e:88:1b:62:34:1c:24:97:2a:f0:80:ad:
90:bf:08:30:96:ce:87:40:76:43:5f:39:b2:85:2a:c2:e1:a6:
99:87:02:10:98:43:3c:31:3e:94:91:05:88:23:1e:e7:d4:9b:
d0:0f:87:5a:85:f8:6a:9d:c3:48:15:97:bd:4b:e9:c3:bc:85:
2f:40:f8:68:a8:1a:93:c8:80:ac:fb:ad:42:15:18:78:5c:ac:
38:43:37:05:d2:09:b0:94:f6:1e:c8:1a:73:32:ed:30:02:7a:
81:92:d3:93:ca:53:48:f9:38:e5:ac:d4:79:fb:5e:62:b5:78:
11:25:fe:dd:43:fe:a1:7f:2a:2e:00:1c:21:20:51:58:e3:83:
2f:33:bf:12:4d:38:5d:d9:f6:be:12:33:a9:89:e7:25:cc:58:
9d:f3:0c:b4:b3:e3:a5:77:26:00:97:3f:09:16:4d:7b:d8:9f:
99:0e:03:8a:f4:a8:6b:e1:75:a2:f5:a2:d3:d6:7a:37:52:54:
ca:38:81:59:7b:cd:f8:ae:7a:e2:5c:97:e4:83:cd:c2:0c:ab:
04:a3:7f:30:96:13:b8:f8:84:fd:f7:a2:53:0c:a7:22:92:d9:
09:b4:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:43:40 2025 by rpki-client