Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa
File: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (raw, json)
Hash identifier: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=
Subject key identifier: 3D:E6:6D:38:AE:97:72:B6:2A:95:FF:36:36:8A:69:D4:11:56:01:74
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747CF3E9A42462CE752F648D595B13D
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56876
IP address blocks: 45.137.244.0/24 maxlen: 24
45.137.246.0/24 maxlen: 24
45.137.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cf:3e:9a:42:46:2c:e7:52:f6:48:d5:95:b1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3de66d38ae9772b62a95ff36368a69d411560174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:14:d3:17:b9:31:9f:c2:31:b3:6f:61:20:
c7:01:dc:d3:ab:80:17:aa:e7:64:12:62:65:ce:a0:
a5:f9:22:1d:7d:bc:d0:ec:5f:1a:46:75:6f:7b:60:
12:c4:b7:28:04:56:9d:4b:f9:a4:4d:b2:5d:02:16:
46:eb:34:7f:e8:90:58:89:c5:53:86:e5:f2:6f:72:
54:b1:1f:08:50:9b:7b:1e:84:b1:36:17:3f:dc:76:
3b:0e:41:a5:15:d9:d4:3c:3c:e8:6d:e7:7f:14:ce:
8d:fe:ad:2d:2d:ed:76:cb:d3:ad:35:76:60:54:5c:
c3:c6:0b:06:a9:09:fe:6f:f3:e5:3a:a4:de:31:02:
b8:f8:05:a0:4b:5a:83:f2:9c:f2:0c:29:49:c5:e9:
4f:56:0a:5d:1c:5a:42:70:75:61:1e:7f:c6:0f:15:
b2:c0:6f:1b:d6:49:99:67:8e:44:6e:02:09:96:11:
06:70:50:cd:19:66:24:bf:5f:c8:30:2d:e3:5e:91:
e7:2d:43:d0:ea:ba:86:45:8b:d8:5a:86:f0:dd:14:
dc:23:b8:93:72:18:40:68:e8:20:af:e6:be:31:43:
c5:d3:65:9e:86:ac:c4:30:0e:83:47:53:52:bc:bd:
8a:1a:87:5e:4b:5e:3f:bc:b0:3d:a8:4e:67:99:31:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E6:6D:38:AE:97:72:B6:2A:95:FF:36:36:8A:69:D4:11:56:01:74
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.244.0/24
45.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
49:f2:91:12:8e:0b:a5:94:fd:16:46:be:e9:8c:53:18:56:c8:
3f:a6:8e:4b:45:8e:a5:12:39:9d:c2:ab:9f:97:5d:02:5b:b1:
1c:8b:dc:ce:c2:13:5d:13:84:2e:d8:65:9a:7a:b8:89:ea:10:
b8:31:ad:0a:77:c0:a9:9e:0e:8e:60:bf:18:2b:50:ab:0c:5b:
48:4a:88:53:0b:2d:38:98:7c:8d:c2:b5:ae:63:2d:cc:4e:12:
57:e9:89:30:22:0a:0e:11:2e:a6:ef:7b:a0:ca:e1:3d:04:0b:
41:03:db:9e:bb:68:b7:57:8a:7c:b0:a7:45:7e:81:c4:6c:6c:
e5:c3:08:1d:6e:e4:cd:96:df:87:10:53:e0:76:da:2b:9a:85:
60:3b:6e:d6:4b:b2:89:46:9b:7a:90:7f:6b:fa:e7:69:47:61:
f3:b7:0d:ff:1e:18:66:cb:07:b6:73:ed:62:9b:c4:d1:99:88:
9c:e7:7b:68:29:f4:5a:0f:01:05:1b:e5:02:ae:38:91:1b:5c:
4b:2c:19:0e:a8:9d:e9:e8:89:09:7f:3c:71:aa:bd:f8:fa:65:
8e:7f:ce:32:0f:56:8b:a3:e2:9b:60:59:a9:75:e3:9e:f5:14:
a9:55:47:13:89:d7:de:af:00:e9:d6:3f:e5:17:04:fa:08:70:
84:89:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:06 2025 by rpki-client