Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/0U1PWdEsAKvJprUFJELbzEBH-JI.roa
File: 0U1PWdEsAKvJprUFJELbzEBH-JI.roa (raw, json)
Hash identifier: oLclLbqMfwdjGFuPRiTTEhbVpJU0CKFx8tQqUpAPtLw=
Subject key identifier: D1:4D:4F:59:D1:2C:00:AB:C9:A6:B5:05:24:42:DB:CC:40:47:F8:92
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 01946A291E45841C94C2B70C8FF520A06F48
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/0U1PWdEsAKvJprUFJELbzEBH-JI.roa
Signing time: Wed 15 Jan 2025 13:31:06 +0000
ROA not before: Wed 15 Jan 2025 13:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42298
IP address blocks: 45.67.73.0/24 maxlen: 24
45.67.74.0/24 maxlen: 24
45.67.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:29:1e:45:84:1c:94:c2:b7:0c:8f:f5:20:a0:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Jan 15 13:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d14d4f59d12c00abc9a6b5052442dbcc4047f892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:76:d5:db:d4:ca:ff:ae:94:8a:ea:10:e1:
33:bd:2f:7c:8d:f7:56:50:e4:fb:7e:0a:c0:20:04:
dc:ee:3e:4e:7b:f5:fc:7f:b7:f6:4e:d4:31:61:2b:
f3:ec:49:6b:a7:30:66:d0:bb:26:ea:96:5a:bd:88:
96:8b:7d:e5:cc:c8:fc:71:21:d0:f5:64:0e:d5:98:
10:81:46:ee:23:71:91:03:b6:40:42:e7:f1:87:ae:
95:1d:af:e4:61:a9:ca:80:21:db:b9:64:9b:9a:2b:
70:06:94:c5:e4:46:ac:ea:33:76:ac:a2:37:9e:18:
4d:ce:8f:b2:02:f6:22:2d:76:f1:ad:e9:04:43:ce:
71:e8:7b:17:06:7f:c2:ac:7a:49:15:98:a3:11:d0:
8a:be:94:42:7b:3b:fb:9f:d6:b8:5a:90:6c:01:84:
2c:31:bc:ca:2b:ba:36:4e:c1:dc:13:73:f7:fa:84:
d0:04:bb:b6:65:db:1a:35:c4:68:b6:58:86:e2:e8:
2b:5e:4d:2f:d4:93:0a:f6:69:4b:3d:56:42:15:bd:
17:a1:b9:7b:1a:79:05:f6:8b:ba:a9:56:cf:74:41:
39:92:88:14:17:3d:6e:0f:b8:dd:98:0e:7f:36:69:
be:55:bd:ce:5d:cf:c6:07:67:2a:e9:f8:1f:c8:2e:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4D:4F:59:D1:2C:00:AB:C9:A6:B5:05:24:42:DB:CC:40:47:F8:92
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/0U1PWdEsAKvJprUFJELbzEBH-JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.73.0-45.67.75.255
Signature Algorithm: sha256WithRSAEncryption
33:d7:ff:7a:b2:e0:f9:63:e2:f6:03:89:d2:60:6c:9b:2b:4a:
f9:c3:3f:6c:90:29:dd:b6:8e:65:5d:da:7a:fb:32:3e:84:39:
96:b8:1c:d9:07:8e:e8:50:93:2e:a5:6b:9b:26:60:87:75:69:
eb:42:d8:28:74:8a:f1:79:b9:f2:6c:26:d9:f8:ef:e2:66:10:
45:9e:8a:ac:ae:eb:4f:11:71:91:fb:e9:b2:f4:e6:22:41:eb:
56:a9:79:33:27:01:b5:ba:a4:68:24:84:05:06:b6:85:95:77:
af:3d:7c:b3:f7:c8:45:bb:7e:33:06:36:d8:45:0e:62:73:93:
80:40:fc:2e:90:5f:3f:4a:cd:9f:42:8b:a4:0b:f8:89:53:de:
48:69:ca:1b:a6:4e:1b:6e:48:63:ce:81:cb:85:74:22:02:6b:
cc:47:93:00:87:3a:82:0c:4b:54:b8:d3:52:16:d9:89:86:3f:
86:cc:a2:4a:be:52:e7:fc:5c:09:90:9d:bb:18:de:47:ca:e3:
f2:27:7d:46:71:ad:49:93:bb:d7:3c:d0:cd:c3:01:36:75:82:
50:1a:ab:7d:38:a6:6d:cc:cf:2d:05:9a:f7:ce:6c:20:ee:91:
f1:80:7c:06:ca:20:03:9b:20:84:68:5c:a9:2c:7f:b9:05:db:
c4:0d:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:04 2025 by rpki-client