Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/Ly1MWymIvXOCybb36lr4yOkjsU8.roa
File: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (raw, json)
Hash identifier: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=
Subject key identifier: 2F:2D:4C:5B:29:88:BD:73:82:C9:B6:F7:EA:5A:F8:C8:E9:23:B1:4F
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019427B4A27585AD13512ED5B0B1010927F9
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/Ly1MWymIvXOCybb36lr4yOkjsU8.roa
Signing time: Thu 02 Jan 2025 15:48:57 +0000
ROA not before: Thu 02 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1764
IP address blocks: 194.45.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:a2:75:85:ad:13:51:2e:d5:b0:b1:01:09:27:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jan 2 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f2d4c5b2988bd7382c9b6f7ea5af8c8e923b14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:33:18:25:df:bf:49:48:94:45:7f:a5:85:
5b:83:bf:4b:9f:9f:33:80:7e:10:3c:37:fa:df:bc:
64:0c:1b:9b:d8:01:18:6a:48:f0:63:2c:2e:6a:37:
66:77:60:97:4e:8a:ce:34:b8:9e:fa:e1:b0:fb:6a:
ce:b2:89:10:37:79:05:af:a8:28:5c:91:96:b7:0f:
8d:5e:37:30:59:de:16:b8:3b:fb:8d:71:6a:04:e8:
12:4e:25:17:a1:1d:1f:72:35:07:16:2f:b1:7e:f5:
c5:ea:89:8f:d4:47:6b:12:b8:01:af:55:75:92:64:
b6:c3:70:0a:d8:c4:f7:3b:dc:db:84:96:3b:c7:e6:
9a:f2:45:53:44:2a:cd:64:e5:1c:fb:59:bf:b7:c8:
94:50:11:e4:25:da:a6:8f:b6:37:c4:66:7e:20:b3:
0b:3e:3c:af:42:c9:f6:c9:17:86:45:fe:59:b2:ab:
45:29:cd:56:7b:66:c9:c2:18:01:c0:6c:88:5b:42:
1e:c7:f9:de:a8:c2:43:e3:fe:70:09:d6:d1:96:a6:
31:04:a8:9c:49:0b:14:3c:c4:75:d4:02:79:62:79:
e3:12:56:33:0e:fc:5d:d1:7c:7d:fe:7a:69:11:04:
a4:80:c6:9c:17:27:3e:e3:d2:18:55:66:c9:22:54:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:4C:5B:29:88:BD:73:82:C9:B6:F7:EA:5A:F8:C8:E9:23:B1:4F
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/Ly1MWymIvXOCybb36lr4yOkjsU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.144.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:10:a1:6d:bc:da:e9:a9:b0:b7:d0:ca:39:59:a8:3b:1f:71:
a7:d8:01:dd:2c:7a:2a:fa:6d:0b:e6:f8:1e:f7:3d:0d:25:aa:
9f:96:cb:26:a0:a8:c3:29:7e:a9:ec:8c:ce:31:ac:8a:57:a7:
39:d0:c4:aa:bc:31:f8:90:fe:25:22:05:7e:01:56:8e:b7:03:
a9:bc:8f:33:df:6f:6b:ff:54:f2:d9:29:53:85:a7:a1:0b:6d:
2b:ce:d2:12:e1:e3:90:ca:63:ff:d1:04:36:d3:f3:ff:52:96:
5f:d7:23:07:47:bf:46:4d:aa:15:6b:d5:39:83:1d:40:4a:6a:
9b:29:0d:c4:9b:dc:9a:5d:44:8a:32:64:f6:8d:ff:e5:7f:61:
a6:98:46:56:0d:4c:43:7a:71:94:20:d3:ab:bc:e3:2c:ba:a2:
e0:fd:bc:11:8b:35:5d:07:22:bf:0b:5b:1f:73:b3:68:f2:35:
cc:d4:5e:3e:b3:da:82:9f:9e:cd:64:b6:37:1c:5b:aa:df:7a:
1c:69:b1:3f:c7:52:17:c3:57:1f:ff:8d:37:5c:da:c0:42:bf:
ac:38:ab:c2:f3:6a:93:fa:0a:f9:2c:c5:fa:80:2f:45:11:a4:
38:0b:d4:d8:ef:4c:99:17:36:4c:45:78:3c:f9:6a:92:7c:a8:
2a:e5:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:48 2025 by rpki-client