Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/NP3I33PqiM24AyrvrXcXkrcATEY.roa
File: NP3I33PqiM24AyrvrXcXkrcATEY.roa (raw, json)
Hash identifier: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=
Subject key identifier: 34:FD:C8:DF:73:EA:88:CD:B8:03:2A:EF:AD:77:17:92:B7:00:4C:46
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 019421B209E5A0BE9FBCDDB6F525968BEA96
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/NP3I33PqiM24AyrvrXcXkrcATEY.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212176
IP address blocks: 109.95.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:09:e5:a0:be:9f:bc:dd:b6:f5:25:96:8b:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34fdc8df73ea88cdb8032aefad771792b7004c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:4a:2a:e0:09:e2:8b:dd:33:dc:4f:60:53:
b4:25:e5:76:67:9c:81:76:d1:9c:ec:87:af:4b:a0:
8d:1c:ea:af:57:05:44:76:b5:d2:5b:4f:11:ef:16:
5e:38:d2:87:87:11:a7:12:da:9b:70:9d:3b:82:04:
dc:2f:8a:43:72:b0:6d:c4:2a:f0:1d:6c:1e:ce:7e:
63:bf:53:68:b0:44:53:97:55:78:59:00:6b:9f:a8:
b0:c2:5a:34:99:cd:dd:89:1c:54:dc:d0:bf:cd:28:
f1:b6:24:4e:21:f1:d8:ec:81:a4:cf:c6:ed:82:17:
cf:be:cf:12:b8:ca:ad:65:d1:ba:a2:82:7c:55:bf:
e9:01:c1:15:03:61:2b:69:8a:86:9a:4c:10:85:c8:
62:b6:1d:9d:d4:da:59:76:da:fd:54:60:c3:19:75:
dd:2e:08:54:53:65:c7:6e:0a:4a:f1:45:c7:43:1e:
94:4d:ee:a3:6a:2c:a5:05:95:b1:fb:3c:15:84:5d:
02:c2:aa:d7:58:1d:10:3e:a2:df:22:de:ae:31:15:
4c:55:58:13:4a:ee:6c:1d:b3:fc:a3:2c:60:fe:6b:
d4:71:cf:ea:2d:ec:9c:b4:41:53:cd:f4:96:b0:2a:
ea:7c:7e:15:8c:44:17:e8:b0:89:93:a1:5a:01:03:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:C8:DF:73:EA:88:CD:B8:03:2A:EF:AD:77:17:92:B7:00:4C:46
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/NP3I33PqiM24AyrvrXcXkrcATEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9c:56:0a:57:fb:51:44:22:3e:b4:74:3b:19:e8:b3:3f:89:
f5:b0:03:2a:a1:16:74:97:9e:44:1a:cc:7f:8a:cf:10:88:76:
a6:2b:47:5a:c0:e2:0f:07:2b:23:64:15:2f:20:b9:a5:27:54:
0b:ec:b7:92:04:f6:09:89:d9:63:a4:de:55:9b:01:7c:5c:e5:
f3:81:83:80:f7:ae:54:71:5c:79:01:04:de:b0:ec:9a:a8:87:
e3:30:55:73:26:69:03:92:51:0b:eb:39:dd:49:4b:08:81:c1:
f2:68:0d:fc:15:c5:b9:1b:d4:4c:b7:93:0c:02:db:66:81:58:
aa:fd:06:dc:a3:40:ab:64:3f:74:21:db:33:94:62:26:10:98:
a1:f7:41:dc:30:21:b2:65:af:60:46:1e:b7:49:04:d5:3e:87:
82:e9:79:31:90:59:26:0b:15:3c:cc:89:9e:43:78:84:de:50:
9c:f8:a4:79:18:bc:99:ff:31:f9:7f:eb:82:59:61:5c:43:4f:
e2:ea:ae:aa:3a:a8:9f:a8:f4:72:50:ef:f7:3d:a7:f1:0d:dd:
32:d3:8e:61:83:ec:02:7c:9f:80:cd:13:86:5f:d0:71:77:14:
f4:73:f9:04:60:dd:7a:6f:72:d1:1e:e8:83:08:af:4a:61:83:
d1:b8:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:45:09 2025 by rpki-client