Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/dE-dE1C98bzQfzFp4viryEzVGNI.roa
File: dE-dE1C98bzQfzFp4viryEzVGNI.roa (raw, json)
Hash identifier: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=
Subject key identifier: 74:4F:9D:13:50:BD:F1:BC:D0:7F:31:69:E2:F8:AB:C8:4C:D5:18:D2
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194258F68EE37D58B6A7B036A20448E7873
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/dE-dE1C98bzQfzFp4viryEzVGNI.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201838
IP address blocks: 45.92.232.0/22 maxlen: 24
45.147.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:68:ee:37:d5:8b:6a:7b:03:6a:20:44:8e:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=744f9d1350bdf1bcd07f3169e2f8abc84cd518d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:f0:cf:76:5a:94:22:d7:17:c9:fc:4a:92:
58:3d:89:fd:d2:32:24:60:74:04:21:81:0b:5b:3d:
65:11:1c:cd:a9:10:3d:66:65:48:36:e1:9f:dc:7b:
9e:0a:34:a6:82:73:7b:12:f5:28:67:d9:05:40:aa:
9c:12:64:77:22:1c:71:9e:1f:86:86:35:74:f8:92:
1a:13:56:31:27:5b:83:a6:ef:c4:87:da:70:2e:b3:
ab:da:9e:e3:11:4a:37:da:aa:cd:1b:05:6d:ec:5b:
da:f4:19:86:86:6e:ba:8f:fe:48:47:91:5a:31:de:
e2:ee:0f:6b:a7:e4:30:53:ee:ea:32:55:cf:ad:45:
22:63:c6:35:af:47:b2:d3:07:d6:7b:f5:4f:42:93:
16:2d:c5:a4:79:c2:0e:81:c6:94:e0:8d:fc:d2:c2:
a9:cf:64:2b:17:52:5a:02:88:01:81:57:62:a8:1e:
d2:e0:09:f9:f3:77:ac:b6:b3:ef:0b:57:dd:d5:d1:
4a:3f:80:fe:ac:9c:d1:dc:e4:cf:34:5b:94:ca:9e:
cc:6c:80:31:cf:0d:6b:a5:a5:fc:5b:8a:3a:f6:fb:
22:4b:b5:0d:7c:cf:e8:45:be:6a:17:f8:b7:fb:68:
62:02:de:fc:58:5d:2b:89:01:65:e8:24:77:5b:2c:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4F:9D:13:50:BD:F1:BC:D0:7F:31:69:E2:F8:AB:C8:4C:D5:18:D2
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/dE-dE1C98bzQfzFp4viryEzVGNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.232.0/22
45.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
19:4d:c7:f5:04:93:bd:a3:ed:49:4d:0f:c3:79:9d:8c:52:0a:
31:e8:fa:28:f4:e9:d5:fb:f2:ce:01:50:59:6c:b4:0d:93:35:
22:28:13:8d:3e:41:4f:66:76:d9:15:b3:5d:b5:89:50:ab:2f:
2d:9a:11:c3:84:05:4a:6b:45:30:19:ee:49:bd:c2:19:7c:b2:
fd:dd:aa:03:71:7f:05:3c:07:a3:b4:cc:21:71:76:cb:fa:de:
23:5e:c8:09:7c:c1:6a:4f:30:f3:9a:5e:84:69:5d:f0:d1:62:
a7:81:45:7a:af:45:48:3d:72:43:83:47:da:04:ec:ed:89:d9:
da:0b:1f:99:89:69:42:4f:b0:4c:b7:2a:98:64:b9:23:08:6a:
b7:d4:29:ee:f5:90:5a:a3:53:03:e3:d3:92:a6:23:a9:e6:8b:
3e:97:0a:08:05:a0:58:3f:7a:85:d3:79:2a:d0:95:25:5d:cc:
2c:db:85:e6:0c:35:00:99:bf:4e:4f:91:22:df:4a:e0:2d:c1:
de:13:0f:1f:c6:9c:a1:7c:58:47:a6:71:83:06:e3:3a:c4:04:
21:4f:ad:6e:20:17:fd:7c:54:db:d5:d9:67:90:91:69:98:a3:
4a:d4:10:74:f1:19:45:5f:2b:98:f8:aa:d4:7b:3a:56:a1:58:
6b:eb:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:37 2025 by rpki-client