Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/S31ZOfjUKXHqumIitPUzwNH5MBo.roa
File: S31ZOfjUKXHqumIitPUzwNH5MBo.roa (raw, json)
Hash identifier: 6OktdKUpvFcNMtIKT9x1/tMHyAezG6+Rn6sN9L0iNIc=
Subject key identifier: 4B:7D:59:39:F8:D4:29:71:EA:BA:62:22:B4:F5:33:C0:D1:F9:30:1A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0194FE17D767666794EEA4CD73557B175151
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/S31ZOfjUKXHqumIitPUzwNH5MBo.roa
Signing time: Thu 13 Feb 2025 06:56:02 +0000
ROA not before: Thu 13 Feb 2025 06:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 45.141.233.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:17:d7:67:66:67:94:ee:a4:cd:73:55:7b:17:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 13 06:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b7d5939f8d42971eaba6222b4f533c0d1f9301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:1b:53:e7:22:19:ff:86:6a:39:65:2a:34:
02:f7:28:b1:32:60:7a:39:82:8a:3c:97:e6:5c:db:
c7:36:3d:74:af:b9:5c:85:37:5e:fa:f9:01:74:e4:
f4:70:5f:89:b5:ff:aa:8e:b9:b2:30:dd:79:35:ce:
f1:1d:6d:bb:78:f5:89:21:b8:3b:c8:b4:6f:35:41:
40:6e:98:55:5f:0c:3d:1c:b7:47:6b:2a:b8:cf:38:
e3:a5:94:4b:91:10:a9:e4:39:9f:c5:f0:96:93:4f:
78:6d:63:4f:ec:b8:6a:50:85:5c:1c:6f:74:e8:27:
85:12:e9:57:f2:91:c7:7b:af:ba:7d:23:18:25:3e:
58:87:cd:30:e3:62:91:bf:e5:f9:e4:0b:63:b0:54:
c8:fc:0d:35:11:a0:c0:f0:04:a4:5d:dd:ad:db:33:
0c:a7:7e:41:59:e0:3b:37:10:ae:5e:64:f5:dc:9d:
e4:87:22:37:6d:90:18:11:f5:9b:1a:d5:07:b3:e3:
47:bd:40:65:cd:23:ea:36:41:57:8f:0f:50:ca:dc:
35:08:83:88:ae:ad:b4:8b:64:fe:c4:59:fc:32:36:
8a:85:2f:db:de:35:b5:93:82:58:7b:86:0b:e4:2f:
f5:f7:a2:d5:b1:f4:82:87:ef:dd:53:44:5a:0a:47:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:59:39:F8:D4:29:71:EA:BA:62:22:B4:F5:33:C0:D1:F9:30:1A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/S31ZOfjUKXHqumIitPUzwNH5MBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0/24
94.26.90.0/24
Signature Algorithm: sha256WithRSAEncryption
09:79:68:8a:9b:c4:8f:f3:92:83:de:e2:70:3f:25:47:44:11:
b2:b0:c1:70:eb:57:d0:e7:10:ca:52:47:e0:9d:be:56:7b:62:
4d:62:db:74:f3:20:98:91:38:cf:e1:6b:8b:08:a4:26:3d:56:
e3:fd:3c:08:50:f8:79:ae:47:45:88:67:76:39:bd:14:b2:d4:
41:f4:95:2e:69:b7:69:1c:f1:21:84:92:21:fb:db:9d:f2:fe:
b3:1c:90:3b:b6:b4:bc:94:38:55:ef:20:41:fe:15:07:53:e5:
cf:56:e8:14:00:6c:ea:94:9a:23:78:19:de:00:41:dd:e8:e4:
12:0d:e2:28:a5:e5:e1:ad:45:e4:3b:5d:69:6a:ae:cc:e6:b7:
24:5b:ef:93:eb:cf:79:09:17:f2:2d:d8:3f:08:f5:ca:ef:2f:
6d:01:34:7a:3d:98:6c:1d:e5:56:a1:08:de:00:fd:ed:4a:15:
be:28:84:de:40:11:9a:fe:f2:08:5c:12:59:ed:85:8e:f3:8f:
a3:e3:bb:ed:81:bc:61:0a:dd:36:f3:54:8f:1f:39:8e:1a:13:
48:0f:25:f4:7c:be:e6:14:d3:96:27:fb:dc:f8:0a:93:69:10:
82:65:10:5f:3a:2e:1c:da:e3:c4:8a:a2:88:84:2d:f5:06:72:
ca:87:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:25 2025 by rpki-client