Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/aLOFTmbIhtAjN3yb5swtzqwYK4s.roa
File: aLOFTmbIhtAjN3yb5swtzqwYK4s.roa (raw, json)
Hash identifier: CDWClEeBxtRD7dFyYyPrC68paDAPiI0mvi9EXsqlS5k=
Subject key identifier: 68:B3:85:4E:66:C8:86:D0:23:37:7C:9B:E6:CC:2D:CE:AC:18:2B:8B
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C36A456E3BF2C43317CE1B837E041
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/aLOFTmbIhtAjN3yb5swtzqwYK4s.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 91.108.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:a4:56:e3:bf:2c:43:31:7c:e1:b8:37:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b3854e66c886d023377c9be6cc2dceac182b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:00:c0:02:a8:ba:4d:74:49:e7:4e:66:43:
a0:cb:39:54:ce:62:9e:fb:a9:74:66:d4:bb:26:bc:
66:77:ea:30:cf:95:4b:bd:a5:b9:ce:9d:67:76:67:
3a:8e:d6:a3:7d:29:44:03:e5:9d:3f:cf:42:ea:ac:
fd:87:23:97:00:4d:f8:6f:57:15:e6:83:d6:65:34:
66:5f:94:f6:c0:17:b1:49:6c:ec:1e:5d:d9:4b:c3:
73:12:79:75:e2:e1:69:0e:ae:69:f3:b3:3e:66:ec:
ed:1c:7a:3f:0a:04:cf:21:72:88:77:8c:0b:3f:65:
55:0e:fd:1f:4c:30:0f:19:ea:f3:de:fa:ee:22:cd:
74:6d:1f:e1:90:08:60:18:28:54:e7:b5:f9:be:57:
3a:d0:79:ec:2e:34:22:85:a3:6a:94:9e:a1:f9:7b:
66:6f:d4:70:2c:71:8b:ff:f9:6e:66:09:83:99:b1:
4c:f9:3f:de:b6:19:57:a4:3a:08:53:46:62:e1:35:
67:0f:1e:28:1b:8c:8c:43:35:c7:c2:ac:17:bd:ee:
7c:d9:99:03:37:e6:58:37:c8:ba:dd:26:52:9e:e6:
2b:45:c7:c2:2d:de:53:a3:83:be:27:13:55:87:be:
bd:8c:2d:66:fc:55:e5:ba:8d:0b:d2:ba:9f:f2:1d:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:85:4E:66:C8:86:D0:23:37:7C:9B:E6:CC:2D:CE:AC:18:2B:8B
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/aLOFTmbIhtAjN3yb5swtzqwYK4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.242.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5e:d1:0f:d7:8e:dc:4a:13:19:1a:ef:5b:cc:11:4e:f2:05:
73:88:06:df:20:5e:fd:17:ab:da:0e:44:2a:61:3e:17:fb:6e:
95:6f:c1:24:09:f3:4e:4a:ee:f0:4c:45:cf:7a:77:c7:b5:7e:
dc:c1:6d:88:6c:4c:30:91:2d:90:eb:a6:38:03:f0:69:68:aa:
2d:bb:9b:9c:8c:e1:22:f9:b4:af:bc:6d:4a:8f:ed:24:77:23:
d6:62:ca:57:73:10:31:b6:da:b6:ac:d4:36:10:3e:77:fc:07:
3e:68:83:9e:8e:35:06:90:66:a5:30:2e:6d:03:b2:09:6e:67:
80:f4:2a:d7:8f:1c:32:51:de:df:e9:c4:e2:d0:80:db:3b:b2:
a7:a4:40:8e:3f:20:68:30:a1:ea:32:ab:09:bb:1f:12:65:a7:
fe:5e:8d:fa:97:ce:1d:0e:e0:64:8c:01:8f:00:5a:35:21:8c:
db:7d:73:74:a3:c4:c7:86:bd:6c:89:33:c9:5a:f5:2c:c2:2e:
fa:8a:de:d6:30:0c:eb:e0:f6:4c:c5:01:41:7d:40:2a:d0:12:
14:84:96:b3:75:6b:82:96:3c:5e:04:86:7e:9f:16:fa:46:df:
35:01:30:9f:0c:6c:a4:1f:3e:55:49:49:90:3c:4c:6a:26:73:
ee:84:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:52:57 2025 by rpki-client