Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/kDvrCZDJUN6ltTbVicwTRbgkORo.roa
File: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (raw, json)
Hash identifier: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=
Subject key identifier: 90:3B:EB:09:90:C9:50:DE:A5:B5:36:D5:89:CC:13:45:B8:24:39:1A
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 019425FD8120FB0D8FF3843D630DCEA603FD
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/kDvrCZDJUN6ltTbVicwTRbgkORo.roa
Signing time: Thu 02 Jan 2025 07:49:18 +0000
ROA not before: Thu 02 Jan 2025 07:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208108
IP address blocks: 45.159.232.0/22 maxlen: 22
45.159.232.0/24 maxlen: 24
45.159.233.0/24 maxlen: 24
45.159.234.0/24 maxlen: 24
45.159.235.0/24 maxlen: 24
2a0f:8780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:81:20:fb:0d:8f:f3:84:3d:63:0d:ce:a6:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Jan 2 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=903beb0990c950dea5b536d589cc1345b824391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:91:69:cf:a6:ae:4f:a9:2b:3d:24:33:28:
16:2c:46:fc:de:3d:fa:c2:dc:74:70:97:1c:9b:5d:
82:e1:c9:ca:cf:ff:f4:f0:58:75:f7:8e:70:cf:0b:
ef:91:cf:e0:60:e2:d6:27:07:b5:ae:05:96:bb:a6:
c2:95:45:95:3d:78:c4:9b:76:cb:3d:23:85:bf:53:
28:05:1d:9e:09:53:4c:84:8b:40:7b:8a:33:e4:8d:
cc:03:76:7d:03:74:63:1a:87:50:f2:86:4f:02:ad:
15:43:51:b1:3a:86:0b:f9:33:58:83:d8:b1:d0:61:
59:2f:39:91:ac:b4:bd:dc:62:dd:9c:a5:f4:dc:fc:
08:2d:d7:6e:f2:8a:e5:61:83:01:79:70:2b:9b:33:
8a:df:7d:d8:39:be:a9:f9:9b:4e:e3:13:5a:7a:6d:
52:59:6a:81:cf:21:7e:29:b5:9f:59:aa:65:07:38:
fb:84:e5:74:d6:3e:99:8a:3f:c4:3d:db:fa:16:93:
a7:50:b8:17:0d:02:b8:35:f7:93:a5:aa:3c:d8:d4:
cc:c6:07:ed:4f:8f:8d:8c:03:99:88:17:5d:9e:ce:
11:b6:7d:32:e7:45:e1:0f:66:f2:c3:34:c0:2a:83:
eb:a9:d8:4b:2b:9c:aa:8c:ae:9c:bb:ce:da:67:82:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:EB:09:90:C9:50:DE:A5:B5:36:D5:89:CC:13:45:B8:24:39:1A
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/kDvrCZDJUN6ltTbVicwTRbgkORo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.232.0/22
IPv6:
2a0f:8780::/29
Signature Algorithm: sha256WithRSAEncryption
30:b1:6f:c8:a6:8f:52:2d:54:13:22:2b:23:bb:85:4e:fd:ef:
f9:bd:ff:7d:4b:a3:54:02:e1:bc:4b:8c:34:4d:4b:93:41:bb:
3c:03:11:e2:df:d0:1e:32:c2:c1:d8:f8:5a:6b:38:22:b8:e3:
97:0f:fd:54:d0:64:63:c7:e5:54:65:d1:cd:4d:b4:30:ec:d4:
83:6f:ff:c4:37:eb:90:33:c8:15:f2:81:b5:ea:77:34:b2:58:
45:6a:15:70:6d:2f:8e:06:6a:4e:c8:95:d0:a0:dc:11:e9:62:
94:03:9e:72:a5:80:fe:78:7e:cf:a7:c0:e2:87:35:ac:42:15:
7c:33:78:99:ea:55:ba:11:eb:00:84:fc:6d:34:5b:2d:2a:0c:
c7:bc:14:ff:68:97:e1:a2:20:da:59:a0:fa:fc:af:a2:d7:51:
03:2f:25:cc:6a:cb:c5:fe:09:f0:65:8a:0f:e1:bf:30:c7:02:
70:ef:08:4c:19:a9:13:d7:21:09:6f:e8:54:e2:26:e8:52:bf:
53:76:b1:fe:17:b2:f2:94:fe:c4:18:85:4f:4e:7a:30:02:23:
1e:f6:07:84:55:14:30:72:ea:93:3c:22:56:aa:d9:5a:75:4b:
a9:f5:9f:91:f7:2b:dd:23:76:24:63:e3:0c:42:2b:42:fd:8d:
44:5e:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:49 2025 by rpki-client