Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1doUOBukG2mLZxDvlSm3tlCNniU.roa
File: 1doUOBukG2mLZxDvlSm3tlCNniU.roa (raw, json)
Hash identifier: kwobGo8JpDp8pT/haiBsXaOjpOmxoXMKb90J/0mlHv8=
Subject key identifier: D5:DA:14:38:1B:A4:1B:69:8B:67:10:EF:95:29:B7:B6:50:8D:9E:25
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 019427466396B3F8E93E417E664FC146D4DA
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1doUOBukG2mLZxDvlSm3tlCNniU.roa
Signing time: Thu 02 Jan 2025 13:48:31 +0000
ROA not before: Thu 02 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136268
IP address blocks: 45.154.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:63:96:b3:f8:e9:3e:41:7e:66:4f:c1:46:d4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5da14381ba41b698b6710ef9529b7b6508d9e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:72:ea:4f:74:fd:69:50:f0:e6:e3:b0:db:
34:56:8c:d0:a7:04:37:d0:08:f7:54:19:5d:1a:55:
a3:c5:25:db:14:b1:c0:0d:9a:bd:76:c5:90:0d:36:
12:91:1d:0f:f4:a2:57:53:a8:64:99:de:0c:bc:1a:
f5:15:d8:4f:69:75:b8:71:8c:96:47:41:37:b0:ba:
90:89:a1:a3:77:ce:4d:31:c8:a6:ca:06:4e:f2:08:
5f:a2:06:ad:e0:53:89:93:07:80:c2:77:94:a2:1e:
2b:c7:d6:27:8f:88:fc:4b:32:9d:67:76:9d:f5:7c:
6d:e7:00:95:4e:c7:13:72:3b:b3:60:c2:4d:d5:f8:
eb:63:b4:41:26:b9:8b:88:c9:fa:56:8e:a1:3a:79:
6e:0a:15:5c:aa:8c:15:57:f9:d7:c9:04:a8:e2:f6:
c4:30:ec:0f:a0:e2:88:b8:de:7b:fc:77:49:97:63:
19:5d:c4:fb:f4:72:be:8f:d2:a9:7b:a5:53:80:b8:
88:34:79:ce:a5:7d:c7:c8:69:c6:5f:6f:31:87:fb:
90:e6:ce:01:ef:0b:db:5e:b0:ed:b5:f2:6d:bf:50:
46:68:3a:db:ea:e7:a1:2c:d1:49:a7:af:3a:32:b9:
7b:ca:45:c0:30:19:2a:0d:c4:84:ad:d6:fd:f3:98:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DA:14:38:1B:A4:1B:69:8B:67:10:EF:95:29:B7:B6:50:8D:9E:25
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1doUOBukG2mLZxDvlSm3tlCNniU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:26:dd:06:96:9d:a4:68:b0:9f:6e:62:55:f8:75:66:65:2a:
40:fa:19:94:a9:b2:ed:d2:15:9b:b3:17:c3:8f:6a:1e:b3:b3:
8b:ee:b5:64:19:72:ab:90:1c:ae:0e:dd:3f:56:c3:02:56:7b:
0f:6a:03:a3:2f:a4:17:ff:fe:69:86:a5:bf:b4:61:3c:20:a1:
93:47:13:be:36:16:9d:04:e7:47:f0:95:1a:89:56:61:78:6b:
23:68:03:72:2a:87:90:d7:ab:51:83:3c:82:75:0e:fb:e3:6f:
42:7f:f7:a1:3c:41:b6:b7:b0:ae:73:c1:4b:72:15:5d:8a:ed:
65:67:37:f5:fb:ec:1a:f9:ec:05:bc:10:7c:61:06:00:e2:a0:
11:f1:f1:3f:28:4a:82:b4:dd:36:4e:24:8f:5f:52:33:7c:08:
32:38:8c:31:af:db:1f:c0:ab:22:fa:00:c9:3a:b9:63:4d:08:
16:45:91:a8:6a:36:e9:e0:0a:c2:68:f6:31:37:92:4d:45:f7:
41:f4:25:a5:3e:e0:d6:aa:e6:7b:dd:81:c3:a8:ca:41:d4:e5:
ee:c2:ad:a2:54:a5:33:52:4d:2b:c1:0f:73:65:85:ba:f3:de:
a0:87:6f:6f:c8:9e:63:0f:e3:8d:38:87:d2:d7:e0:79:6f:22:
cf:5c:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:52:00 2025 by rpki-client