Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/08D6A8hDDz8EmWz4TWfTzIZtuw4.roa
File: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (raw, json)
Hash identifier: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=
Subject key identifier: D3:C0:FA:03:C8:43:0F:3F:04:99:6C:F8:4D:67:D3:CC:86:6D:BB:0E
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019424B3EA32D81B00A8B7A8F1FDFB9D3CC9
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/08D6A8hDDz8EmWz4TWfTzIZtuw4.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208978
IP address blocks: 45.10.32.0/22 maxlen: 22
45.10.32.0/23 maxlen: 23
45.10.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ea:32:d8:1b:00:a8:b7:a8:f1:fd:fb:9d:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3c0fa03c8430f3f04996cf84d67d3cc866dbb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:7f:fd:2b:15:62:49:85:77:ca:c7:c8:48:
c4:ea:c9:77:bc:3c:1f:3f:ae:95:d6:09:e4:83:4b:
d1:e4:1f:a8:c1:ad:63:4f:55:3f:6e:0f:00:12:96:
9e:6e:aa:9c:be:a9:49:25:cb:3c:42:72:4e:57:79:
90:81:78:52:d1:b8:d9:ae:62:e7:70:cc:cd:d3:0a:
b9:84:f2:bf:5a:fd:fc:34:bc:d8:6b:c2:45:38:40:
38:f2:18:45:88:e2:13:0e:11:4e:54:69:b1:22:60:
1f:7b:d5:8a:06:e7:e2:26:18:6c:55:b4:15:ec:2b:
cd:5b:d4:d6:00:73:af:7d:46:bd:8c:cf:da:28:1d:
36:20:db:25:ad:dc:7f:a1:fb:93:0b:73:20:b3:ec:
c7:ff:62:d8:25:dd:51:e4:85:ac:fb:48:48:8d:74:
a2:bf:a0:b8:22:6a:67:60:14:eb:48:cc:44:8d:06:
fb:83:11:51:f2:b7:2a:2e:d1:2c:66:47:cb:43:e3:
88:8d:1e:58:08:75:c7:cc:8e:78:2b:6f:af:da:84:
86:0a:ef:fe:4e:03:5f:ac:35:ac:34:be:c7:be:2e:
46:80:7a:d2:1d:73:89:eb:c8:e7:ee:cd:e5:d2:52:
f4:f0:bd:50:d1:37:4c:b9:b1:31:fd:d1:3e:d0:3f:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C0:FA:03:C8:43:0F:3F:04:99:6C:F8:4D:67:D3:CC:86:6D:BB:0E
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/08D6A8hDDz8EmWz4TWfTzIZtuw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.32.0/22
Signature Algorithm: sha256WithRSAEncryption
19:76:31:e5:93:ad:f5:68:03:6c:48:09:71:15:4d:1b:bb:b6:
6e:f6:1d:a6:93:9a:52:12:42:23:3c:e8:9d:69:63:ff:2f:2f:
4d:85:e9:29:30:c2:5b:59:35:55:06:24:79:63:f2:2a:b2:e6:
29:0a:92:37:9a:06:4a:85:a2:da:9f:99:ea:84:bf:3b:12:98:
57:bf:ba:bd:76:35:2e:2f:57:af:03:2a:36:3c:06:0e:26:36:
3b:63:56:06:5d:4f:40:cf:02:84:bd:71:5c:b2:75:2a:a7:a1:
1f:a2:d0:a8:ab:89:dc:4c:36:c9:05:cf:29:08:19:bd:f8:20:
b8:54:f2:15:ff:29:d5:0f:57:68:50:de:d0:3b:67:34:51:ea:
17:8d:99:8e:ff:62:51:b8:cd:41:89:25:e9:d0:05:4f:86:f6:
55:ba:e7:a6:ae:1e:05:f7:98:da:16:e2:ed:b3:eb:7e:a5:55:
1c:04:6c:41:a9:a8:da:af:92:5d:4b:14:db:21:85:26:75:f9:
50:aa:11:b3:3b:a7:11:6f:34:f9:0b:7d:c8:b9:72:f8:6e:73:
27:08:f3:44:bb:70:df:63:45:07:07:78:49:d9:cb:9e:32:ab:
62:c6:68:76:1e:1b:c2:9c:c0:28:9c:22:43:d9:c0:bb:2e:e5:
b6:30:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:38:47 2025 by rpki-client