Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa
File: 0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa (raw, json)
Hash identifier: VlJpTf0fdyW8U0zR40zsjcftXZSZcHJsBj61k0lcS5Q=
Subject key identifier: D1:2C:C4:18:27:78:63:81:97:AD:29:AA:46:98:6C:2B:5C:23:F4:09
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 0194228D2F86697CDAAEA9322C2CF99EDB8C
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa
Signing time: Wed 01 Jan 2025 15:47:45 +0000
ROA not before: Wed 01 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.154.33.0/24 maxlen: 24
62.3.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2f:86:69:7c:da:ae:a9:32:2c:2c:f9:9e:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d12cc4182778638197ad29aa46986c2b5c23f409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:31:0b:3f:6e:5d:96:a3:2d:89:df:ac:aa:
4c:7b:1c:6a:6b:55:32:78:0c:ce:91:4a:e7:63:bb:
94:7c:a8:aa:db:16:58:19:b7:82:19:2b:30:ba:3a:
db:3a:78:d0:be:17:1f:e0:ac:2e:4f:32:3d:da:e3:
7b:80:8c:6c:2c:51:a9:97:4f:9e:4c:6a:f0:2c:4a:
3e:15:cb:fe:a9:0e:57:20:3a:48:77:fb:2e:1b:34:
1f:43:05:5a:40:c5:56:82:a8:88:56:55:04:bb:c8:
65:b2:bb:60:32:46:4a:12:e7:be:9f:20:d2:86:b0:
42:a6:ec:d0:ae:7d:e9:a1:61:55:4a:b7:9f:63:98:
fc:85:ab:c0:54:c8:b2:c2:55:75:f9:1d:43:fa:a0:
0b:5a:9a:a4:df:59:4a:c1:3d:ba:05:64:90:39:9a:
76:8d:ea:45:ef:c0:2d:a3:c9:91:dd:a2:29:70:46:
3d:87:4d:f9:10:69:ca:a9:ec:40:95:45:e2:ae:21:
8b:bc:ae:5b:2a:4b:18:38:57:8d:23:ea:b2:60:54:
fd:e2:90:7d:b8:7c:65:25:06:a7:14:e2:5d:52:6a:
8e:1c:e7:a8:bb:88:3b:4e:68:e7:45:a6:93:ff:ea:
bb:31:96:6a:f7:a1:d7:32:4e:f4:51:d6:66:3d:4e:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:C4:18:27:78:63:81:97:AD:29:AA:46:98:6C:2B:5C:23:F4:09
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.33.0/24
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:81:2f:7e:7c:90:49:16:70:65:a7:0f:1d:75:85:69:b8:3c:
c5:d0:56:37:ab:14:0b:78:1b:32:7b:75:86:cf:2c:c5:2d:98:
c6:f4:a6:94:f4:45:cd:74:bc:f1:33:ba:50:80:e6:c8:64:e7:
48:79:50:ed:57:ab:53:21:52:7c:c0:de:d8:0b:fb:7a:9b:31:
25:fd:e3:9a:cd:e4:ab:24:0f:f9:4d:15:73:a4:ba:52:0b:04:
8c:34:5a:f3:e1:7b:fd:3e:96:f0:14:6b:ff:b6:f0:6d:31:07:
c8:e1:17:43:28:10:17:7e:e2:a7:27:39:f2:1a:f4:45:24:c5:
ad:88:4d:eb:e5:25:6d:ab:8c:70:56:88:74:c6:a8:31:1b:79:
b5:e9:60:cf:d9:30:53:2a:9f:b7:61:c2:99:b3:d2:31:67:b7:
73:89:92:a3:96:f3:83:f0:42:1e:14:ec:4f:a2:55:ce:c3:3a:
03:5b:88:43:2b:f6:b3:b1:a6:68:50:50:15:53:a2:1f:49:b1:
95:6f:7b:57:a5:bf:c2:5c:88:fd:14:6d:a4:a3:95:ee:8e:40:
41:c0:b1:32:5a:c6:4a:c4:c7:9c:6d:a3:62:c3:60:29:d4:f1:
36:6c:78:b0:76:0d:f0:1e:c7:89:cb:50:b9:c3:4f:e1:0a:4f:
74:d4:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:58 2025 by rpki-client