Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SU3zF3EI9xt0rGQ6VHdeS-pSVgA.roa
File: SU3zF3EI9xt0rGQ6VHdeS-pSVgA.roa (raw, json)
Hash identifier: EYntOS7Yz2TwrsXGOyZVBBbKpJjFn/8QT2bZpC5Zyjg=
Subject key identifier: 49:4D:F3:17:71:08:F7:1B:74:AC:64:3A:54:77:5E:4B:EA:52:56:00
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748952F5306CD7AD4635AFF404440C6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SU3zF3EI9xt0rGQ6VHdeS-pSVgA.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199436
IP address blocks: 45.152.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:95:2f:53:06:cd:7a:d4:63:5a:ff:40:44:40:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494df3177108f71b74ac643a54775e4bea525600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:06:2a:95:b9:ed:0b:41:c6:1c:b3:a2:b3:
11:61:8c:c3:01:12:22:23:02:32:b5:63:90:9d:0b:
55:4b:be:51:5b:85:2e:b6:ff:ba:a0:5a:9b:9c:54:
14:f4:11:34:03:ae:8d:e3:ef:42:1e:a9:1c:c5:98:
80:68:17:a4:24:d7:89:c6:c3:d0:72:9a:ab:1c:b4:
22:22:bf:56:72:45:08:1e:a5:a5:44:1a:86:00:d1:
64:69:93:1f:b6:08:ee:b5:03:fb:52:54:9b:6a:e4:
1f:63:16:31:0d:e4:f1:60:83:8f:12:e4:61:d7:fe:
df:20:bc:12:4b:dd:87:e3:b4:83:67:36:5d:78:ef:
96:2a:8b:2c:aa:44:10:b4:6b:0c:0a:21:65:e8:36:
1f:f5:2f:dd:c7:ee:6e:49:24:8e:a1:53:fe:89:56:
f7:17:ab:50:41:9d:c4:da:23:df:6e:09:03:a7:bd:
f2:36:1e:31:ec:a6:19:92:3c:8c:fb:37:bc:39:fd:
49:42:9d:f8:a3:a1:e0:bc:dd:6c:d1:c0:d6:00:77:
ad:71:6b:24:6b:46:ce:2c:02:a7:6c:d6:67:e4:85:
19:52:4e:b1:1d:a3:09:e3:86:e2:b7:ff:6e:3b:ef:
43:31:8c:bf:e4:66:3a:3c:3d:a9:c7:89:57:2b:55:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:F3:17:71:08:F7:1B:74:AC:64:3A:54:77:5E:4B:EA:52:56:00
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SU3zF3EI9xt0rGQ6VHdeS-pSVgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7d:4a:1e:f5:53:13:d1:7b:d3:6f:e1:2a:38:fd:a9:9a:bc:
33:30:ed:a1:91:d4:38:21:30:15:0b:4f:03:ed:b4:98:1c:e3:
c9:43:43:e6:46:13:03:ae:24:1f:ec:e4:f7:14:bb:a8:73:4a:
56:31:5f:62:2c:f1:56:27:88:06:b4:fd:bf:70:2c:2f:54:b9:
7f:a6:ed:7e:f5:c9:e6:9d:83:f1:fa:ba:a6:d1:f1:3c:58:e0:
57:c7:e2:76:56:ed:e5:9e:c1:72:19:ce:68:ef:cf:cc:c3:09:
b9:38:74:9f:d2:dc:58:33:87:da:f7:90:17:b9:fe:ba:45:4b:
5d:c4:c6:64:4c:a4:c3:50:21:28:6b:eb:5f:e5:99:38:64:a6:
49:d5:ed:b9:e9:8f:01:ae:b6:6c:2a:6a:9a:4d:15:49:28:3b:
91:e0:73:8e:90:16:76:fe:bf:df:d9:0b:7e:11:6f:ba:ad:6c:
2d:5c:dd:1c:7c:c3:b0:f4:c4:d8:17:3c:fc:88:77:02:6e:6b:
0b:4a:b7:64:18:a3:cb:47:7f:16:83:ec:f8:59:40:dc:9d:84:
f0:57:f9:a7:6b:b3:df:f0:7a:b8:9a:c0:cf:71:f3:3b:5a:db:
41:01:50:0c:61:40:49:2f:39:75:2c:26:46:95:b4:ed:db:d4:
2b:1e:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:54:51 2025 by rpki-client