Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/R4plGPMvWUjpa9aukliAnhzGe2A.roa
File: R4plGPMvWUjpa9aukliAnhzGe2A.roa (raw, json)
Hash identifier: oscewSfDrM/B93KPAN0LoRkJw9vGJj8ctioIUb2phK4=
Subject key identifier: 47:8A:65:18:F3:2F:59:48:E9:6B:D6:AE:92:58:80:9E:1C:C6:7B:60
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746EB252559EE327557B0921D10411F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/R4plGPMvWUjpa9aukliAnhzGe2A.roa
Signing time: Thu 02 Jan 2025 13:49:06 +0000
ROA not before: Thu 02 Jan 2025 13:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 195.180.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:eb:25:25:59:ee:32:75:57:b0:92:1d:10:41:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=478a6518f32f5948e96bd6ae9258809e1cc67b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:96:13:6c:8d:58:76:f4:a8:37:5f:c8:33:
c5:fe:05:5b:73:6d:17:51:21:c1:9b:1f:98:21:a0:
af:7b:42:87:98:7e:05:d8:a0:4d:cb:dd:18:99:27:
b2:22:3c:47:55:3d:c2:e5:2d:13:9f:d5:46:ed:f4:
3a:f0:2d:d7:df:e2:f1:3f:de:33:a9:b9:5f:9e:cf:
fd:eb:69:2f:98:96:f4:94:c2:25:c8:a5:b9:06:62:
b0:ef:d7:ab:17:91:dd:43:66:ed:93:ad:f8:08:84:
1d:0c:f7:b7:ee:2f:fb:a9:a3:47:85:77:3f:d2:2c:
33:2d:57:17:30:01:34:52:f6:55:07:f6:99:91:b0:
9a:c3:5e:b8:fd:38:6a:e8:f1:c0:2b:9f:92:f1:3e:
16:d2:72:cc:6e:36:b1:32:00:cc:47:81:1b:0b:97:
39:7a:3c:88:d3:f4:d3:e2:79:77:b6:79:d6:fe:13:
00:4f:6f:7b:a7:64:91:6d:e8:be:f4:3b:c9:d6:2c:
50:be:b4:99:6d:27:6a:87:bb:a2:6a:39:72:4a:af:
08:94:88:0b:bf:a2:b7:6a:25:2c:8a:97:1f:d2:c7:
db:e7:1f:be:e4:a7:2b:b4:83:1f:38:fd:b8:e7:c3:
39:23:1c:0c:26:fd:c1:49:57:0e:6d:67:8e:c8:52:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:65:18:F3:2F:59:48:E9:6B:D6:AE:92:58:80:9E:1C:C6:7B:60
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/R4plGPMvWUjpa9aukliAnhzGe2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.156.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:61:46:6a:34:1b:08:00:13:07:b6:e4:63:6e:ed:b2:34:58:
08:c6:5a:ae:ab:cd:3f:98:f3:fb:83:e1:08:90:8a:50:47:00:
16:58:88:e8:c8:0a:a1:0d:fa:e4:cf:af:d9:f8:8f:1c:da:44:
ed:d4:25:2d:ac:71:04:18:ea:a1:c0:ba:99:64:d8:4b:5d:46:
9a:33:2a:9b:6c:53:06:bb:0f:4b:26:fc:bc:6d:ed:10:20:49:
79:0b:91:b5:a2:50:24:40:52:67:8b:2c:13:58:a5:33:ef:dd:
e6:51:c9:1f:b7:01:db:2c:ad:11:36:d6:17:a4:96:a9:96:33:
15:f4:03:61:bd:34:84:0e:09:38:64:c4:b3:39:05:c4:b1:49:
12:e5:8e:13:b8:33:46:59:03:fa:93:1b:c1:9e:62:c3:bb:1d:
fa:13:ea:94:f6:a5:73:bb:16:80:4e:c7:85:f4:8e:4c:78:08:
8b:19:d6:09:d8:8b:af:0a:d1:a5:9b:a6:24:d4:38:eb:17:b0:
6d:2d:88:e2:9c:7d:7d:bf:02:20:4c:8c:ef:2e:42:2f:ea:65:
e0:de:99:26:18:ae:a2:9f:df:be:dc:e2:4b:cd:d8:89:52:a5:
24:68:9a:31:d7:68:c4:17:74:58:63:93:30:42:6c:e3:55:c0:
9f:40:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:16 2025 by rpki-client