Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/p2_R78qfiRDhzvxPsVGCBtVmaJE.roa
File: p2_R78qfiRDhzvxPsVGCBtVmaJE.roa (raw, json)
Hash identifier: AfONkYdMNZkN9Er/D4pbys1uxPQQYlJm+sdpKa5QxNI=
Subject key identifier: A7:6F:D1:EF:CA:9F:89:10:E1:CE:FC:4F:B1:51:82:06:D5:66:68:91
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 01942825575A495B7BF1DCBAF08E959F4E4A
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/p2_R78qfiRDhzvxPsVGCBtVmaJE.roa
Signing time: Thu 02 Jan 2025 17:52:03 +0000
ROA not before: Thu 02 Jan 2025 17:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6660
IP address blocks: 46.190.145.0/24 maxlen: 24
139.47.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:57:5a:49:5b:7b:f1:dc:ba:f0:8e:95:9f:4e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 17:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a76fd1efca9f8910e1cefc4fb1518206d5666891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:72:d9:64:4c:ae:5e:ce:00:6a:20:e7:51:
88:e8:45:89:65:8f:fc:69:7f:be:af:d0:d9:67:63:
51:05:41:02:6c:3f:bd:21:db:91:4c:2a:c6:49:e9:
80:44:8f:71:cf:70:92:85:d5:72:b8:7c:a4:2d:de:
56:24:7e:48:19:2a:b9:20:3f:85:53:d2:92:f0:bf:
73:f9:43:72:94:3e:02:5a:c0:d8:24:84:c6:a0:ec:
29:d0:bd:0e:8b:26:11:5e:c7:e7:a4:ae:02:aa:d5:
df:ab:af:45:b8:cb:fb:3b:c7:d1:9d:54:d8:57:92:
4b:14:0d:13:32:28:d0:d5:18:15:0a:42:1d:b6:c8:
0e:cd:c7:19:06:f9:32:70:aa:aa:41:e0:66:a7:d8:
69:4a:72:69:2e:18:c4:dd:cf:57:78:7f:68:64:d5:
11:4a:78:8a:fe:5e:3e:eb:25:f5:af:e4:12:65:6c:
80:b7:82:de:2f:6d:96:c8:b7:e0:fa:dc:2c:1c:ea:
30:a0:b5:26:82:e9:17:33:ea:d5:71:a3:74:6d:f0:
49:77:e3:38:6e:a2:77:ef:e3:07:15:7b:22:b2:c4:
da:79:dc:7a:d3:cd:e0:1f:04:9b:79:74:84:2b:58:
aa:cf:82:19:ac:43:4f:22:0c:a0:13:ee:2f:d2:01:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:D1:EF:CA:9F:89:10:E1:CE:FC:4F:B1:51:82:06:D5:66:68:91
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/p2_R78qfiRDhzvxPsVGCBtVmaJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.145.0/24
139.47.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:b2:90:25:b8:c8:66:e0:8b:ae:77:12:0e:10:db:2b:93:7a:
66:06:38:db:33:6f:6e:17:36:5d:8b:f2:d8:56:81:64:eb:9a:
2c:bd:52:e7:05:de:d5:97:82:ad:9c:f2:55:fa:9e:3b:25:96:
34:ec:5d:99:ed:d5:a1:cd:0d:f9:1d:97:4c:de:61:fa:6a:e3:
7c:34:70:01:1f:9a:26:b0:cf:6d:f8:8f:56:79:32:3d:b1:99:
fd:3e:76:f4:6d:f0:44:bf:07:57:ca:ef:fa:90:3a:24:60:6c:
37:1f:6d:f6:b5:d8:ef:0e:44:38:ad:a7:6b:a4:c7:ff:76:17:
cb:11:d8:6f:45:58:24:c6:8b:ac:d8:4a:75:eb:85:e7:7c:83:
00:ce:e9:92:b6:76:0c:c5:57:8d:66:4e:58:77:a2:11:78:74:
4e:35:6b:f9:e1:b7:f8:96:b5:a4:e3:38:b8:e9:b9:b2:6a:62:
ee:05:22:ea:e2:fb:1e:2d:50:3d:af:97:c1:7b:d9:4c:9b:39:
d1:4b:29:25:8b:76:59:89:73:f3:b0:41:94:f9:24:65:01:76:
c0:d3:eb:80:f6:30:5c:0a:76:b0:c9:ce:b8:6f:69:dd:19:d3:
03:20:ae:ae:b1:ea:a4:6b:5b:26:89:86:56:45:63:5e:e2:b4:
70:5c:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:01:02 2025 by rpki-client