Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CHGjaRdSCAe-TRzACdbdK_EFiM8.roa
File: CHGjaRdSCAe-TRzACdbdK_EFiM8.roa (raw, json)
Hash identifier: 0yS55qnpzYJpJk0kNI9SiX7t6cWmSlNBnNEn0xBSxMc=
Subject key identifier: 08:71:A3:69:17:52:08:07:BE:4D:1C:C0:09:D6:DD:2B:F1:05:88:CF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7E16DBDB8709E4F660FC16A174C6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CHGjaRdSCAe-TRzACdbdK_EFiM8.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151326
IP address blocks: 185.215.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7e:16:db:db:87:09:e4:f6:60:fc:16:a1:74:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0871a36917520807be4d1cc009d6dd2bf10588cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:12:de:78:83:ce:ec:4f:70:1e:35:5a:53:
0d:89:7b:00:59:dc:7c:85:9f:28:59:67:6e:bb:8c:
83:58:63:86:18:93:64:65:bb:e9:bb:a0:17:27:60:
bc:50:06:f3:6f:d0:63:ab:a2:df:0f:5d:b8:94:6d:
80:4c:95:13:88:d0:90:92:59:3a:1b:6c:f7:84:8e:
d8:24:9c:77:56:7a:df:e3:c8:3c:85:f2:62:9d:44:
f3:81:69:d0:f4:05:d7:b0:0c:73:4c:7d:b6:43:a9:
a8:c8:10:77:77:16:49:e1:60:f0:de:09:04:01:e0:
4d:59:66:b9:1d:18:e1:5d:eb:0c:b6:b5:6b:33:d0:
60:a2:10:40:1c:87:b8:b6:08:02:f9:a0:b4:47:9a:
ca:36:01:8f:24:34:c9:28:ba:42:2a:25:99:d2:69:
18:47:4b:da:46:21:26:4a:00:0d:54:38:11:34:78:
9d:e6:ea:f1:6b:97:51:d6:2a:61:71:02:81:a0:d5:
1c:9b:fd:2a:e3:7d:ef:99:68:da:da:36:f1:a7:62:
a2:b4:dc:b7:f5:f5:5a:1f:c0:67:16:37:a2:51:ed:
04:20:25:f6:3e:dc:9e:c3:bb:2e:ea:c7:b6:f6:3f:
cc:fd:47:0c:9e:67:5f:61:91:9f:2c:95:fd:d9:6d:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:71:A3:69:17:52:08:07:BE:4D:1C:C0:09:D6:DD:2B:F1:05:88:CF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CHGjaRdSCAe-TRzACdbdK_EFiM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ec:fc:b2:e0:6a:72:c7:81:9b:d8:d6:a7:ee:23:66:5a:65:
f0:76:11:94:7a:6a:36:f1:21:9a:e1:85:a3:e3:6a:17:37:c5:
01:fa:cd:b6:d9:43:fe:f1:3b:e9:6b:16:34:c6:54:9f:bf:0e:
9f:26:96:b6:9a:79:e0:ec:ff:a9:cc:8a:97:68:2d:c8:cc:db:
6c:dd:0c:ac:6c:4f:33:e0:69:29:a4:c5:75:02:82:21:f5:92:
79:8b:d1:41:6f:3c:b6:7c:b1:af:af:57:98:fa:cc:0a:b1:1a:
76:e3:ac:9a:11:92:ff:4c:61:58:69:05:2a:58:3e:d1:29:77:
ec:c7:3d:6b:12:21:45:96:6c:c9:5a:87:f8:e3:98:93:01:e3:
b6:87:83:e1:7a:e6:0a:30:59:3c:89:02:bd:5d:8e:14:42:6b:
37:5a:b7:48:e5:ec:fa:76:b9:ca:62:3c:de:57:86:35:67:b5:
19:91:33:69:2f:d2:78:74:12:29:86:4f:a0:59:1b:03:dc:d2:
bb:6f:7b:32:04:28:a1:0f:c3:34:23:34:31:18:c5:63:d3:f1:
22:83:32:d3:f6:cd:ea:b2:d4:da:04:7b:58:9f:be:31:51:49:
17:89:fa:a8:d9:7d:08:a6:b2:e8:37:bd:45:fa:8a:68:be:0b:
bf:e9:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:19:28 2025 by rpki-client