Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/0_4kPqijH_S1Eq86-B5t4Qptkkc.roa
File: 0_4kPqijH_S1Eq86-B5t4Qptkkc.roa (raw, json)
Hash identifier: monnJnatCyTOeVv1VvBMMHzgkVsFi5krNSX8ZQ1sFsY=
Subject key identifier: D3:FE:24:3E:A8:A3:1F:F4:B5:12:AF:3A:F8:1E:6D:E1:0A:6D:92:47
Certificate issuer: /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial: 019420D65C740CEA86E972E19658958E1133
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/0_4kPqijH_S1Eq86-B5t4Qptkkc.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34427
IP address blocks: 45.157.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5c:74:0c:ea:86:e9:72:e1:96:58:95:8e:11:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3fe243ea8a31ff4b512af3af81e6de10a6d9247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:4f:5c:74:c2:1e:14:33:5f:ae:3f:5e:ce:
de:b6:6c:0f:d2:9c:c9:85:24:7c:9a:e0:12:2b:77:
00:fc:5a:c9:fa:94:f4:8f:bd:ef:b2:97:3d:d3:7d:
fc:ac:7b:d3:c6:dd:40:ec:e1:e6:dd:d8:c9:46:3c:
82:7a:28:2f:ac:8b:8e:8f:7b:2c:37:58:33:fd:de:
6f:4a:3d:f3:90:f7:1c:1a:33:0e:cd:47:92:a8:36:
e6:1c:1e:e0:a2:cc:94:37:72:38:72:74:f5:0a:e4:
c7:5f:17:a0:cc:93:2f:c9:d9:0f:6d:3a:3b:3e:cf:
be:e6:2d:0d:fa:d7:7a:4c:30:e0:d2:3c:1f:eb:90:
54:89:01:59:46:03:dc:4a:25:de:8c:5d:6d:4f:22:
d5:0f:a0:44:e4:26:6a:e5:c8:cf:b2:c6:91:79:66:
18:19:6d:88:8c:b7:b5:e3:e6:ab:e5:5d:f5:1b:a4:
6d:6b:83:b3:d7:8c:cf:c7:9f:8c:e5:3e:bc:db:0d:
22:a1:4e:3e:55:42:19:2d:22:c0:06:1d:d1:aa:b9:
e7:40:cb:49:29:60:91:bb:ed:3b:e7:fe:8e:0c:03:
e5:4c:75:49:28:38:85:0f:a2:20:77:fe:8e:fc:11:
81:28:cf:fc:cc:b1:ab:10:d8:5f:8f:aa:d1:e4:45:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:24:3E:A8:A3:1F:F4:B5:12:AF:3A:F8:1E:6D:E1:0A:6D:92:47
X509v3 Authority Key Identifier:
keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/0_4kPqijH_S1Eq86-B5t4Qptkkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:c7:27:8f:07:5b:82:b8:69:c7:58:db:de:2c:23:eb:fb:75:
d3:a9:55:76:27:b2:6d:67:0f:58:37:fc:aa:ee:8b:ba:8b:5e:
46:e0:34:91:85:7b:56:75:8f:29:96:26:d7:49:01:0b:d6:09:
05:42:6d:59:d5:7e:bb:b5:05:05:62:0d:df:3e:43:b8:db:13:
9e:8f:4a:a7:b3:07:48:84:e4:dd:90:33:f3:3e:8f:61:28:33:
69:02:fe:83:a0:12:10:8c:e3:08:13:05:93:d8:73:8d:85:b5:
5e:68:9e:61:67:ee:20:56:86:49:9e:6c:8b:a3:23:c5:84:e9:
3f:bf:b7:7c:b3:03:7b:68:a4:6b:4b:96:36:88:fd:a2:e0:f4:
5c:20:d9:f5:69:42:38:b0:9e:03:3e:6d:3a:ed:d6:1e:e3:93:
2b:5a:32:76:75:d6:96:f7:ed:39:2f:c9:14:b8:92:34:1b:90:
44:fa:03:95:f9:d9:3a:ad:b5:fd:ff:71:5d:ed:03:07:1f:1c:
a7:90:b7:24:b4:96:85:44:48:53:af:97:10:3f:cb:47:fe:13:
a4:b8:ae:60:eb:16:d5:90:d9:f5:62:50:82:c6:c7:e7:cc:d4:
6c:2e:ba:7f:78:77:48:d7:d2:c7:15:71:36:ee:00:a5:9c:84:
76:b6:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:15 2025 by rpki-client