Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/0cSnkMJkJHeFaYdY1KT0ScO6smc.roa
File: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (raw, json)
Hash identifier: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=
Subject key identifier: D1:C4:A7:90:C2:64:24:77:85:69:87:58:D4:A4:F4:49:C3:BA:B2:67
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0194221FA58A9195AFFF569A0CDCF1FF00F2
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/0cSnkMJkJHeFaYdY1KT0ScO6smc.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 45.149.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:8a:91:95:af:ff:56:9a:0c:dc:f1:ff:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1c4a790c264247785698758d4a4f449c3bab267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:bb:c1:ea:fa:30:e0:ac:57:12:b4:d9:10:
4b:28:cd:c5:ae:ed:42:b9:86:a4:47:67:f9:0d:c7:
90:9b:db:36:98:51:93:aa:5b:ec:77:66:b4:4e:e8:
f5:11:23:c0:39:c7:2b:9c:e6:99:a2:1c:26:79:e4:
a4:29:c5:3c:0a:40:cc:43:97:a9:30:c5:8a:2c:df:
8b:ce:08:42:0e:a9:64:f7:c0:b9:ca:38:1b:3e:ad:
ad:95:18:4e:5f:bc:cf:c3:ce:cd:57:e2:12:a0:40:
80:e9:c0:21:f7:e5:af:14:7b:ae:ce:73:15:df:3c:
d5:58:4d:d2:bb:fd:51:67:c6:09:fd:0d:94:36:f1:
8d:45:be:c6:be:19:3e:7c:4b:ad:29:b9:6d:33:a4:
4f:c8:66:b8:d6:64:29:0c:64:03:e8:23:88:51:89:
e1:af:af:74:56:78:66:df:1d:4e:bf:39:ff:be:b5:
84:27:aa:c5:73:2d:dc:91:0b:b9:95:a6:2a:b7:50:
9d:f1:ae:c0:f5:f7:00:aa:23:8f:98:20:f9:f9:38:
4e:25:f8:4e:d8:2e:81:aa:b0:74:6f:1c:c4:37:61:
73:35:a4:42:c0:8f:8d:2d:a6:4b:7c:53:69:50:f9:
12:26:85:54:f6:47:af:e7:ae:c2:1a:1e:fe:7e:e1:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C4:A7:90:C2:64:24:77:85:69:87:58:D4:A4:F4:49:C3:BA:B2:67
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/0cSnkMJkJHeFaYdY1KT0ScO6smc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:cf:9c:a7:57:2f:44:44:26:96:91:e7:3c:65:0d:da:5a:75:
37:e3:cc:53:1f:9f:6e:10:97:1f:2a:34:bf:b1:53:46:5d:d4:
0b:aa:56:cc:13:c0:c9:80:32:6d:fa:f7:da:f8:10:d4:62:7d:
a2:68:02:32:c9:97:ae:4b:50:61:3e:c4:61:9c:a4:d1:a7:7f:
7b:d9:87:66:88:dc:da:9b:e4:17:af:ab:dc:d5:d0:24:a9:c0:
21:ff:a4:96:f2:ce:d6:e7:dd:07:bc:61:f0:0b:16:54:37:b2:
d1:1d:53:41:97:a1:0e:05:61:46:00:a2:7a:3e:93:26:06:0f:
ca:aa:ad:d0:36:6f:b4:6a:f0:5e:0b:23:50:ce:39:75:cd:71:
fe:82:07:0b:27:50:57:97:77:c3:51:85:3c:b3:55:aa:5a:35:
29:36:e4:02:0c:43:ff:0f:55:1e:c1:d5:3c:46:51:41:a3:79:
6f:94:57:b0:79:2d:96:b5:f9:34:15:3a:98:f6:a6:94:03:62:
66:fb:73:2a:cb:8a:67:01:d0:60:5c:da:5d:51:33:b9:e4:a0:
c6:85:fe:ee:9a:dc:98:ef:51:f0:6b:23:85:4d:e1:ce:cc:ad:
41:3d:16:59:a8:30:46:ce:04:6f:f8:c2:fa:c8:60:8b:3f:b5:
5e:da:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:59 2025 by rpki-client