Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Xq12P6tXeEeUMBB6kcjmgXhEej0.roa
File: Xq12P6tXeEeUMBB6kcjmgXhEej0.roa (raw, json)
Hash identifier: jxewTMw/oZOuWYDAJOe88VwsOlwuyR4p20QDx4vY/Ek=
Subject key identifier: 5E:AD:76:3F:AB:57:78:47:94:30:10:7A:91:C8:E6:81:78:44:7A:3D
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019489009F14F61E9BB6C1BD71B63F133C08
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Xq12P6tXeEeUMBB6kcjmgXhEej0.roa
Signing time: Tue 21 Jan 2025 13:15:06 +0000
ROA not before: Tue 21 Jan 2025 13:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.142.24.0/24 maxlen: 24
185.233.124.0/22 maxlen: 32
194.113.94.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:00:9f:14:f6:1e:9b:b6:c1:bd:71:b6:3f:13:3c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 21 13:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ead763fab5778479430107a91c8e68178447a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:aa:a8:8f:b6:e0:e4:3c:d3:62:43:18:f7:
cf:8f:b8:32:ea:86:84:c1:bc:51:a6:16:4d:99:73:
10:e4:5d:0b:45:16:f3:08:61:8f:f0:c2:dd:9f:88:
7b:14:e2:72:6f:36:66:d7:7a:78:7e:fa:70:8d:0a:
1c:f8:1d:db:ae:2d:79:82:fb:92:0e:58:a4:66:7b:
8e:04:c9:af:74:9c:65:48:eb:00:67:bd:a9:19:2f:
62:64:80:39:02:35:ef:a4:ee:e1:76:39:cc:7a:78:
e3:5a:79:64:c7:18:7c:ff:a2:6e:e9:ec:69:37:2c:
31:e8:39:31:a4:8c:12:d7:9c:9c:4f:30:3f:b6:38:
19:0c:47:8c:a5:96:dc:bb:75:0d:45:52:ac:4b:c6:
a5:36:de:3a:87:29:14:98:6d:9b:2b:4a:9e:17:34:
c0:c7:ae:d9:b3:cd:83:12:af:e3:3e:45:19:b4:c5:
64:96:25:c1:ba:0e:a1:ff:55:20:62:f5:65:ad:3b:
f1:9f:b2:1e:cc:81:f3:27:4e:04:b3:33:f6:99:69:
69:b4:d1:bb:ec:ea:66:86:d9:89:88:8f:6a:8a:65:
17:ed:0b:c5:5c:e7:4d:ad:e8:92:5f:4e:9f:5d:2c:
fc:d7:66:3c:d8:ab:af:a0:38:f6:3c:dd:56:2b:4a:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:76:3F:AB:57:78:47:94:30:10:7A:91:C8:E6:81:78:44:7A:3D
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Xq12P6tXeEeUMBB6kcjmgXhEej0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.24.0/24
185.233.124.0/22
194.113.94.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:46:43:36:cb:b5:d5:03:2f:7d:f2:82:85:c6:dd:d5:c9:44:
40:13:a2:d9:61:0c:c6:ae:42:72:3b:24:3a:b9:60:15:a3:34:
15:e3:b3:4f:95:0d:a3:64:80:23:f9:eb:95:76:52:db:7a:26:
fa:61:da:b2:99:29:59:24:28:70:7c:1a:59:3f:85:e1:02:a6:
46:86:c4:d5:46:05:8a:7a:9a:30:4b:73:94:6e:3b:93:d8:a1:
e3:5e:9b:21:72:60:b5:b6:98:a1:e9:38:74:a7:61:a6:3b:fd:
f4:f4:25:bb:74:f9:5c:a9:fb:76:02:5d:f7:c0:3d:e8:13:23:
d6:ca:ad:de:41:be:b7:bb:19:71:9c:14:10:c6:d7:3b:8a:94:
b0:30:ec:da:13:23:5c:1d:a3:24:a5:f9:b8:40:85:d6:5e:ed:
ac:6a:ff:70:4e:39:61:18:ee:39:cc:81:68:93:0b:5d:d8:11:
5e:35:87:f0:77:be:9e:d3:b6:35:49:ff:93:95:9f:eb:ca:1e:
03:45:2e:87:78:d6:cf:38:20:79:7e:bd:05:f4:c7:b8:d7:d1:
e2:98:31:fd:31:5d:54:1c:d5:75:45:29:b1:a3:c7:78:af:21:
3f:6b:2d:3f:a4:15:d1:7b:19:7d:b1:79:a1:7e:0f:d6:ba:6d:
85:99:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:29 2025 by rpki-client