Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/PT8j9eHtg5ttD87ZTwg2GzdumEg.roa
File: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (raw, json)
Hash identifier: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=
Subject key identifier: 3D:3F:23:F5:E1:ED:83:9B:6D:0F:CE:D9:4F:08:36:1B:37:6E:98:48
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019428258AAFD2B092E15ABD4AB62651CDBD
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/PT8j9eHtg5ttD87ZTwg2GzdumEg.roa
Signing time: Thu 02 Jan 2025 17:52:16 +0000
ROA not before: Thu 02 Jan 2025 17:52:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47377
IP address blocks: 45.150.116.0/22 maxlen: 24
185.51.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8a:af:d2:b0:92:e1:5a:bd:4a:b6:26:51:cd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3f23f5e1ed839b6d0fced94f08361b376e9848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:72:a9:f1:55:5a:8f:82:ac:99:61:01:17:
70:a0:1e:a3:cf:a9:56:c7:73:00:2f:39:b0:04:df:
07:44:ca:63:bd:14:fa:25:b1:94:ca:b0:99:00:13:
d8:89:49:5a:3e:cd:6b:48:6a:7c:77:b2:1e:92:9c:
01:1d:37:92:02:88:00:0f:a1:7b:75:8c:e1:51:2c:
4f:23:93:f0:8f:88:90:37:55:bf:0f:83:de:35:36:
2a:d9:59:c9:76:99:33:9c:62:3c:f8:78:ca:2c:c7:
6f:85:da:2c:c7:1a:52:22:57:c8:8b:28:9b:8c:40:
26:0a:69:bb:8c:bf:2c:89:57:56:86:d7:67:c6:d0:
d2:59:de:af:a0:fb:57:4f:43:78:7d:ed:41:86:a1:
43:f7:24:22:53:73:5b:48:44:07:a4:22:e6:5f:de:
32:18:7b:6e:42:e5:fa:33:99:2b:62:cc:bf:67:f7:
d3:8a:09:27:57:d7:64:5b:3d:20:d2:d3:fc:0e:0d:
1d:c7:56:13:1e:5e:30:83:f4:1b:e1:5d:c5:2b:15:
6a:16:50:1a:16:b9:c1:a7:70:3f:2e:d2:b5:fd:86:
fa:f5:07:8a:45:2d:85:ae:81:03:43:35:ba:e9:fd:
47:e0:63:9b:1e:3c:50:4f:84:b3:73:7a:2c:23:76:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:23:F5:E1:ED:83:9B:6D:0F:CE:D9:4F:08:36:1B:37:6E:98:48
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/PT8j9eHtg5ttD87ZTwg2GzdumEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.116.0/22
185.51.54.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:87:dd:a8:c5:e9:c9:1e:51:f7:8e:70:76:32:0f:c6:8b:fc:
b7:cc:89:aa:1f:69:4b:fe:e6:15:00:60:f9:41:3e:14:a7:41:
e3:e7:89:2e:eb:29:86:a5:0f:da:da:47:28:c1:47:44:f1:af:
91:89:34:31:d4:d2:73:df:76:65:b7:34:ae:89:50:6a:fc:17:
15:a3:c2:43:95:41:07:a7:7f:94:d0:5d:84:39:98:15:d9:08:
da:73:9b:26:f9:95:ea:49:15:c0:7b:7d:c4:48:7e:3a:57:6c:
5f:25:93:01:ef:79:9d:9d:39:c3:4a:67:1f:72:a8:1a:8d:c8:
1d:4c:3d:74:0a:4d:d2:69:bf:65:f4:84:aa:2c:90:7b:e5:c4:
a9:02:68:8b:5a:f9:21:43:2e:b8:47:76:8d:bc:cd:de:ca:f9:
34:36:87:22:f8:71:18:0b:ec:d2:bc:80:d4:b0:ba:13:15:9a:
43:c8:7c:07:3c:a5:f6:40:02:96:8c:f8:42:e9:5f:6c:46:9b:
ff:99:9c:08:f0:38:64:1b:7f:a2:87:3d:7b:43:4c:a7:9b:bc:
35:a9:be:4e:76:37:55:36:4d:2a:4e:21:4e:2e:44:6c:bc:52:
aa:29:60:d6:4f:34:27:ce:c0:44:50:60:21:31:ed:f1:08:bb:
a7:d9:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:41 2025 by rpki-client