Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/xiLGUGhf0T0iqyzSwJ-LQ5BF6Eo.roa
File: xiLGUGhf0T0iqyzSwJ-LQ5BF6Eo.roa (raw, json)
Hash identifier: YJzbP/5C/6ILVfg0WwaPWZ9SyS6RHby3juochsRhU0U=
Subject key identifier: C6:22:C6:50:68:5F:D1:3D:22:AB:2C:D2:C0:9F:8B:43:90:45:E8:4A
Certificate issuer: /CN=0046801e45ca1eed3f78d99277d0193f576665c7
Certificate serial: 0194221FB196AD4E629F1DDB480FD43DB2F1
Authority key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/xiLGUGhf0T0iqyzSwJ-LQ5BF6Eo.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42189
IP address blocks: 45.82.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b1:96:ad:4e:62:9f:1d:db:48:0f:d4:3d:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0046801e45ca1eed3f78d99277d0193f576665c7
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c622c650685fd13d22ab2cd2c09f8b439045e84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:c2:26:58:85:39:4b:f8:a6:87:55:70:e2:
3a:ff:d8:0b:7d:16:50:44:37:be:c4:71:3a:6a:07:
54:61:1d:dc:cb:20:c1:82:da:bf:ef:08:9d:34:09:
0a:ab:10:75:fc:d2:05:d6:06:9e:7c:f6:f4:a9:a2:
ef:de:48:6d:02:86:68:04:57:85:ea:86:2a:fa:50:
e5:f5:ea:83:f3:ce:b6:e7:78:c4:9b:e2:fb:a3:9f:
42:78:a1:c4:24:a8:ff:8b:c4:44:d4:86:72:ec:65:
3d:6e:7a:5d:80:3e:b6:92:42:01:c7:b2:86:b8:a3:
57:e5:c4:57:7a:60:bb:c4:cf:ae:7f:0e:24:49:4a:
b3:1f:0b:c3:81:af:dd:5b:ec:7d:e5:17:46:bd:25:
ae:db:87:3b:ca:02:e2:df:19:ca:1d:5b:c6:70:2f:
d0:3d:a1:82:7c:60:2d:8f:64:b7:80:e3:89:fd:a1:
3f:1d:44:2c:bf:8e:77:eb:55:30:fb:5c:c2:78:83:
1a:c0:bc:8d:fa:93:69:c9:a2:7e:df:77:9f:a9:a3:
ec:df:be:22:ae:da:17:e1:88:bb:f2:ee:6d:6d:51:
a2:d4:50:89:58:44:5a:59:a7:30:49:dc:e1:68:47:
52:e9:eb:6e:a5:f4:19:c4:27:7a:be:58:1b:57:83:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:22:C6:50:68:5F:D1:3D:22:AB:2C:D2:C0:9F:8B:43:90:45:E8:4A
X509v3 Authority Key Identifier:
keyid:00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/xiLGUGhf0T0iqyzSwJ-LQ5BF6Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:4d:28:ec:df:e3:8e:8c:15:bd:a5:b2:c5:e5:78:c4:3c:87:
7b:93:ed:81:e2:f0:94:21:4d:3f:1e:b3:fe:13:a9:04:22:74:
d2:30:08:cc:d9:75:85:b4:7a:82:6f:b9:c0:e2:2a:b0:1d:f6:
ce:b8:cb:7b:a9:c6:43:35:5a:a4:f3:68:88:64:e9:87:95:d7:
b1:17:52:89:65:92:fb:b1:44:3c:f0:48:3c:aa:c0:64:bf:f3:
19:0d:f7:e1:cf:7d:f5:01:8d:2c:c0:7c:73:ef:8f:b2:f2:78:
db:55:f3:7b:5d:1b:fc:7d:0e:0a:e2:fa:2d:b3:9b:b3:ff:ef:
22:7c:26:a5:91:a7:13:7e:57:1d:44:7e:83:a8:d1:7b:3d:4e:
37:6b:e6:cb:1c:d0:fc:94:39:21:b8:14:42:da:40:a8:c0:27:
5c:b9:30:b6:a3:6e:93:6b:86:9b:75:46:4e:7c:d6:49:ff:f5:
55:ad:4b:f7:a5:40:b9:7a:b7:6c:d5:a4:c0:77:31:ec:8e:3a:
d2:09:5c:a8:2d:7b:99:7f:ff:d0:a6:6f:13:3e:82:8c:65:b6:
5c:d9:8d:b4:53:b2:da:c2:cb:54:d2:38:0a:91:30:92:09:65:
d5:67:51:59:d3:c6:05:d7:1f:77:cd:94:41:f9:0a:75:77:ce:
41:55:0d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:11 2025 by rpki-client