Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/CihCYCcRfHmYDycxhVRrCslM7wU.roa
File: CihCYCcRfHmYDycxhVRrCslM7wU.roa (raw, json)
Hash identifier: 8EK8gvioDzV5jlwA4y5lAA/cSLy5nx2+QcBlr4T3sHc=
Subject key identifier: 0A:28:42:60:27:11:7C:79:98:0F:27:31:85:54:6B:0A:C9:4C:EF:05
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01942068052D64EA2F9F2F139A10D28D4D95
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/CihCYCcRfHmYDycxhVRrCslM7wU.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50917
IP address blocks: 45.152.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:05:2d:64:ea:2f:9f:2f:13:9a:10:d2:8d:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a28426027117c79980f273185546b0ac94cef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:91:2e:71:c9:c8:de:0b:ef:53:44:86:ec:
b6:ae:60:fa:62:b0:b3:cd:2a:1b:00:5a:b9:13:63:
d8:70:be:78:9b:09:00:fc:43:3d:9b:be:97:7e:87:
e7:a9:65:2d:b6:2c:4a:6a:85:21:28:82:0a:f6:72:
a3:16:33:70:e1:f2:92:5a:6d:d9:9f:fb:79:77:48:
25:b1:da:e9:a2:90:89:c3:14:91:f9:3e:f6:ad:5b:
ac:12:a5:99:84:42:89:64:9d:c7:69:d2:7a:66:c3:
ac:20:1f:60:dd:aa:bb:d1:14:28:f4:cf:79:fd:f5:
f0:6a:63:0b:e8:76:d0:89:cc:52:7e:85:00:96:be:
1e:75:fe:7e:a9:92:a5:15:79:cf:41:9f:72:f0:88:
c7:a7:a5:c4:b0:1f:94:fc:2b:7d:de:4b:42:dc:3a:
d6:3d:b9:74:80:3c:82:34:52:70:5d:a7:c0:a0:f1:
ba:8e:78:3c:63:4c:df:91:f8:f8:8d:f5:a2:d0:28:
02:d9:8a:2f:17:37:21:29:fc:d8:fa:2c:fe:b9:5c:
7b:c9:6d:d8:ff:f0:83:6b:09:bb:2b:6a:ab:06:56:
a1:de:d5:f9:fd:b6:6a:58:8a:a6:c7:ea:91:5d:b7:
24:8c:ec:92:7b:a4:16:89:95:41:43:d5:5f:7a:5f:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:42:60:27:11:7C:79:98:0F:27:31:85:54:6B:0A:C9:4C:EF:05
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/CihCYCcRfHmYDycxhVRrCslM7wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:53:7a:1a:d7:30:b4:bc:13:54:38:ec:34:75:22:ad:b0:2e:
c2:24:2a:e8:cf:cf:aa:2c:a4:33:e0:f5:41:26:48:31:6c:5a:
ed:2a:2e:3b:26:6c:d8:31:a1:d8:f1:7c:de:75:03:fa:2b:7f:
0d:b9:28:e2:36:da:bd:3e:be:37:43:22:a5:23:69:7c:74:bd:
7f:6c:54:3c:6a:d4:88:b9:53:11:52:7e:fd:89:05:b8:72:cb:
21:d1:97:cd:05:6b:4a:20:e2:9d:bc:f5:31:3d:fa:2b:5a:43:
ec:07:06:6e:a4:39:5f:78:5c:d0:52:3d:ff:dc:ad:b7:30:28:
9d:e1:70:61:d0:e0:42:c9:66:13:e3:c2:d5:ce:a0:34:54:bc:
68:49:ae:48:f6:f7:84:bc:33:b2:54:1b:f9:c1:31:8e:a0:22:
82:46:20:39:21:6c:41:0b:16:20:d3:34:50:e7:40:e5:aa:2a:
80:5f:15:0e:88:d8:8f:c0:f0:89:b5:ea:6b:d5:43:28:e3:13:
e1:c2:a3:51:d9:b3:62:5b:e7:83:cf:e1:0b:42:80:60:7e:23:
c1:0e:29:40:fc:b6:3b:36:5a:4d:38:be:50:b0:de:36:f1:9f:
45:f5:ba:e1:22:13:76:17:a2:42:43:40:e9:d3:05:a2:cf:ab:
ac:93:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:07 2025 by rpki-client