Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa
File: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (raw, json)
Hash identifier: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=
Subject key identifier: 46:EF:A3:82:D1:C7:B6:4D:B6:CD:4D:88:CF:DA:1B:6F:2C:8D:AA:D0
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019424B3B87BE7F022076AF356F5994E56DF
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198462
IP address blocks: 45.82.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b8:7b:e7:f0:22:07:6a:f3:56:f5:99:4e:56:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46efa382d1c7b64db6cd4d88cfda1b6f2c8daad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f7:4e:8e:cf:2f:43:a3:ce:53:0d:f9:25:b0:
5f:93:2c:0a:bb:15:d9:ab:5d:dc:ba:fb:ad:11:0e:
3b:97:b2:0f:d8:db:34:b3:06:75:79:8f:ee:15:64:
aa:7d:3a:61:3c:8a:12:91:1c:38:ea:0e:2e:50:16:
b0:3a:01:80:b0:bb:88:eb:e5:c1:35:e7:3b:3a:ed:
fc:36:a4:5c:59:c1:48:c5:ad:0d:06:b3:81:48:b7:
ed:50:e0:3d:d3:b9:2b:1f:6a:50:a4:e9:84:b7:ff:
c7:61:7d:c4:e0:c9:ed:7f:75:fe:44:75:e3:5a:58:
da:e6:1a:b7:15:8e:01:f0:39:fa:ec:d0:47:88:92:
28:4f:24:87:30:c3:b0:a7:04:7b:99:e9:6b:a1:1f:
a9:b7:ec:9d:50:cb:8e:c6:fb:7b:bc:10:ba:72:4b:
a4:b8:d2:a1:71:b5:8a:25:28:2a:91:7c:37:df:18:
6e:08:e1:cf:60:13:28:01:a2:39:b4:d8:e1:f0:71:
1d:75:2d:54:5b:e2:14:ad:0d:e7:42:ec:c5:62:6c:
e7:1a:c9:d9:ae:db:8f:d0:95:48:58:cf:32:dd:19:
2a:6d:69:f4:f2:bd:09:3d:2c:34:58:f8:60:b5:6c:
29:53:28:df:9f:e9:b0:7b:92:df:34:dc:9c:c9:8d:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:A3:82:D1:C7:B6:4D:B6:CD:4D:88:CF:DA:1B:6F:2C:8D:AA:D0
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.200.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c1:2b:19:3f:26:34:a5:b3:e8:0e:f7:67:2b:bb:27:19:f9:
8e:79:94:48:f1:42:58:60:5c:0f:35:36:a0:58:15:16:1a:7c:
21:38:89:39:1a:8a:e2:c7:3c:b7:4e:b3:27:79:e3:b8:a4:25:
69:e7:dd:57:1d:a4:30:7b:09:bc:3a:33:0b:6d:c7:b0:2e:4a:
30:4d:3c:16:cd:d9:5f:3d:d2:20:20:a5:83:d1:6d:f0:5e:6c:
c8:e9:e6:7b:4b:31:fb:ff:43:ef:dc:0d:08:90:a8:c9:86:23:
fa:46:2a:84:a0:f7:46:aa:12:f5:e8:51:be:51:1c:56:f9:1c:
9e:71:32:1a:b0:fd:1e:ee:ad:9d:d0:da:eb:52:7f:0e:2f:20:
11:52:ec:01:63:1f:69:f3:7c:ec:1d:7f:af:3e:3c:cf:8c:dd:
db:1e:4b:94:46:b1:6d:6c:26:b6:4e:3e:cd:46:09:f9:5b:f0:
c2:10:8f:67:16:e1:02:a3:93:01:a8:52:50:08:47:11:bd:00:
49:04:4b:e9:9e:bc:14:41:9f:16:0e:e3:b7:6b:2a:35:bc:26:
ea:e6:44:08:01:13:fd:89:a7:2b:6b:ab:d3:6a:a5:cd:75:af:
6d:04:ec:5e:e0:a5:ee:22:2a:b9:d7:90:ef:57:11:ac:00:a8:
49:43:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:08:52 2025 by rpki-client