Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EqsgARk6AP3U4984d7IvaImCQZo.roa
File: EqsgARk6AP3U4984d7IvaImCQZo.roa (raw, json)
Hash identifier: DK8aChe2hOHrNDEbXgdFqjmcoqmce+I4444uFmSu1ME=
Subject key identifier: 12:AB:20:01:19:3A:00:FD:D4:E3:DF:38:77:B2:2F:68:89:82:41:9A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB2A0D206BB79ECD348FAAD24823F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EqsgARk6AP3U4984d7IvaImCQZo.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 45.13.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:a0:d2:06:bb:79:ec:d3:48:fa:ad:24:82:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12ab2001193a00fdd4e3df3877b22f688982419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:f3:c3:ef:74:52:2d:88:7f:f0:20:fa:6f:
57:de:66:08:93:31:72:7e:2a:db:08:f3:5e:52:4b:
21:73:60:0e:5d:b3:e8:0f:20:e9:a3:40:1c:03:1e:
48:9c:b8:5a:49:7f:0b:e0:17:77:98:40:cb:ea:5d:
3f:3d:17:17:fc:fb:0e:27:40:0b:06:d8:9e:8e:1e:
f5:62:2d:e6:99:58:13:96:b7:36:12:db:72:68:f3:
63:07:2c:21:65:a0:f4:bb:5b:92:8f:68:2c:50:8d:
62:42:db:e6:df:51:55:0c:b8:ed:f2:70:90:e6:23:
0c:bc:b8:dd:39:4e:4a:32:2b:38:8d:1b:01:01:62:
58:fd:a7:5f:ac:e9:95:7d:29:81:d8:cc:3c:96:6d:
a2:4a:72:fd:de:ad:0b:48:92:bc:2c:55:65:0f:4a:
9f:9b:2e:0c:8e:94:08:cf:ca:d9:a6:77:12:b8:a3:
84:f5:de:f6:fb:74:9c:de:49:88:4f:56:96:6b:93:
73:1d:86:09:38:1a:f4:23:80:95:06:92:34:45:ad:
5f:19:d2:64:83:57:de:23:86:b7:ff:7c:a8:aa:a9:
2d:a5:4a:6b:47:5e:61:d2:74:c2:ac:63:9a:36:2c:
58:49:d9:d3:74:5e:f6:a3:b4:e7:1a:ab:fd:44:6d:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:20:01:19:3A:00:FD:D4:E3:DF:38:77:B2:2F:68:89:82:41:9A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EqsgARk6AP3U4984d7IvaImCQZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.191.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:4c:09:b8:fd:38:a8:63:77:0b:bb:a9:e4:cb:ca:27:8d:e2:
6b:d0:8b:e4:7a:8c:40:be:0f:2d:a9:01:90:13:65:6d:b9:2d:
97:74:44:16:76:8e:ed:b3:84:28:d6:78:99:18:e7:e3:f0:f8:
cc:b7:2d:68:d5:0f:e9:4c:25:b4:b5:df:5d:20:a3:ae:bc:49:
52:99:49:c3:2b:9f:be:9a:9e:13:02:49:91:b1:cd:a0:1e:c8:
69:7f:f0:3c:74:b2:03:70:4e:ac:13:56:be:78:cf:4d:f5:df:
30:18:08:86:8f:cf:e0:a8:e4:66:b0:ed:73:ff:f0:c2:5c:a1:
d9:91:bf:c3:21:f8:40:3e:40:3f:ed:a0:c0:72:21:28:2e:98:
3e:9d:e4:2b:dd:d0:48:49:27:ae:c0:fc:ff:e6:f5:90:2a:0d:
e9:29:a3:d8:9c:68:1a:88:31:88:5e:b9:3b:22:88:eb:bb:ef:
d0:4e:55:81:39:08:f3:05:d2:30:95:91:d5:bc:4e:11:71:61:
31:68:00:11:12:f9:57:a6:76:29:e1:fe:83:b3:11:00:f1:cc:
be:0d:cf:62:61:d3:96:ef:f1:d5:60:c0:95:fd:ab:8e:ba:91:
66:81:78:23:0a:78:0a:71:c9:ea:78:2d:80:95:16:18:74:f5:
c3:87:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:57:55 2025 by rpki-client