Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa
File: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (raw, json)
Hash identifier: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=
Subject key identifier: 8D:05:5C:B7:F2:3E:43:DB:BC:48:9B:1B:86:9F:DA:04:92:A6:00:EE
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0195621814F5EC1BD96F6C16083AF993A4FB
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa
Signing time: Tue 04 Mar 2025 16:58:19 +0000
ROA not before: Tue 04 Mar 2025 16:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215929
IP address blocks: 45.142.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:62:18:14:f5:ec:1b:d9:6f:6c:16:08:3a:f9:93:a4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Mar 4 16:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d055cb7f23e43dbbc489b1b869fda0492a600ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:6e:46:7e:2a:11:ce:63:05:33:86:46:63:
8d:43:b8:cd:65:55:e4:02:fd:9c:a5:6d:16:4b:ff:
11:1d:3e:24:cf:b4:62:54:68:af:3c:db:d7:2c:85:
25:45:70:73:c0:8b:da:ab:23:2a:90:f8:02:25:80:
b8:64:93:85:a2:8e:64:8b:32:9a:df:17:d1:f6:ed:
b4:55:1a:c8:52:05:99:14:64:73:70:ec:7a:03:34:
85:27:72:b1:cc:e3:d1:8d:41:1c:17:18:2d:4e:61:
8e:e4:86:30:c7:d4:7e:5b:9f:6f:c4:b4:77:b2:a4:
d2:06:42:55:bd:a3:cb:0b:9e:a7:ae:e3:83:89:17:
9e:42:83:4c:fd:77:69:76:a3:11:4a:99:69:55:ce:
10:f2:64:52:99:c9:e4:c9:97:32:4c:2c:34:de:6a:
f8:7b:a9:07:d9:9e:70:08:4c:35:e1:d0:c1:6a:7b:
2b:b3:8e:5a:56:5f:b1:0c:f7:bc:31:b3:52:fb:54:
c5:79:d6:b6:fb:ba:ee:91:03:56:2f:93:0b:09:16:
83:b4:e6:1d:4b:92:7d:07:64:37:51:20:ee:70:8c:
29:04:9a:50:40:41:8f:42:b0:fd:fa:1f:32:f0:4f:
d6:75:68:ab:dc:0d:9d:41:00:82:08:79:91:92:88:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:5C:B7:F2:3E:43:DB:BC:48:9B:1B:86:9F:DA:04:92:A6:00:EE
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.195.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7d:1b:a3:6c:e7:19:b7:f9:a2:68:2e:10:bb:a1:21:93:84:
50:a1:7d:4b:39:e7:da:bb:0f:b6:d4:3a:e0:a3:60:28:d7:c3:
58:29:7c:c5:7e:d3:3d:03:c5:b8:81:ca:63:54:68:37:56:99:
d4:c6:53:7f:fb:7d:a7:d1:5c:a7:07:16:fa:02:16:7a:1e:1c:
de:f3:bb:3a:4c:54:3e:cc:76:58:37:4d:9d:2c:07:09:10:e1:
8a:73:e4:3e:5a:be:ed:03:9e:fc:f6:bf:14:11:31:35:70:f2:
5e:9d:28:69:ce:d3:7b:a4:14:26:75:23:f3:75:9c:ad:8f:9a:
70:a8:ce:c6:af:f4:6b:df:bf:cb:64:ec:c3:3f:09:ff:b4:05:
25:30:d2:24:28:2e:cd:8a:d1:71:c2:90:91:39:b3:3e:9c:db:
63:fb:3b:97:64:10:4a:6c:a7:43:52:cb:77:66:d6:5c:cc:a1:
c7:8c:f7:22:51:5d:fc:f5:b1:aa:3e:84:05:52:b4:9a:2b:1b:
e1:cf:03:35:9b:80:b3:b7:2d:d2:24:01:26:6c:50:e6:59:8c:
62:87:64:62:d7:78:9a:5a:f7:1d:23:fe:24:cb:e7:f1:3f:27:
c1:a3:65:29:36:d5:80:3e:c6:3d:56:23:83:6b:62:31:39:66:
a4:f9:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:53:49 2025 by rpki-client