Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/sEHEZJdyZNM4H5KyWrunH6ae2rs.roa
File: sEHEZJdyZNM4H5KyWrunH6ae2rs.roa (raw, json)
Hash identifier: 2fdDOMvINX/MZk3ZnK4mtn0JneFrVoF0x/0pmTQHlWc=
Subject key identifier: B0:41:C4:64:97:72:64:D3:38:1F:92:B2:5A:BB:A7:1F:A6:9E:DA:BB
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 0194880883A345C33780DC9D72C4C24849E8
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/sEHEZJdyZNM4H5KyWrunH6ae2rs.roa
Signing time: Tue 21 Jan 2025 08:44:06 +0000
ROA not before: Tue 21 Jan 2025 08:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212344
IP address blocks: 5.183.162.0/24 maxlen: 24
45.85.186.0/23 maxlen: 23
45.85.186.0/24 maxlen: 24
45.85.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:08:83:a3:45:c3:37:80:dc:9d:72:c4:c2:48:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Jan 21 08:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b041c464977264d3381f92b25abba71fa69edabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:bf:8a:f9:0f:33:f5:fd:67:38:15:92:c3:
f7:5d:9a:26:c9:3a:63:ed:34:4d:3d:81:ad:83:17:
03:9a:23:1a:f6:d7:68:83:15:e1:94:84:8c:b4:a9:
49:59:82:08:c1:93:61:2d:4a:a6:8b:3c:a1:53:83:
a8:ea:c7:c5:a6:af:3f:b1:ae:1f:0c:1e:d3:27:f7:
06:24:d1:ca:75:3c:06:05:55:f7:68:73:69:a8:d5:
10:47:ab:4e:2c:4f:a9:db:09:9a:dd:09:fa:f6:85:
07:55:fa:f2:24:32:62:ae:31:94:92:a9:3f:ce:7f:
5a:fa:ed:b1:6b:f4:8c:ee:0f:28:3f:e7:99:f3:e8:
28:f4:dd:f9:08:60:3a:f6:12:b2:68:46:f5:16:1c:
2f:ce:77:ca:1f:f3:7c:fd:4c:11:e8:76:6d:ae:c7:
47:40:3c:dc:ad:dd:b9:40:53:51:8c:fc:f7:7c:f7:
0b:77:97:99:17:36:4a:b8:80:65:06:06:0b:90:12:
2d:4f:7a:c7:2d:55:26:38:97:82:90:f6:e0:8e:0c:
29:93:f3:8b:74:7e:17:87:33:50:c4:5c:54:5c:70:
8e:bf:d9:55:4c:38:f9:f8:b1:81:d5:18:4c:fe:f4:
6b:08:27:24:a5:d7:88:0f:b2:5b:e4:de:71:10:25:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:41:C4:64:97:72:64:D3:38:1F:92:B2:5A:BB:A7:1F:A6:9E:DA:BB
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/sEHEZJdyZNM4H5KyWrunH6ae2rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.162.0/24
45.85.186.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:20:c7:21:1a:5e:37:f1:6c:5c:e5:0e:27:48:05:ae:ab:46:
dc:af:60:48:f7:eb:74:ae:37:a5:86:18:4c:fd:bc:5e:5a:b9:
ca:31:2c:ea:18:0e:38:d9:20:e4:ce:01:83:ce:99:33:64:bc:
d3:bf:b3:fb:e4:0b:16:78:c3:b2:a0:13:fb:26:51:db:b9:42:
f3:52:80:35:6f:2c:27:f0:0b:1d:c3:54:2d:ac:a8:1f:6a:50:
91:6b:8d:28:cf:14:2e:91:c6:b8:6c:36:f8:c4:d3:84:16:c4:
26:7b:71:b3:63:88:b4:40:6b:0a:58:f6:a1:88:fe:c7:d4:b5:
fc:4f:76:cb:14:84:85:25:44:49:44:5f:d2:6e:47:1f:58:7c:
ad:d7:65:f1:bd:d5:9c:a0:e3:f1:4f:9d:29:72:4d:7a:f8:7b:
86:7d:0b:a4:02:0c:e8:af:2f:dc:79:0a:e1:ec:30:39:37:3a:
1c:30:f1:0f:45:dd:ee:81:bf:92:aa:42:6a:e2:6f:bc:a9:e5:
36:ca:5c:2e:28:4a:d8:81:73:fb:45:f2:e6:54:65:3a:49:d5:
87:75:78:be:c7:c4:2c:7d:a5:c4:bb:e8:82:ba:4c:41:96:52:
2a:7d:c1:8c:ed:8a:82:2b:b9:76:04:e0:1f:ff:51:0d:4a:6c:
2c:e9:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:27 2025 by rpki-client