Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/9R7u9NYY_fdGGu9OLtebIHbh-p8.roa
File: 9R7u9NYY_fdGGu9OLtebIHbh-p8.roa (raw, json)
Hash identifier: EvXc+WkKL+opgKBNfenegjbhQJ0LX3U13qSmBaz/xEY=
Subject key identifier: F5:1E:EE:F4:D6:18:FD:F7:46:1A:EF:4E:2E:D7:9B:20:76:E1:FA:9F
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 019420D5CD3C3E255D4D4563BAB2A7AABFE2
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/9R7u9NYY_fdGGu9OLtebIHbh-p8.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207758
IP address blocks: 46.182.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cd:3c:3e:25:5d:4d:45:63:ba:b2:a7:aa:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f51eeef4d618fdf7461aef4e2ed79b2076e1fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:dc:4b:0a:2e:b4:48:6f:45:34:2b:a9:f3:
ad:9a:d0:3a:96:0a:71:1c:de:19:9b:f3:a6:71:45:
bd:00:db:22:71:fd:1f:f1:ff:8b:20:2b:53:50:80:
1a:19:93:02:88:cc:55:31:63:5c:2e:1a:32:11:36:
66:10:00:6e:63:24:0e:26:b0:f9:68:f3:04:8f:57:
40:a2:b4:3a:bc:2c:9c:a4:7e:0e:5d:65:83:dd:c7:
09:c6:85:d1:a6:b3:5f:f1:2b:ee:75:01:43:8d:1a:
7d:29:3a:68:94:f3:15:ea:f1:9e:14:da:df:57:9c:
54:ae:88:45:5c:1b:ba:58:bd:94:16:e2:3b:01:62:
4c:cf:6e:bc:ff:2a:a4:59:70:f5:da:30:a9:0e:6c:
0a:bc:b0:a9:ee:93:e9:47:a6:d6:04:99:f8:77:a1:
f6:04:28:b6:23:65:2f:24:79:4b:42:f9:fa:b3:d3:
e5:fc:3a:6c:30:5b:0b:37:63:e7:59:e5:be:1a:c8:
a5:00:f1:3e:0c:88:d4:3d:10:73:ca:6d:98:37:39:
af:28:25:31:e7:30:ee:03:63:50:be:28:2f:22:3a:
5c:d1:c5:4d:7f:56:d1:05:b2:d5:47:b6:45:54:77:
cc:77:3f:85:b8:21:ba:8b:2e:6e:94:9a:79:59:43:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:EE:F4:D6:18:FD:F7:46:1A:EF:4E:2E:D7:9B:20:76:E1:FA:9F
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/9R7u9NYY_fdGGu9OLtebIHbh-p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:d7:48:1a:fb:b6:59:03:16:f8:bd:da:fe:48:58:21:65:b2:
a6:4d:19:e6:a6:7a:f3:c8:bb:47:89:6e:3f:e4:89:05:c2:47:
9f:86:65:7a:dc:91:33:a7:06:ca:4e:ba:b4:06:97:9f:66:e0:
b4:23:03:cf:c3:4c:70:6b:1b:e9:a7:49:54:e4:b9:79:26:84:
71:2c:cb:84:58:d3:3e:cd:18:0a:8d:39:71:ee:1f:ac:3b:0c:
f1:3c:bc:39:90:4b:1f:c6:f7:83:fb:10:8c:e7:b1:88:68:28:
bf:18:47:26:11:fc:c5:b0:07:37:01:d4:40:00:94:b5:3e:a1:
dc:22:6f:45:bd:2b:a3:ba:f3:1b:e5:6e:11:77:94:be:93:a7:
d5:aa:94:b7:ba:08:8c:e3:2d:3b:39:43:cd:4d:d4:fe:3f:7b:
3a:ed:d0:3d:6e:17:0c:89:76:da:3d:b9:78:22:c6:5f:9b:96:
ba:04:2f:06:cf:50:71:81:ec:0d:2e:56:35:99:89:f6:4d:22:
ee:27:f9:af:40:df:9a:48:81:30:b3:89:f4:2a:fe:88:fd:38:
71:7e:2c:ab:9b:7d:d8:5d:2c:30:30:c6:13:c8:8c:cb:69:10:
99:a6:cb:e0:ee:56:2e:70:23:c8:09:fe:1b:85:4e:66:94:2b:
d1:a9:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:36:08 2025 by rpki-client