Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4Vm-eMY4vhilDBy1W-0UUxVWOtI.roa
File: 4Vm-eMY4vhilDBy1W-0UUxVWOtI.roa (raw, json)
Hash identifier: 0+5tBb7F0aEh4qLGOyXO7JtG6KSDHFgMS75+Nr/PoRY=
Subject key identifier: E1:59:BE:78:C6:38:BE:18:A5:0C:1C:B5:5B:ED:14:53:15:56:3A:D2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D470D6E873DD62842EAC2D3906B3
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4Vm-eMY4vhilDBy1W-0UUxVWOtI.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203104
IP address blocks: 194.209.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:70:d6:e8:73:dd:62:84:2e:ac:2d:39:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e159be78c638be18a50c1cb55bed145315563ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:7a:45:04:8e:04:25:ce:1e:f6:8e:4b:c8:
5a:06:0e:a3:1a:8e:8b:8d:bf:fc:89:6a:6c:bf:40:
a8:4a:2e:f7:36:91:05:d2:eb:0d:04:46:15:e8:02:
8f:02:95:f4:3f:2f:60:38:11:5c:a8:63:4d:41:aa:
1b:0c:70:8c:08:fd:08:df:1f:5a:5d:ec:48:56:f8:
d3:8f:b5:ee:ce:f2:1b:07:e6:71:87:1f:5b:2e:c4:
2f:98:d9:a0:9c:c9:18:58:24:57:39:27:2a:03:8b:
1d:7c:14:57:bd:cf:24:9f:36:46:e0:6c:e6:e5:2e:
6e:e5:45:84:c3:7a:f9:64:b6:95:3a:31:8e:f7:26:
28:41:08:59:bf:51:c4:a0:37:38:bd:ef:0e:4f:0f:
f0:e2:7a:93:0f:41:a3:81:fa:6d:1c:59:96:23:bb:
1f:3c:44:d9:68:f9:e4:5c:01:e5:db:fc:c5:1c:9a:
52:d2:cc:f2:dc:01:d7:0f:06:a2:9c:e2:56:84:94:
fe:0d:1a:be:7c:e0:a3:b2:ed:56:fc:dc:f8:c7:46:
f5:86:17:8f:81:00:90:e3:81:0c:22:d5:74:c8:d9:
75:2c:d9:f2:23:47:9c:7f:d6:0b:24:82:08:d8:cd:
c7:16:ab:53:92:84:e7:b3:c7:2d:8a:85:fc:45:b3:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:BE:78:C6:38:BE:18:A5:0C:1C:B5:5B:ED:14:53:15:56:3A:D2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4Vm-eMY4vhilDBy1W-0UUxVWOtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:87:66:db:b1:ac:a0:67:42:af:0f:6f:31:c1:82:b5:3d:d0:
ad:e5:cb:5e:0d:6b:d7:7c:91:8d:71:7f:61:f2:9b:c8:74:5f:
d8:0e:13:92:1c:ca:0f:d9:f5:f6:5f:f7:37:a9:ed:1b:14:24:
2f:12:9b:9d:6c:ab:cb:65:f6:d1:c6:fd:53:b3:24:ce:0d:3d:
a8:ba:82:cc:87:35:86:54:01:01:22:12:3b:1b:61:b3:5a:c7:
a0:e2:90:ec:ff:1c:2e:a3:45:5b:49:2a:43:8a:e5:4d:26:ec:
ae:9b:02:87:d4:14:0a:a0:ad:01:6c:bc:85:ca:aa:04:14:7d:
12:9f:be:0d:5f:01:9d:32:87:f6:ff:ee:31:c4:ea:bd:e6:5a:
54:43:bd:3d:67:44:2d:73:80:08:45:16:41:b7:17:24:e9:b3:
1b:14:97:3f:15:0f:e9:66:8e:6e:ac:bd:11:9d:fc:2d:f8:83:
37:a2:95:ee:2c:ce:0a:9e:0d:b2:59:ae:d2:d0:1f:f1:9d:15:
cf:e6:15:c8:bb:4d:5d:f6:e6:62:14:28:91:39:ba:22:07:b0:
d9:f0:fa:87:90:95:f2:64:d2:6d:d4:91:39:ff:a7:fc:ca:cf:
ef:41:c2:a2:b0:cc:65:65:1b:f7:c9:5c:d1:69:e2:24:7c:41:
38:06:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:51 2025 by rpki-client