Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/7gLBp0seupB3smWAi_oF18iZRGE.roa
File: 7gLBp0seupB3smWAi_oF18iZRGE.roa (raw, json)
Hash identifier: uNlzGqHQooJbP3MKzJQmy02N65RCgyqmWWJhnnmBz3k=
Subject key identifier: EE:02:C1:A7:4B:1E:BA:90:77:B2:65:80:8B:FA:05:D7:C8:99:44:61
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019426D9DCA6772344D2D3D962216F13CF03
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/7gLBp0seupB3smWAi_oF18iZRGE.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 45.143.28.0/24 maxlen: 24
45.143.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dc:a6:77:23:44:d2:d3:d9:62:21:6f:13:cf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee02c1a74b1eba9077b265808bfa05d7c8994461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:17:4a:14:1a:26:5f:8c:0d:6c:0d:97:f2:
db:24:7f:55:bd:33:98:4d:4a:d6:e6:8f:1a:b7:d6:
4b:26:3c:7f:42:fd:30:ba:b8:fd:e4:be:cc:5c:49:
0f:53:94:28:eb:90:70:f6:52:4e:5d:67:bf:2f:1c:
ef:bc:93:d1:2c:9a:b0:09:ef:e7:c5:fb:5d:cd:e1:
bd:05:5d:1f:c6:b0:dc:30:62:77:1d:d9:f1:e0:4b:
49:e6:65:30:de:27:89:bc:7c:5a:fb:ec:46:c6:b0:
3d:57:9a:2f:7a:38:2a:6d:3d:e8:88:99:66:45:b0:
63:b0:11:20:1c:0a:ff:73:76:2d:1a:4b:74:b8:69:
df:62:ce:17:b7:37:42:79:dc:98:d1:37:66:a2:3b:
e7:f2:c1:a7:03:ae:fa:96:a2:6c:32:fc:bc:c3:da:
8f:16:ed:66:c7:e8:80:5c:c0:1b:f8:5f:ee:55:b6:
59:38:8b:69:86:d2:59:0c:5f:a8:96:1a:c7:05:fd:
90:b8:c3:8c:ad:23:1f:01:32:b1:78:3a:3b:ea:4e:
11:fe:3d:1d:1f:16:72:4b:67:8f:6e:c2:45:c7:11:
c8:9d:5a:b8:51:73:f0:54:a0:25:97:8e:13:26:27:
a7:78:b9:b0:dd:87:19:65:e7:a3:a7:70:40:41:b9:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:C1:A7:4B:1E:BA:90:77:B2:65:80:8B:FA:05:D7:C8:99:44:61
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/7gLBp0seupB3smWAi_oF18iZRGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/24
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
32:39:45:c3:a1:cb:b8:16:89:61:ce:d9:3b:6d:26:85:10:66:
fb:c3:63:fd:49:13:d7:35:16:26:43:c9:90:3c:46:29:16:14:
35:fe:a2:f0:3a:d7:43:06:6b:14:93:99:07:ec:10:fa:ea:23:
a2:d1:6d:d1:0b:8c:3b:c5:19:43:bc:7a:91:ee:43:06:d3:5c:
6c:20:16:95:30:27:81:2b:f5:d8:a5:b2:c4:f3:54:59:26:1a:
b3:11:c7:86:4a:46:7b:2e:98:6b:10:9a:99:83:76:8a:4e:6f:
bd:26:63:5e:59:03:cd:5f:7c:80:d1:ff:f1:00:ca:7c:57:5a:
bc:32:64:b9:bb:19:7e:6e:19:0e:8e:dc:55:c5:e9:80:01:28:
bd:78:b9:4a:38:6e:ff:13:f4:ad:f5:7d:04:51:65:25:37:d3:
be:4b:4e:9a:fa:0e:f3:58:f8:26:00:ce:09:37:56:5d:ef:3d:
7a:a5:c5:9e:57:42:53:fc:b6:93:fa:3b:4d:72:8e:ee:44:9e:
f7:48:64:bb:d7:d4:45:01:29:58:91:16:33:22:a6:3b:5b:66:
c9:09:82:07:3d:85:11:3a:ff:c5:8b:cd:f3:a4:3d:3f:e4:0d:
ac:d7:9c:06:85:cf:ba:cf:e9:1a:0b:26:1b:95:8c:7e:71:91:
97:b2:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:52:11 2025 by rpki-client