Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/PmQwjeWPX1uc6kgeCDNacsuKkvM.roa
File: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (raw, json)
Hash identifier: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=
Subject key identifier: 3E:64:30:8D:E5:8F:5F:5B:9C:EA:48:1E:08:33:5A:72:CB:8A:92:F3
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019426D9DD6E104116136585DD38017EBF0C
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/PmQwjeWPX1uc6kgeCDNacsuKkvM.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202651
IP address blocks: 45.143.29.0/24 maxlen: 24
45.143.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dd:6e:10:41:16:13:65:85:dd:38:01:7e:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e64308de58f5f5b9cea481e08335a72cb8a92f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:c9:85:78:94:8d:d7:aa:d1:b7:b2:c7:26:
34:84:be:55:3c:be:55:3b:07:f7:10:ce:02:bd:56:
2b:ac:67:89:a8:39:b8:cb:fb:70:d8:37:85:26:a7:
fc:ca:8c:99:3b:a7:0b:6b:2c:98:b9:1c:0b:70:a7:
fa:df:b5:fd:0f:33:c7:a5:ef:ef:4d:cc:ed:88:87:
4d:fb:74:08:0d:0e:46:4a:41:8a:e3:85:2a:d4:66:
f6:e0:23:ef:bb:e1:61:c8:4a:2f:11:b4:bd:43:ac:
26:a4:af:d9:1b:b9:5b:44:2b:40:b1:66:15:90:f4:
bb:ea:6c:2f:d4:13:99:ed:28:9a:9c:79:c4:3b:57:
e7:6e:2f:10:3a:76:c4:75:31:47:a0:b2:05:d5:12:
09:40:17:fa:e8:7c:99:ab:21:6b:b5:d1:e1:03:f5:
05:f7:9d:2f:68:9d:28:1f:81:8f:48:7e:dd:da:d3:
66:7d:79:54:de:aa:8b:a5:00:42:68:a3:94:60:0e:
b9:05:cf:0d:9c:9a:4b:8e:35:ab:97:f8:e3:da:b4:
df:5f:f1:e2:cb:b5:39:89:86:2d:7b:4c:ee:b1:ac:
53:57:23:85:46:9b:3a:c9:20:fe:45:c1:cd:22:64:
24:48:b1:e3:a8:bc:a1:14:97:72:f9:cb:dc:df:c8:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:30:8D:E5:8F:5F:5B:9C:EA:48:1E:08:33:5A:72:CB:8A:92:F3
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/PmQwjeWPX1uc6kgeCDNacsuKkvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.29.0-45.143.30.255
Signature Algorithm: sha256WithRSAEncryption
4d:65:41:7d:9a:a3:8c:d2:49:41:94:25:1c:c1:3e:ff:6d:fb:
68:c8:6e:c8:a3:15:a1:54:a5:35:e0:15:42:ca:b2:ed:95:c1:
99:a9:c5:f7:0c:80:56:b5:46:5e:d1:e4:63:28:6d:ee:06:86:
e1:ad:83:6a:27:5a:9f:95:4e:75:b9:73:0c:72:84:d9:17:b4:
f2:86:ec:34:e1:6e:76:20:a2:ef:a5:1d:99:f5:7a:a3:33:cd:
75:c8:df:fd:b5:14:81:27:03:67:c4:a7:48:97:26:7a:55:73:
cd:8a:81:81:3c:ce:57:ce:4c:de:19:a0:da:9c:92:3e:0b:bb:
5c:a1:1a:c8:03:ff:0f:56:9f:86:6e:5b:6a:ec:e5:90:bd:ea:
b8:ee:a1:ed:93:b9:5f:ce:66:8d:6a:0e:ab:61:b8:86:50:dd:
c3:70:23:e9:ef:4a:6c:fe:05:a5:4f:a2:50:a0:6f:f7:06:67:
db:0c:ca:45:36:e9:cc:ad:28:bd:7c:2b:85:98:e8:af:85:3a:
0d:13:c5:1d:a9:ea:e1:e1:46:5a:79:3d:f8:8d:bc:ff:41:31:
d3:98:70:0f:23:1a:ef:57:7b:5c:7a:f2:f8:0d:9e:bc:be:41:
50:db:29:ee:3f:6c:59:f6:c9:89:47:a5:a9:10:07:62:c4:a8:
00:62:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:50:59 2025 by rpki-client