Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/rELj50bmqX-dlIZz4LmRngTG7Ls.roa
File: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (raw, json)
Hash identifier: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=
Subject key identifier: AC:42:E3:E7:46:E6:A9:7F:9D:94:86:73:E0:B9:91:9E:04:C6:EC:BB
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019425FDCA93B33A5D6A8A33224D03902917
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/rELj50bmqX-dlIZz4LmRngTG7Ls.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62211
IP address blocks: 46.106.204.0/22 maxlen: 22
149.140.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ca:93:b3:3a:5d:6a:8a:33:22:4d:03:90:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac42e3e746e6a97f9d948673e0b9919e04c6ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:fb:66:69:d9:72:c8:4a:61:18:65:c6:78:
c1:2e:07:1a:d6:ef:ad:57:eb:fc:2d:2b:35:96:d9:
2b:58:29:66:07:b8:bb:14:40:b4:d8:41:f7:76:b7:
94:95:83:98:b9:10:2e:2e:c5:86:99:99:6a:05:91:
91:40:67:50:6d:67:6b:dc:65:9e:86:a1:f2:48:97:
24:14:ab:6c:20:14:97:08:ce:24:ac:50:10:4e:f2:
ec:a9:14:bd:4a:ec:8a:36:23:36:58:07:6d:53:90:
ac:6e:49:10:8b:83:b1:27:21:7f:ff:2d:62:f7:f6:
b6:ab:d9:dd:a2:68:b9:14:f2:01:74:04:ee:d9:3e:
d7:b2:6c:9f:87:b2:1f:57:fc:ba:d9:f7:a5:24:6c:
eb:45:b9:88:17:79:b1:93:4d:99:6a:f7:a4:a3:c4:
d9:b8:ac:1e:e1:06:50:4e:06:86:5a:a1:ea:80:2f:
fd:3d:d9:bd:6e:93:6e:37:89:29:06:d2:34:9f:6e:
cb:2e:13:01:dc:00:9f:24:7a:55:9f:a9:3a:52:60:
e9:f9:53:16:18:4c:7b:37:5b:df:81:7d:1f:82:5c:
08:14:63:49:61:98:2b:ff:be:38:07:97:e2:34:37:
30:51:49:f3:9e:66:2b:4f:7b:5b:d8:67:32:44:13:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:42:E3:E7:46:E6:A9:7F:9D:94:86:73:E0:B9:91:9E:04:C6:EC:BB
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/rELj50bmqX-dlIZz4LmRngTG7Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.106.204.0/22
149.140.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:68:86:fb:c3:82:10:bb:2b:e9:14:36:65:3a:43:7b:50:c2:
c8:e0:3b:da:9d:3f:02:b7:26:99:f1:1d:30:00:ea:cc:30:c0:
c6:83:83:b6:f0:b2:18:8e:1b:6d:2d:84:b9:e2:93:97:04:90:
6e:5b:9c:61:0f:d0:5b:14:a7:95:2c:8d:f4:c7:ff:7f:c3:e3:
57:cc:96:cd:8b:1f:55:5a:a7:42:23:3d:1c:a6:f8:3f:16:bd:
ee:68:51:a1:6c:7f:e4:d9:43:33:87:b9:c7:97:d5:5a:e4:a4:
71:a2:80:d9:c5:fa:b5:cb:44:8a:39:ca:6d:01:1f:9f:51:dc:
19:7c:72:1a:a8:67:b8:8e:00:92:ea:78:63:59:52:73:0f:f4:
c3:98:92:87:33:5e:9f:f6:86:01:27:d3:73:67:08:f1:bc:86:
f9:ae:c1:d9:39:9c:1c:6d:86:fa:2a:96:8b:94:2d:6c:ee:b5:
a3:f8:dd:9f:2d:8c:1e:e0:73:db:0c:91:3d:ba:6e:88:a2:8c:
eb:14:ff:c0:72:2c:35:40:52:82:6d:a1:bb:9d:67:d0:4c:f7:
62:21:be:2b:ba:99:aa:6b:31:65:34:bb:aa:c0:16:49:bf:05:
23:df:3b:8e:7f:8d:bd:f9:22:f1:98:d1:ba:bc:4c:42:c9:aa:
a6:fc:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:53 2025 by rpki-client