Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/CInCW1-lseNxjR1N7IQV758AByA.roa
File: CInCW1-lseNxjR1N7IQV758AByA.roa (raw, json)
Hash identifier: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=
Subject key identifier: 08:89:C2:5B:5F:A5:B1:E3:71:8D:1D:4D:EC:84:15:EF:9F:00:07:20
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 01942746698FC32D6A4C2E0290A1EA790EEE
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/CInCW1-lseNxjR1N7IQV758AByA.roa
Signing time: Thu 02 Jan 2025 13:48:33 +0000
ROA not before: Thu 02 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 82.195.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:69:8f:c3:2d:6a:4c:2e:02:90:a1:ea:79:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Jan 2 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0889c25b5fa5b1e3718d1d4dec8415ef9f000720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:7d:94:c6:18:75:75:eb:0b:b6:2a:84:1e:
ff:80:73:03:02:2b:ae:48:ae:49:20:25:1d:28:fc:
da:ec:c0:4f:c4:00:c5:57:93:5e:83:a2:3c:24:3a:
81:dd:9f:07:c5:36:4d:b6:ce:df:a7:d3:0a:cc:a6:
93:df:8c:f7:e1:94:d4:43:80:52:fd:8b:c0:cf:32:
fb:d2:e4:01:ff:26:3c:8a:e8:e8:c9:ee:3a:ec:82:
7e:11:ed:69:9a:ed:50:53:17:43:e2:88:0f:a8:30:
7e:03:40:4b:6b:5e:25:c2:4b:ec:3e:96:95:65:6e:
81:6f:48:51:c6:69:3d:d6:5f:93:33:cb:b9:cf:c4:
4f:02:65:b9:75:98:5c:02:ed:16:a2:b9:9f:6d:46:
d8:a0:47:a4:d7:79:45:03:c5:d2:36:f6:c4:a0:81:
8a:c2:b1:7e:0e:c8:f5:2f:99:23:1e:13:66:89:c0:
e6:d6:0a:9c:89:d4:81:76:55:3e:39:f2:d8:38:b5:
81:56:e6:54:fd:20:a1:8c:8c:1c:fa:d6:61:58:04:
05:2f:a0:1d:21:be:bc:04:35:05:d8:bd:8a:c3:36:
1c:bd:bb:02:ea:20:64:37:1f:c9:61:4b:f5:c9:3e:
b8:36:fc:d3:09:63:88:f5:e5:05:81:80:fa:a7:4a:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:C2:5B:5F:A5:B1:E3:71:8D:1D:4D:EC:84:15:EF:9F:00:07:20
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/CInCW1-lseNxjR1N7IQV758AByA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.32.0/19
Signature Algorithm: sha256WithRSAEncryption
db:ab:91:d9:2a:b6:64:d0:15:c3:7b:6c:ab:e2:fa:31:e3:e9:
87:9d:27:80:8a:65:35:08:31:ae:81:02:23:70:dc:39:c4:d4:
95:8d:2d:3d:4b:e4:2e:88:6d:ac:90:72:2e:04:3a:05:39:7c:
d0:d2:20:82:05:35:f0:d0:59:04:91:a3:f2:58:a5:7c:b8:37:
0e:c0:fe:a5:5a:ec:58:b4:15:a6:77:9b:e5:52:41:1d:6b:83:
29:6e:ba:d3:45:26:d5:22:fb:92:22:40:3c:7c:bb:24:1d:13:
ee:5d:f9:23:0e:6a:54:98:a7:aa:8a:e8:f0:ec:92:ce:51:65:
a7:76:f8:5f:ab:0d:78:d5:db:fd:c9:ec:5c:b7:e9:ad:9c:84:
48:61:75:a5:7e:60:ce:19:70:64:64:79:36:03:dc:b4:d0:46:
67:92:37:2b:5d:b7:c9:65:e7:91:8a:22:fd:e4:7f:f7:96:b8:
43:cb:84:a6:42:a5:8e:8a:10:79:1c:bd:64:7f:5a:c4:ab:dd:
02:97:93:3a:36:1d:73:87:1a:f2:9d:94:a6:e5:4d:d9:3b:23:
fc:7e:16:04:b9:fd:3f:fd:dd:d0:c8:08:47:19:a3:2b:6d:5a:
0a:b9:c6:cb:a3:dc:42:3f:57:33:7b:5b:6b:17:dc:d7:88:69:
35:30:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:52:55 2025 by rpki-client