Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/9mLiZaXlrMh-SLMVWKWdzKIZreg.roa
File: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (raw, json)
Hash identifier: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=
Subject key identifier: F6:62:E2:65:A5:E5:AC:C8:7E:48:B3:15:58:A5:9D:CC:A2:19:AD:E8
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019427B564677BC360155241E5A9920199A0
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/9mLiZaXlrMh-SLMVWKWdzKIZreg.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49791
IP address blocks: 45.144.48.0/22 maxlen: 22
2a05:fc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:64:67:7b:c3:60:15:52:41:e5:a9:92:01:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f662e265a5e5acc87e48b31558a59dcca219ade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:9c:ac:b3:d5:c9:e8:41:99:d7:d2:72:54:
3d:7f:e4:1b:6b:5a:2a:5e:09:ff:30:a7:df:05:c7:
2c:53:a4:b0:d5:27:71:5f:be:97:06:e0:3c:34:bd:
bf:3f:7b:7c:a2:55:3a:d1:be:b7:25:06:7b:ce:6c:
38:e4:01:b3:78:a2:4d:95:39:d9:ae:8b:39:c8:04:
f7:9d:68:3d:c2:22:e1:88:ce:fe:8a:39:2a:e4:f7:
37:64:8e:36:7e:67:37:8d:63:12:a0:3f:dc:33:81:
d6:89:3f:e9:7f:27:fd:87:28:28:ea:42:25:d7:a8:
d7:09:ce:0c:e1:f9:69:e2:e4:9a:68:22:fa:c2:fb:
25:c9:a6:82:90:de:5f:e4:18:59:aa:2e:b5:0a:7b:
8f:de:48:49:ab:a4:d4:13:ed:9d:23:ab:e2:7e:f4:
96:3f:d8:03:33:46:21:d3:7a:7c:87:63:1b:d6:88:
17:4e:2a:09:ad:88:45:ff:a8:dc:20:8a:fb:ca:83:
f3:70:75:71:94:0a:68:8b:0e:a8:e3:2d:82:19:71:
91:64:0d:88:59:d9:8b:fc:cd:fa:ae:0b:2d:29:57:
1c:dd:07:67:ec:d9:95:40:c7:76:c7:a6:14:38:6e:
9f:6a:2e:cf:2b:f3:55:14:54:46:7e:35:c0:46:eb:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:62:E2:65:A5:E5:AC:C8:7E:48:B3:15:58:A5:9D:CC:A2:19:AD:E8
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/9mLiZaXlrMh-SLMVWKWdzKIZreg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.48.0/22
IPv6:
2a05:fc1::/32
Signature Algorithm: sha256WithRSAEncryption
4d:5b:9a:7e:37:52:e2:2e:45:9f:42:11:aa:99:63:69:86:ae:
09:37:34:69:37:12:37:78:31:49:80:e8:44:17:22:45:2c:ef:
86:f2:ef:84:fb:ca:3a:04:68:65:93:2c:5d:df:42:2f:d1:67:
62:d9:58:0c:0a:fa:67:0a:d9:14:5a:ef:64:59:11:78:41:a3:
18:a6:fc:61:b9:1b:40:cc:b4:d5:eb:9f:3b:16:48:ea:41:a1:
eb:f9:a1:bb:86:38:1f:11:a2:84:ed:9a:04:be:ff:7a:9e:71:
d8:51:d0:50:19:f5:5f:53:c4:1a:40:a3:5e:18:87:0e:ba:64:
fe:ea:a7:e5:2e:5e:31:38:7f:5b:7b:1e:21:39:2d:8d:c3:91:
1a:5f:29:71:03:25:85:6a:76:48:50:2a:c7:53:5d:b1:e1:49:
cd:51:10:62:73:0d:a7:0b:4a:b2:b8:58:46:5a:4b:1e:7f:1b:
c6:d6:9f:77:c5:12:f2:ab:da:2f:b6:3b:c9:b4:41:36:6f:8b:
20:a8:06:a2:c2:be:61:a8:74:58:76:0c:ec:8e:6c:eb:2c:2d:
91:ec:4c:1e:eb:7e:6b:17:f5:e1:ee:cd:b2:b5:28:3e:7a:1a:
50:bd:f5:cc:78:bf:ba:7d:e2:db:ed:48:70:7d:ac:cf:57:ca:
ba:e2:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:27:40 2025 by rpki-client