Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Plhp8kozsjJjr5xutG_5OmCKOzc.roa
File: Plhp8kozsjJjr5xutG_5OmCKOzc.roa (raw, json)
Hash identifier: jHhve6x91eRg7+8bDu5j5Ify1fEYSDj5qu2zoKgYUY0=
Subject key identifier: 3E:58:69:F2:4A:33:B2:32:63:AF:9C:6E:B4:6F:F9:3A:60:8A:3B:37
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A17F18FFD6B4B3DD6D664801F2E9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Plhp8kozsjJjr5xutG_5OmCKOzc.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142019
IP address blocks: 45.93.17.0/24 maxlen: 24
45.155.225.0/24 maxlen: 24
103.240.148.0/22 maxlen: 24
160.238.64.0/24 maxlen: 24
160.238.65.0/24 maxlen: 24
160.238.67.0/24 maxlen: 24
185.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a1:7f:18:ff:d6:b4:b3:dd:6d:66:48:01:f2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e5869f24a33b23263af9c6eb46ff93a608a3b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:b8:f8:36:40:cc:06:be:0e:66:09:2a:d1:
6b:17:61:46:8f:4e:ff:76:38:c9:d1:d6:62:f4:5f:
31:02:92:aa:56:28:05:10:7e:d5:99:73:3e:4a:7f:
6f:b1:58:5c:10:75:4a:b9:5a:fb:2b:6d:75:a1:e9:
6a:ed:48:03:c1:7b:2f:53:b0:e7:09:5f:44:2e:ad:
87:39:32:09:a5:fa:72:ea:e5:89:a2:41:30:1d:fa:
17:9c:ff:18:a0:af:91:62:9e:d1:14:e3:ee:73:cf:
95:2d:bc:1c:9d:77:9c:de:7d:3d:f4:f0:73:a5:9c:
de:03:27:5a:e7:a3:df:38:e4:fd:7a:07:b9:92:db:
88:62:d8:2d:9b:9c:f9:6b:4b:a2:16:a3:09:b6:d6:
c7:f6:64:31:b9:67:2f:91:0b:95:a1:3e:78:47:2c:
77:00:c5:7c:2c:7e:c8:9a:bc:d6:78:d4:36:f4:2b:
23:d7:2c:04:45:3a:f1:ec:bb:a4:d8:ec:48:66:b5:
dc:43:39:3a:0d:10:7c:58:a6:7f:8c:d1:28:66:db:
02:33:d2:cd:54:a4:4f:b1:e4:d8:e3:47:65:5c:d3:
4c:fb:8f:d3:1e:42:39:76:1d:60:05:47:44:3b:fa:
10:72:e8:64:47:fd:43:99:48:d3:35:95:52:c4:19:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:69:F2:4A:33:B2:32:63:AF:9C:6E:B4:6F:F9:3A:60:8A:3B:37
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Plhp8kozsjJjr5xutG_5OmCKOzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
45.155.225.0/24
103.240.148.0/22
160.238.64.0/23
160.238.67.0/24
185.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
18:48:7f:ed:1b:4c:5f:47:1e:30:4c:f0:74:dd:e2:e7:fb:c8:
a6:2d:fd:3f:8f:51:c0:e6:1c:27:cb:57:ed:24:e8:f5:5e:9f:
c4:36:c0:24:91:20:76:f3:42:5c:d5:9a:97:c9:d9:0e:65:8b:
89:4d:72:95:d4:a8:b1:71:b2:f8:f6:ff:7a:a6:06:16:6f:01:
24:c8:44:0d:43:26:3c:b2:f6:ee:e4:0b:2d:6a:42:38:54:c2:
24:2f:b1:2b:c6:a4:3f:f2:1c:5b:44:49:21:9a:7b:13:54:b9:
f3:95:5b:db:d0:d0:78:0f:3f:36:48:dd:74:77:d8:c8:1a:5b:
2e:7b:ce:41:19:1c:de:e1:f7:0c:3c:43:31:2f:e4:ea:94:b1:
dc:92:52:c4:b9:89:b4:46:11:ec:20:0a:b4:22:da:ef:9a:8a:
a4:d4:b5:e6:47:b1:03:6b:d5:40:b2:04:d7:a9:3b:2b:ec:53:
dc:3a:64:e9:ab:b9:26:f5:0c:4b:f5:60:a6:94:a2:5f:5b:b7:
9d:6c:f6:71:de:34:4f:29:e5:c2:6b:92:f7:b3:1f:7a:9f:e8:
04:5b:f1:28:f0:ac:d6:c0:0a:0b:e8:87:93:46:22:9e:4d:07:
ba:fa:b4:0d:99:12:b0:b5:e5:68:51:3e:41:01:f4:29:82:7e:
b3:c2:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:53 2025 by rpki-client