Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/VmEKVuU_uT-v34QUxuvTEoMoaug.roa
File: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (raw, json)
Hash identifier: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=
Subject key identifier: 56:61:0A:56:E5:3F:B9:3F:AF:DF:84:14:C6:EB:D3:12:83:28:6A:E8
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0194258EB2E1C44BD0541C42BB0E800F991A
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/VmEKVuU_uT-v34QUxuvTEoMoaug.roa
Signing time: Thu 02 Jan 2025 05:48:16 +0000
ROA not before: Thu 02 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 158.46.144.0/24 maxlen: 24
158.46.145.0/24 maxlen: 24
158.46.146.0/24 maxlen: 24
158.46.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b2:e1:c4:4b:d0:54:1c:42:bb:0e:80:0f:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56610a56e53fb93fafdf8414c6ebd31283286ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:7f:81:27:c4:9b:24:53:7d:08:58:3f:4b:
78:d9:c9:e4:46:cb:26:55:c6:78:c4:bd:10:db:f9:
4d:46:96:02:86:7a:74:4d:3e:68:ca:32:28:92:39:
7e:2f:44:a6:e0:10:ec:13:55:29:77:d0:68:46:05:
15:41:e9:38:8a:5e:5a:c5:ec:c7:72:16:eb:b7:85:
bc:f2:aa:06:e6:ba:75:1b:ad:d8:45:fa:3a:62:44:
82:a6:d8:c3:e4:8d:df:ad:3d:08:af:d7:7f:ab:f3:
ca:0b:32:19:09:16:61:ec:da:aa:4c:5c:fb:1d:83:
b2:cd:70:61:4e:67:15:48:e9:58:92:d4:29:17:0c:
23:9a:c3:b3:d5:28:78:b7:f9:4b:ba:ab:08:02:f8:
d7:ba:54:f9:e8:af:b2:2f:d3:93:8a:0e:fb:53:e4:
f3:20:22:a2:ac:dc:7b:be:08:c3:dc:69:d1:b1:6f:
8f:4e:d0:fa:bb:50:e8:a3:63:0c:7e:a9:27:21:c8:
be:37:84:26:4a:61:cf:17:f8:0b:6b:2e:1c:0a:4b:
2c:a6:08:93:7a:e9:36:5c:24:b0:06:47:0e:e4:06:
3a:5d:61:0f:4c:92:c1:95:55:84:71:2a:87:bb:07:
19:44:f4:d0:ba:ef:54:70:8f:68:1b:61:2d:98:17:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:0A:56:E5:3F:B9:3F:AF:DF:84:14:C6:EB:D3:12:83:28:6A:E8
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/VmEKVuU_uT-v34QUxuvTEoMoaug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.144.0/22
Signature Algorithm: sha256WithRSAEncryption
73:ee:bd:3a:4b:d3:9c:5f:62:1a:9e:90:4d:d7:d8:43:13:7c:
0d:e4:04:88:ae:d4:c4:13:8c:59:0a:92:b7:f0:02:57:82:ee:
40:eb:87:a3:d2:3e:e3:ce:91:09:f6:1c:e5:7b:5a:88:19:6e:
e6:31:f6:8c:05:0c:f4:70:03:97:a7:c2:05:56:90:a3:9a:19:
7d:c7:cc:43:18:81:9c:bc:bb:72:6f:60:b6:f2:50:95:61:8b:
a6:1f:ca:84:67:b8:76:1b:67:2c:43:8d:39:8c:78:0f:28:5a:
60:27:5a:5f:25:f5:e1:16:28:5c:6c:aa:0b:50:8c:0c:0f:7c:
1a:a8:33:f2:0a:60:1e:c0:bd:48:30:57:c3:ab:6b:23:08:00:
e9:38:e4:04:9d:4a:cd:95:f4:c1:6c:55:da:d6:39:2c:88:57:
34:71:b1:30:c4:72:38:48:6d:53:5b:7c:85:0b:a1:e4:e4:49:
ad:47:f6:7f:98:9c:03:2b:d5:36:45:89:dc:1a:6f:3a:8b:07:
35:82:e0:62:62:4e:22:18:87:03:67:7b:e2:ac:c6:cc:28:17:
29:75:e6:22:43:47:0f:c4:86:3f:87:bd:1b:e6:2f:69:c9:cc:
03:3a:9d:dd:51:81:b6:5f:67:51:a4:4d:7a:6c:ec:89:8e:39:
c6:36:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:01 2025 by rpki-client