Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa
File: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (raw, json)
Hash identifier: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=
Subject key identifier: 22:D0:21:93:CB:53:42:F7:23:54:E7:DD:D9:98:E3:09:8D:AC:3E:53
Certificate issuer: /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial: 019423D7D7111E26123D0702440DD1FEC952
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44270
IP address blocks: 45.158.232.0/22 maxlen: 22
2a0f:6c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d7:11:1e:26:12:3d:07:02:44:0d:d1:fe:c9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d02193cb5342f72354e7ddd998e3098dac3e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:44:03:10:51:d5:2a:d9:12:77:9d:cb:2a:
78:4c:3b:b0:fc:1f:8e:96:a2:cc:6f:b4:4c:8e:fa:
8c:2d:a6:94:9c:2a:93:5b:93:54:1d:41:ca:b2:68:
d6:4c:b1:0a:b7:50:26:93:ad:fa:84:8c:e3:e8:e6:
0e:87:9c:d1:ff:96:ca:31:22:06:a5:c5:9b:66:01:
17:b3:44:79:64:26:f9:6e:d1:9b:a8:aa:18:6d:db:
48:f5:54:f8:79:2e:5d:57:03:1e:20:59:e1:63:7e:
df:59:24:33:db:92:63:1d:22:df:cc:ea:00:1f:4e:
c7:1a:f5:38:48:25:90:a3:62:d3:d0:9d:48:07:b1:
da:42:96:28:78:6f:e5:23:f6:36:8f:a5:d2:77:0f:
a7:f8:ad:1b:2f:54:32:6b:af:b4:23:53:c9:29:87:
49:4f:35:2b:25:c7:b3:06:3f:ae:d8:32:93:20:a6:
63:9b:a1:3e:6d:d8:bb:10:a2:8f:0b:f7:da:db:fa:
89:8a:fd:44:5a:37:cb:e4:ad:c2:73:59:0d:80:a2:
cc:d7:a0:f7:60:96:65:04:cb:1b:f1:ce:54:b9:9e:
cb:d1:4b:44:df:ca:a4:1b:69:2a:76:08:7a:a3:2f:
e3:d3:42:57:fb:f0:05:b8:7c:5b:d8:e4:51:dc:68:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:21:93:CB:53:42:F7:23:54:E7:DD:D9:98:E3:09:8D:AC:3E:53
X509v3 Authority Key Identifier:
keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.232.0/22
IPv6:
2a0f:6c80::/29
Signature Algorithm: sha256WithRSAEncryption
12:a2:ea:15:8a:7c:2a:ae:52:d0:2c:42:97:c5:d0:f5:f3:21:
b8:8a:27:ff:2e:f2:1e:3a:b7:5c:78:55:24:99:72:f5:02:e2:
19:3d:dd:ba:88:92:01:a9:fa:d5:bc:ba:00:64:ea:9e:77:93:
64:ca:bd:41:8a:99:24:23:9a:a4:79:fa:4c:03:5a:5c:d6:af:
55:63:6b:45:33:1b:76:9f:c8:11:5f:5a:0f:dd:5b:a7:44:4e:
d0:53:a1:5d:54:d0:ac:64:53:66:f0:4e:7d:68:d1:cc:3a:a8:
ac:57:38:49:fb:9d:d4:68:33:3d:53:af:09:da:9e:d1:26:46:
67:9b:95:7b:61:cb:66:ef:e1:df:ca:f1:ed:45:fb:7e:9e:17:
b0:45:7a:d1:78:48:7e:64:0f:79:2b:06:fb:d1:35:32:5b:79:
ed:87:c6:54:97:21:5e:1c:4a:03:b2:69:67:57:29:36:3c:6e:
f0:0e:6a:47:e7:56:dc:c1:94:fc:42:b5:6d:8a:7e:3d:94:cf:
bd:38:24:f9:f4:b4:33:41:c1:5c:4d:7d:71:a3:53:9c:bb:54:
14:10:3f:02:d3:b9:eb:83:e5:95:9f:5c:dc:95:f3:b5:33:69:
0a:b0:b3:35:b4:36:28:c9:4a:e6:75:b6:be:ec:95:ec:f8:19:
da:12:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:22 2025 by rpki-client