Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa
File: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (raw, json)
Hash identifier: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=
Subject key identifier: 55:02:65:46:72:3F:16:C1:0A:21:B1:16:18:BC:A1:2F:03:F4:36:D3
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A45ACD5FC11BE49D0E1200F01BC69
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 45.139.229.0/24 maxlen: 24
45.139.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:45:ac:d5:fc:11:be:49:d0:e1:20:0f:01:bc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55026546723f16c10a21b11618bca12f03f436d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:89:36:9f:11:7d:9a:7e:88:57:c5:e8:56:
d8:81:73:5d:06:c3:58:3c:6d:2d:8e:8c:a6:ca:71:
6c:3f:17:43:e0:ab:cb:b3:0f:91:b1:d5:4d:e7:f1:
17:57:f0:8e:21:8b:b0:e0:68:76:86:63:ec:53:6c:
0a:50:62:99:5f:e2:62:a6:0e:74:56:ce:f2:24:77:
ad:4c:9a:f6:32:88:c9:99:75:b7:f2:6f:91:a8:be:
88:f6:cd:5e:69:80:ee:e6:4f:e4:f7:58:0b:3c:85:
52:80:bb:42:9e:29:25:d2:a3:40:c0:00:b1:a7:c3:
7c:b7:26:50:49:f0:6c:0d:48:43:1d:bd:4c:f8:1e:
18:c6:e0:d6:15:2e:4b:36:48:cb:de:01:88:82:64:
e9:22:f8:c7:b4:22:65:ec:6d:0c:a6:04:6c:0e:ee:
cc:14:cd:2a:cb:4f:b3:91:d1:04:85:3f:f2:a9:e0:
e5:39:d0:f4:7e:e0:f7:06:b1:75:c2:ab:ef:a4:96:
11:f4:68:1f:c1:95:4e:1c:85:cb:20:a4:89:27:e4:
42:2e:9e:f9:fb:8c:eb:0b:d6:84:bd:e8:81:9c:4d:
d4:09:f1:d9:a1:b2:9b:fe:c5:e5:82:93:34:ce:af:
57:23:b9:c2:fd:8a:36:cc:6c:42:59:63:8b:ae:b5:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:65:46:72:3F:16:C1:0A:21:B1:16:18:BC:A1:2F:03:F4:36:D3
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.229.0/24
45.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0c:cc:34:7d:15:8f:ae:49:35:28:35:ba:25:65:9f:58:87:
db:03:e6:68:44:72:97:53:46:ed:8f:02:73:8a:96:6c:16:6c:
5c:46:69:45:ee:4b:71:fc:f8:1a:00:67:d9:1a:d3:da:c0:a4:
71:49:6b:f4:71:b2:3d:5c:d5:c7:81:96:5d:c8:30:37:68:69:
b1:a9:97:cb:d3:4a:ad:bf:ca:17:6b:03:80:91:40:8f:f7:cd:
58:39:3a:1a:b7:3b:9c:f6:c0:e2:e5:7f:f5:a5:a9:8c:5b:8f:
59:f2:73:db:d9:4b:66:69:7a:31:7b:2e:b6:5e:67:91:4a:63:
39:65:54:3b:d5:be:2c:e7:7a:76:ee:a1:a9:9d:3c:e9:63:dd:
2c:8a:d8:15:56:1a:84:c7:71:11:a1:a5:37:bc:b2:8a:e2:39:
f7:98:d6:87:8f:3d:92:46:db:14:87:2b:6f:39:e3:97:4b:00:
d1:b9:28:72:45:15:ef:16:e6:c7:68:3f:51:e8:5c:63:c6:c0:
81:10:2d:6f:d6:1e:b3:40:7e:60:ea:33:93:c8:c5:6f:3a:6a:
cb:f5:55:1b:d4:79:68:b9:63:5b:9d:62:9a:9d:a8:67:5e:1d:
6d:85:29:00:89:5f:78:65:39:de:30:2c:e2:c2:f7:d2:80:ed:
c0:c8:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:00 2025 by rpki-client