Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/pud7auFn2E42HIACPO7Sg_eiPjQ.roa
File: pud7auFn2E42HIACPO7Sg_eiPjQ.roa (raw, json)
Hash identifier: C7IhEUDIpfgB1yixTpiwplwxga4k3Layuwm2wJUFeAY=
Subject key identifier: A6:E7:7B:6A:E1:67:D8:4E:36:1C:80:02:3C:EE:D2:83:F7:A2:3E:34
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0194266B94A74F454DFECF54A9FB6DCE00AB
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/pud7auFn2E42HIACPO7Sg_eiPjQ.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200180
IP address blocks: 45.155.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:94:a7:4f:45:4d:fe:cf:54:a9:fb:6d:ce:00:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6e77b6ae167d84e361c80023ceed283f7a23e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:1d:de:82:b9:49:df:fb:07:1f:c7:92:71:
4f:fb:92:8b:7e:f6:fd:20:1c:d8:ce:57:29:20:88:
4c:90:17:c4:cf:b8:9d:e5:f4:a3:4b:02:ea:4c:97:
20:00:26:b5:b6:62:4f:a2:22:56:34:52:2d:8e:63:
a6:9e:1c:62:b1:8a:ee:6b:ab:2a:e7:21:a6:e1:92:
26:14:0e:13:3d:e7:11:41:31:20:ae:05:48:28:df:
57:6d:2b:a2:ed:f1:58:cf:63:27:bc:d2:d4:83:ae:
49:55:ed:df:71:87:c2:9a:a5:6d:f1:5a:13:6b:80:
d5:1b:08:f3:d5:10:f0:b8:de:d6:a4:55:06:93:cb:
82:43:22:0f:f2:d3:33:5b:31:6a:23:d5:cb:d6:f1:
3d:75:17:65:e1:38:b3:1e:ec:46:4d:a8:ce:7c:a7:
c7:77:fd:af:8e:c6:ac:75:56:01:06:c8:88:5f:8e:
55:85:6b:d3:bb:0f:24:bd:1c:dc:4a:49:fd:c7:8f:
b5:e2:c7:e7:0e:56:a9:fa:c0:87:c2:0d:1c:05:aa:
59:4c:2f:6b:51:c5:58:da:1a:e8:56:a2:47:3a:d1:
aa:88:33:6a:30:78:e3:72:84:b9:10:5b:cc:e9:31:
57:f0:da:97:47:2c:ac:ca:e6:60:36:c8:c2:21:80:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:7B:6A:E1:67:D8:4E:36:1C:80:02:3C:EE:D2:83:F7:A2:3E:34
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/pud7auFn2E42HIACPO7Sg_eiPjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.164.0/24
Signature Algorithm: sha256WithRSAEncryption
23:12:68:4e:0c:04:6c:e5:14:9a:0c:08:12:5b:20:cf:bb:af:
8a:e5:c2:32:35:de:98:40:20:3b:68:5c:c9:fd:2c:cd:82:e0:
f8:45:29:1b:4c:29:ab:01:f6:68:fd:cb:50:fa:8d:01:2d:f1:
68:d4:07:47:29:6f:1a:d6:5c:b1:17:73:c5:da:68:78:df:bf:
55:25:02:57:95:9a:2a:ae:06:80:ac:16:22:cf:8b:0a:4a:d1:
05:9e:48:3e:1e:75:e1:4b:29:93:5a:5c:df:dc:26:78:ab:59:
8c:b5:65:9b:23:92:b1:d3:68:ec:7d:f8:bf:d1:fd:81:dd:48:
1c:75:9a:5b:69:30:a9:b0:f6:57:3c:0c:d1:f4:68:ed:a0:fb:
12:ce:48:67:49:cb:ba:ec:08:fa:8a:f0:7c:34:dd:39:e2:2d:
af:26:0b:a7:05:2b:33:e9:20:bf:57:31:1f:cd:6f:11:8a:da:
c5:fb:5c:8d:4a:a3:9e:bd:5a:b9:7a:c2:7a:99:9d:ff:89:7e:
28:87:f5:39:db:47:5d:a7:75:a1:96:bb:7a:68:92:76:d2:1e:
de:37:ea:ea:71:11:d4:b0:0b:c6:a8:a7:80:22:d2:d1:c3:f7:
1b:f6:4b:ab:eb:d2:9e:0f:83:fa:1e:65:13:84:1e:8b:08:ab:
0a:6f:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:09 2025 by rpki-client