Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ReI4GHOexlac0G4EyTcRw2o2Wis.roa
File: ReI4GHOexlac0G4EyTcRw2o2Wis.roa (raw, json)
Hash identifier: WxGDb3h8Axg2FU7wAxxbrgWlWO19P4nAP/F7MnBzUDE=
Subject key identifier: 45:E2:38:18:73:9E:C6:56:9C:D0:6E:04:C9:37:11:C3:6A:36:5A:2B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827C306D3AC21B3C1C5ECA55336A2A2
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ReI4GHOexlac0G4EyTcRw2o2Wis.roa
Signing time: Thu 02 Jan 2025 17:54:41 +0000
ROA not before: Thu 02 Jan 2025 17:54:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 87.229.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c3:06:d3:ac:21:b3:c1:c5:ec:a5:53:36:a2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e23818739ec6569cd06e04c93711c36a365a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:42:de:7b:d5:f7:9a:a9:57:31:44:73:a9:
c9:e2:6a:52:ae:ea:35:86:69:7f:b9:06:78:64:23:
25:ff:88:f6:b3:e8:96:35:89:cc:e5:74:20:31:cb:
4d:fa:f4:42:5e:e6:aa:63:bb:d0:53:89:c0:ac:68:
f4:09:e3:71:f7:bb:5f:63:ac:b9:d8:80:b4:a1:97:
7e:af:1f:88:65:fe:6a:76:0c:55:2f:26:29:90:b4:
0b:cb:59:8a:05:ec:17:ac:e3:35:12:9e:4f:19:1a:
a4:58:6e:bf:86:eb:5c:ee:c7:6b:39:a8:e3:e3:d9:
7b:26:fe:1b:ba:1e:43:b3:46:2d:d1:ab:79:11:fe:
3c:83:26:bf:bc:e4:a1:26:34:fc:04:a8:1a:1e:32:
06:7b:bb:ac:d7:d2:49:28:9c:44:78:f3:ac:4f:f3:
43:e8:47:5b:a1:dc:97:64:ca:f1:83:17:39:0c:7e:
03:a3:d7:14:ea:eb:98:6b:95:84:e9:ab:d9:7f:ad:
10:b6:61:51:c5:27:f5:c9:1c:aa:22:8e:9d:9f:66:
1f:b5:29:c5:97:8b:82:34:d2:88:aa:f6:35:79:57:
ea:13:b8:e5:8b:c6:da:06:86:c0:95:b1:67:53:a3:
7c:12:4c:52:3a:dc:0a:23:6e:76:d2:d4:51:85:ef:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:38:18:73:9E:C6:56:9C:D0:6E:04:C9:37:11:C3:6A:36:5A:2B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ReI4GHOexlac0G4EyTcRw2o2Wis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
99:82:64:87:83:ad:c5:08:66:1b:98:13:bb:a3:59:2e:0e:a8:
a4:19:10:1d:dc:8c:2c:69:7e:85:c5:7a:52:58:61:3f:12:f3:
03:de:d5:8f:b8:3a:76:95:07:bf:6b:fc:6b:b8:69:06:5a:d5:
3f:20:6f:d3:b0:56:b9:fe:85:77:1a:d2:17:75:89:a3:42:10:
fc:c6:b3:1b:e5:7e:e8:ed:a5:0d:bc:ae:23:a4:f7:ed:61:56:
fa:24:d6:e3:7c:3b:1a:01:da:2b:d6:36:c6:8a:a9:13:94:5f:
27:23:08:cc:0f:11:c5:82:83:96:96:d7:53:10:80:d0:48:01:
82:61:5a:13:a1:97:be:67:7d:04:57:da:22:0f:25:a3:c0:c3:
02:b5:0b:a4:60:57:75:89:9d:7a:53:b5:ab:d7:b4:8d:2a:3a:
f9:fd:7c:49:c0:35:95:9b:d8:37:04:00:08:3c:84:95:ee:32:
ae:88:9a:7e:1d:a2:5a:5a:e8:ab:72:67:24:98:b4:3f:dd:6c:
a2:14:b1:8f:92:2f:9f:48:0c:60:e6:fd:76:b6:54:3c:4f:c2:
57:1b:df:f8:5c:7c:33:f1:8c:5b:ca:cd:a9:f2:58:bd:74:78:
43:6c:30:78:8f:a4:5c:dc:cd:c9:e9:36:30:06:2e:aa:94:17:
63:68:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:32 2025 by rpki-client