Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1R2zAGXnf6J_fO1aBoAZ02GCTEI.roa
File: 1R2zAGXnf6J_fO1aBoAZ02GCTEI.roa (raw, json)
Hash identifier: fCwoQMvjd21F+selixd799zpXLo13DBd9TNkUibQnRY=
Subject key identifier: D5:1D:B3:00:65:E7:7F:A2:7F:7C:ED:5A:06:80:19:D3:61:82:4C:42
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB875FCFCC4A287721A07C2F59C6D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1R2zAGXnf6J_fO1aBoAZ02GCTEI.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50516
IP address blocks: 146.158.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b8:75:fc:fc:c4:a2:87:72:1a:07:c2:f5:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51db30065e77fa27f7ced5a068019d361824c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:3c:cc:40:3e:d8:7e:4f:13:5c:19:6c:1c:
0a:6f:99:0a:0a:89:05:a3:a9:70:61:49:b7:cb:c3:
3f:c9:02:db:d4:de:64:f3:98:0a:8c:a4:2f:64:8e:
5c:36:46:88:4a:78:d9:38:ad:48:43:1d:5f:1d:f8:
ca:f3:54:71:d5:14:ab:33:ce:77:b1:1b:04:ad:94:
98:ca:9c:7b:77:7c:b5:5f:f8:30:70:10:be:f2:2e:
3f:02:0c:84:8b:51:05:f4:f7:fb:72:7c:ec:30:4e:
a3:e3:42:fd:b4:20:c0:48:bc:a2:c0:bf:bb:fc:17:
36:87:26:56:f4:fc:d6:0b:9f:e7:1e:73:4d:54:cb:
56:a8:0a:ba:1d:80:91:90:d3:4c:f8:c7:a4:d2:1a:
40:d4:4c:4c:55:ba:e6:52:98:a9:62:dc:2e:ee:bd:
db:d9:3c:50:0e:54:e8:a8:ba:65:34:4c:83:77:b1:
d6:70:96:ec:5a:46:8b:74:e9:34:70:f3:f9:9d:52:
5d:d4:da:6e:51:7a:9d:f6:a0:22:bf:6f:f6:e2:09:
be:36:bc:5c:8b:70:fe:c1:3d:15:47:ac:58:9b:08:
95:2e:f9:66:29:4f:13:ce:93:a6:9c:5b:88:35:43:
52:5f:40:91:46:72:8d:d5:ac:56:48:30:59:5e:bf:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:B3:00:65:E7:7F:A2:7F:7C:ED:5A:06:80:19:D3:61:82:4C:42
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1R2zAGXnf6J_fO1aBoAZ02GCTEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:20:25:7b:0f:70:da:9b:63:ad:7e:25:7c:3d:d4:5f:7d:a7:
ab:bb:39:85:85:2e:9e:aa:03:f1:11:27:aa:13:df:03:43:18:
45:69:67:a4:cb:31:0b:63:e6:a0:0c:09:63:49:16:e8:17:4b:
66:2f:9e:da:36:7e:16:ce:da:e5:26:c9:1c:e4:90:b0:68:54:
52:5c:97:64:64:ae:f9:a2:a0:c2:e8:b6:72:38:0f:6c:ec:7f:
1c:93:ec:a8:f0:b2:89:ff:1a:f9:d4:0e:f9:0d:7b:0a:cb:2c:
da:19:5e:8c:dc:93:8a:31:94:cd:b1:ef:60:f3:3f:37:ae:ee:
95:1e:29:a7:f5:21:d1:59:75:ac:90:37:c5:5b:78:2a:a3:6a:
58:95:9f:88:03:4b:75:ce:15:56:1a:e8:c7:3d:04:06:cd:0b:
f2:21:d7:27:24:98:1d:bd:62:2a:da:4c:c0:9f:6a:60:71:d8:
c0:b4:bd:bc:dd:1d:4b:c4:43:7c:c7:00:95:7e:d7:5e:ee:9a:
31:aa:de:12:fd:ec:4c:60:b1:a2:09:b0:49:6b:0a:7b:15:68:
1f:3b:2a:ed:92:0e:00:96:f5:b8:fc:51:5e:60:9f:5e:5f:8c:
5b:f4:0f:89:30:26:83:ff:81:33:7c:50:93:f8:6c:15:b7:30:
0c:93:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:32 2025 by rpki-client