Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4rsQgBNB6sc0jd4Yu6ywKTQcKAk.roa
File: 4rsQgBNB6sc0jd4Yu6ywKTQcKAk.roa (raw, json)
Hash identifier: hNT5UcdDOjWAM7xNkmVbKxKppFsquLRcp1PIo0AQZA4=
Subject key identifier: E2:BB:10:80:13:41:EA:C7:34:8D:DE:18:BB:AC:B0:29:34:1C:28:09
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC5CB42CDFAFCE2440ADF1C6A3FD6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4rsQgBNB6sc0jd4Yu6ywKTQcKAk.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57975
IP address blocks: 146.120.240.0/24 maxlen: 24
146.158.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c5:cb:42:cd:fa:fc:e2:44:0a:df:1c:6a:3f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2bb10801341eac7348dde18bbacb029341c2809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:c6:9b:2e:bb:32:89:c8:ba:3b:31:1d:10:
07:35:63:b2:14:d4:70:e4:47:38:3b:48:9b:c9:28:
28:31:c7:d4:46:66:8f:a4:54:2d:36:23:46:90:02:
6b:32:97:f1:23:e9:45:f2:cc:42:6e:e1:d5:c5:f1:
55:bc:5b:1c:26:2e:24:45:b4:2b:03:4a:b6:69:89:
79:af:0a:1e:cb:ff:a1:66:fd:70:23:9b:30:33:cc:
91:e7:74:55:ee:69:f1:11:d0:c1:16:82:7b:09:4f:
78:96:14:a3:72:00:06:3a:d6:07:6e:bd:a6:b8:3c:
67:4c:12:61:d4:7f:ea:a4:31:7c:7b:a2:4d:f4:c5:
b3:99:73:5b:94:47:68:1c:17:6b:23:18:cd:00:2d:
7e:cb:e8:d1:17:22:94:11:d5:2f:c9:5a:d1:08:51:
68:86:f2:14:a2:df:db:db:b6:72:06:e6:4b:f3:57:
f1:9b:91:95:c5:fe:6c:42:67:f8:d6:ac:1c:ab:83:
a1:3a:58:2f:fd:66:a9:ac:1c:22:a7:d7:1b:e7:8f:
ad:6f:ae:58:6f:3d:73:b8:6e:30:16:13:0c:89:4e:
0a:d4:94:1c:76:18:90:a8:2c:21:ae:35:69:93:6c:
78:0e:be:16:41:7e:c2:6a:52:cd:62:17:a0:5c:4e:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:10:80:13:41:EA:C7:34:8D:DE:18:BB:AC:B0:29:34:1C:28:09
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4rsQgBNB6sc0jd4Yu6ywKTQcKAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.240.0/24
146.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c0:86:bb:a3:08:98:f9:4e:b7:a7:49:af:8a:dc:1f:03:12:
05:46:4b:a8:5a:1a:69:71:44:b8:99:f1:80:29:36:00:12:26:
e7:5a:c1:24:5a:ea:6a:c4:a1:72:c2:69:12:7b:b7:ef:df:53:
c3:6c:0b:c9:88:be:56:5a:cf:11:54:6e:03:5f:6f:99:86:f8:
06:a7:e2:b9:4f:a7:02:94:31:46:ba:95:ed:45:24:89:34:b9:
13:60:47:16:d9:6e:a7:ae:9e:2c:46:90:32:16:85:48:26:1b:
c9:f1:a0:dd:50:b4:4a:3e:2b:07:a0:4b:96:e2:64:c2:99:48:
93:0d:c6:10:9e:9e:d5:23:e2:7d:e4:50:eb:4f:b2:51:48:7b:
64:85:91:dd:91:b2:a5:e0:ff:7e:18:5a:a8:9f:e1:eb:71:6b:
13:95:0e:68:93:7b:c3:84:ee:0e:98:f3:39:ba:0e:37:3b:42:
14:4e:2c:bd:96:a2:22:57:4a:1a:1d:fc:65:e7:6e:27:56:75:
9f:54:1e:ca:0d:4a:94:39:69:bb:94:89:3b:81:01:d4:a6:cb:
9c:37:f8:67:62:11:32:c1:b3:a3:4b:65:d3:0a:fa:ab:28:c4:
99:6d:97:8b:36:2b:99:d0:6c:75:4b:b7:a2:15:cc:b2:04:7b:
aa:e7:ea:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:23 2025 by rpki-client