Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p1rhsL3PejSulZU9z6NDpCvX5BE.roa
File: p1rhsL3PejSulZU9z6NDpCvX5BE.roa (raw, json)
Hash identifier: 8kMnS91cfOEd80RsdZBS8WkInVmOWQlzWIrinAh4NoA=
Subject key identifier: A7:5A:E1:B0:BD:CF:7A:34:AE:95:95:3D:CF:A3:43:A4:2B:D7:E4:11
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484FDE575F6A1CC0C586FCBC60389D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p1rhsL3PejSulZU9z6NDpCvX5BE.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 269729
IP address blocks: 46.29.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4f:de:57:5f:6a:1c:c0:c5:86:fc:bc:60:38:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a75ae1b0bdcf7a34ae95953dcfa343a42bd7e411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:45:a0:75:ed:28:cb:32:fa:02:52:5b:3a:
8f:cc:7e:4f:af:9f:3c:3b:69:1c:6a:7e:59:25:cd:
63:d5:05:3a:17:4b:67:5b:3a:77:57:2f:43:9e:85:
78:d7:b1:83:4f:89:88:76:9f:58:91:71:90:ef:d0:
96:92:fe:bd:86:07:06:03:6f:a1:71:82:c9:7a:06:
f0:06:21:61:a8:5f:79:f7:72:5d:89:c1:64:aa:94:
fc:0f:2e:83:27:fd:2e:b8:b8:99:02:51:24:2b:a1:
93:ed:bc:12:69:ad:a2:bc:0d:fa:70:9d:41:45:fa:
fc:ab:11:f4:fa:fe:12:62:bb:8a:73:59:17:a9:89:
df:9b:4d:d3:60:11:15:e5:92:21:b7:eb:a9:d0:a1:
b8:4b:62:35:72:7d:9e:c3:17:2b:63:8e:6e:59:e4:
0b:0a:7b:44:03:6d:16:19:eb:ee:69:36:ac:69:52:
a6:0f:fc:70:d4:e2:95:b5:8f:ef:a7:bf:83:2a:7a:
52:b6:91:9d:6b:61:a3:bc:19:57:80:78:30:3a:01:
5c:a4:e5:a6:41:67:ed:b5:d9:63:7a:58:4a:f3:92:
bb:32:3e:2f:c2:34:40:cf:98:05:51:f4:9f:f8:54:
4d:41:1f:ce:ec:e1:bb:2c:70:b3:32:73:35:b8:a1:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:E1:B0:BD:CF:7A:34:AE:95:95:3D:CF:A3:43:A4:2B:D7:E4:11
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/p1rhsL3PejSulZU9z6NDpCvX5BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e5:6d:50:23:92:88:7b:29:7b:e5:d4:8e:b0:87:6d:0b:ad:
72:f0:e0:92:5e:ba:ba:9b:fa:54:f7:22:1e:05:66:e0:92:55:
65:c5:20:9c:5d:b7:0b:08:f4:0b:bd:8e:a4:ee:d4:44:1f:6a:
8f:12:f9:9f:b6:c0:7c:f1:dd:90:35:00:e5:75:38:50:9f:22:
21:72:93:84:d2:49:ad:e2:e0:ca:1f:39:fe:74:5c:3c:0f:71:
19:a0:f5:9d:89:ac:2a:01:53:45:06:77:a3:28:59:03:5d:c4:
36:64:7f:4b:2d:ff:32:f3:fb:c6:56:84:22:ca:6a:27:90:a4:
b2:c2:b3:6c:9b:52:9a:b4:59:98:b1:7b:b5:f5:e1:5f:44:ca:
e7:05:92:66:e6:0c:c8:23:e0:98:3b:87:59:ad:48:23:d2:10:
dc:3b:41:49:63:dc:0e:2f:0b:80:e6:e3:12:8c:60:02:81:b6:
17:05:86:3c:e6:cd:5f:e3:0d:18:ba:28:dd:3b:c5:c9:08:e7:
0d:88:d9:13:ab:bd:15:21:5d:05:af:15:bc:bf:7f:46:e1:2f:
85:22:29:00:b6:c0:17:35:4a:ca:c3:10:28:da:4f:20:6b:00:
e3:73:da:94:22:c4:26:57:40:ae:cc:8b:63:4d:1a:3a:fb:78:
62:ad:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:04 2025 by rpki-client