Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/45wj0w29EVb12lgzB4yBvbTkqGs.roa
File: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (raw, json)
Hash identifier: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=
Subject key identifier: E3:9C:23:D3:0D:BD:11:56:F5:DA:58:33:07:8C:81:BD:B4:E4:A8:6B
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019426D9E71245A98F8565BE551D7CA24EB3
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/45wj0w29EVb12lgzB4yBvbTkqGs.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 193.142.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e7:12:45:a9:8f:85:65:be:55:1d:7c:a2:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39c23d30dbd1156f5da5833078c81bdb4e4a86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:4a:95:20:61:3d:40:af:0b:a0:83:e3:19:
4d:f6:77:ef:4b:16:3e:f7:61:b8:bf:e1:c1:be:3d:
03:7f:19:cb:19:cc:74:16:e6:07:43:83:5c:3a:cc:
af:66:0f:d0:14:b3:55:70:2a:72:92:58:cd:92:ea:
af:61:82:60:3e:53:ad:7c:dc:5e:94:5e:1d:dd:8b:
a2:dd:d2:5c:a6:75:69:98:a8:a2:ce:5e:67:88:d9:
dc:a1:32:89:2c:85:35:9b:c2:fc:b7:a3:b2:90:3f:
92:c3:3c:3f:92:37:4d:c9:8c:48:21:d9:3d:93:62:
0b:cd:58:bd:e6:3a:0e:a1:b2:ff:c8:41:48:65:80:
a9:2e:7c:d2:76:67:61:1f:e7:38:84:0a:cf:cc:19:
85:cd:ef:1d:46:90:19:1a:f7:b2:24:1c:83:43:e4:
30:e2:5f:a5:60:9e:0c:7d:82:27:d9:12:17:17:e5:
a3:80:df:73:cb:98:5c:8a:ef:10:ec:a1:a7:d0:8f:
a8:f2:cd:94:04:7b:ae:c9:c3:e6:13:59:d4:a6:fd:
be:80:88:09:88:87:62:cb:27:dd:b5:0b:08:1c:4f:
12:43:6a:a1:95:6b:84:37:03:52:7b:73:97:a7:09:
2d:3c:23:f4:ea:03:e4:64:ca:63:e5:79:ea:ec:42:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9C:23:D3:0D:BD:11:56:F5:DA:58:33:07:8C:81:BD:B4:E4:A8:6B
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/45wj0w29EVb12lgzB4yBvbTkqGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.111.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a9:26:3e:ba:32:1b:56:36:97:5b:2c:3e:47:dc:d7:d6:aa:
86:22:8c:d7:e4:27:23:87:94:fc:aa:02:df:d7:3f:5a:2f:56:
b0:f2:c1:38:37:88:c4:01:a0:cd:a1:6f:68:d9:d2:c8:55:a2:
29:c1:40:a3:80:83:d1:87:a3:7c:9c:db:c7:54:78:34:5c:43:
c6:4e:f5:0a:31:4f:74:49:55:4e:5f:2e:68:b9:6c:e1:d5:75:
88:c3:40:64:fb:99:a9:0d:e1:a6:8a:1c:d4:30:ae:86:22:3a:
15:26:2a:35:69:0b:39:62:4a:96:92:83:d2:5b:22:6e:33:cf:
78:e5:eb:8c:04:ee:09:14:2e:c6:f6:81:0f:23:26:d1:19:d4:
d1:30:d0:b0:b5:96:43:d2:a2:c0:15:11:61:c8:2e:cc:6e:83:
a3:47:53:21:21:12:ad:23:12:35:dd:64:82:b7:2e:c4:e5:89:
2a:7f:58:ee:9b:93:b0:a6:bb:d4:40:4c:70:d9:60:01:4f:66:
63:39:ed:05:35:6b:5e:60:00:9a:18:2e:74:cf:bf:49:86:63:
7e:97:1a:a9:50:bf:28:0f:23:5a:91:e4:94:a5:bc:b7:ec:1a:
cf:ac:b7:de:70:e9:44:1a:4a:be:8e:af:d4:4a:9c:a0:fd:57:
be:c6:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:44 2025 by rpki-client