Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa
File: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (raw, json)
Hash identifier: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=
Subject key identifier: DD:CA:68:0D:95:6C:BD:6F:9D:E2:98:2D:7E:3C:60:02:90:13:67:B6
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 0194228DE98279BD1DDF903F1D1F5FEAA88C
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62000
IP address blocks: 45.157.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e9:82:79:bd:1d:df:90:3f:1d:1f:5f:ea:a8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddca680d956cbd6f9de2982d7e3c6002901367b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:aa:96:15:c5:1d:e0:87:61:26:77:21:ac:
ed:92:d8:e4:fa:32:d7:30:8a:6f:df:84:60:f9:c7:
45:52:86:a7:17:0e:9a:f7:84:93:3b:d3:05:a8:fe:
64:e1:98:0d:47:af:80:df:bd:32:75:79:ad:fa:19:
5b:ed:19:36:2c:9c:ca:6d:d0:05:9a:72:68:0a:fa:
ad:b3:db:66:87:08:88:ad:99:68:37:dd:bf:ed:6d:
b9:24:5e:7a:4a:7f:c1:ca:94:04:c5:6d:8a:d4:3f:
64:db:7e:6a:ec:df:84:1c:0e:c0:8a:7e:10:63:02:
c4:cf:96:16:ec:01:ab:db:f1:d3:91:5a:87:36:6c:
24:e3:ca:10:56:f9:5e:f8:3b:b6:88:39:c4:6f:96:
b7:2b:e5:5b:18:0d:39:f1:12:c5:eb:d1:6e:e0:aa:
36:44:c7:15:65:01:e3:ee:2d:e1:19:82:66:b6:1c:
84:81:f3:18:8e:21:5b:35:2d:7d:1c:9c:10:0f:da:
42:a9:94:52:43:37:8f:e0:99:f8:eb:1a:18:3b:17:
0b:7c:be:ef:a1:06:38:df:cf:1a:fa:e8:c5:e6:7c:
a4:93:01:86:a2:1c:72:16:b3:e6:33:7b:af:f4:c9:
43:0b:f7:ba:c5:3d:02:97:ce:77:e4:8f:38:c1:5d:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:68:0D:95:6C:BD:6F:9D:E2:98:2D:7E:3C:60:02:90:13:67:B6
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:f6:d1:bd:d8:e6:bc:78:f8:fb:3b:8e:ee:c1:4f:0a:4b:5d:
00:ac:f6:4d:f1:97:d9:28:91:63:d0:e0:06:09:54:8b:0f:e7:
42:eb:95:0d:9e:34:a1:1e:80:34:b7:01:48:89:e2:9e:d7:20:
13:0a:05:54:22:73:87:47:9c:d7:28:dc:44:d4:18:31:a4:c3:
19:3d:db:e3:b2:e6:4e:6d:dd:b5:e2:ef:67:ad:c5:6c:94:fd:
2e:c5:28:10:5f:2a:e4:f5:d8:72:26:2d:0f:59:98:86:9f:d4:
15:39:88:16:75:6c:bd:2e:2f:12:06:d7:0c:d9:75:83:67:2d:
81:3c:63:24:f3:dd:90:0c:69:85:6d:bd:4d:20:22:48:d0:ae:
68:c5:21:e1:40:a0:ef:10:1f:fd:11:04:b5:48:43:c5:25:f5:
e5:22:cf:af:e3:cf:5e:87:f4:9b:d0:17:70:ae:1e:6d:03:2c:
fb:d6:87:18:29:1a:ef:18:d6:2f:32:75:51:2b:62:6e:b8:4f:
ae:e2:33:54:77:a8:7c:7b:7f:d3:25:8b:6b:f6:18:11:84:a1:
dd:5c:bc:10:7d:00:cd:34:10:b0:ec:bc:5f:01:34:a5:54:b6:
37:2f:e5:9e:f7:7f:29:d0:9c:39:9f:65:91:62:ac:e6:1a:0b:
cd:e3:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:23 2025 by rpki-client