Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3snKEyz2FQnLJ0kh1ZD_M_ksFE0.roa
File: 3snKEyz2FQnLJ0kh1ZD_M_ksFE0.roa (raw, json)
Hash identifier: J9IelrU9P/CVtrQKRZv32f/Tvcpv1WvkNpEzVPYZJ9U=
Subject key identifier: DE:C9:CA:13:2C:F6:15:09:CB:27:49:21:D5:90:FF:33:F9:2C:14:4D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC80919B337C267B41F415CCB844FD
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3snKEyz2FQnLJ0kh1ZD_M_ksFE0.roa
Signing time: Thu 02 Jan 2025 07:48:12 +0000
ROA not before: Thu 02 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201691
IP address blocks: 45.146.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:80:91:9b:33:7c:26:7b:41:f4:15:cc:b8:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dec9ca132cf61509cb274921d590ff33f92c144d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:66:88:b7:8a:44:1f:0e:8b:71:69:f2:b3:
f3:2e:f3:c3:4b:04:54:d4:c5:38:7f:1c:f9:2e:62:
71:de:01:bb:5f:2e:d9:5e:6e:94:d2:49:c4:1f:e3:
26:2a:c8:cd:1a:c4:5a:70:04:eb:1d:f5:18:58:a8:
3b:99:9d:81:79:5d:07:9f:f2:28:94:01:e5:b9:ad:
0f:39:9f:69:df:90:fc:2e:3e:87:3f:5b:f2:aa:62:
2a:1d:b1:cd:7c:ae:f0:65:b9:7d:37:c7:8e:10:9e:
0b:13:cb:21:ac:28:e0:93:e2:3e:f0:29:9d:58:35:
6a:72:81:a9:f7:29:db:6c:a0:75:88:8c:ad:0b:c2:
ca:4b:2d:b4:be:05:7d:c9:19:31:e4:60:1e:b0:da:
fd:05:42:e1:86:70:98:65:68:e4:9b:fe:12:c4:f6:
07:b2:15:e0:26:8e:e7:58:fa:a6:32:75:d3:42:d5:
5d:7c:c2:bb:91:94:50:13:54:6a:1a:ac:a1:9c:e1:
37:d8:86:1e:b5:dd:21:7a:08:bf:82:01:91:8f:26:
b1:34:4c:b4:ec:f8:fa:4e:e0:af:48:25:87:93:cc:
3f:cc:55:6b:ab:a0:e8:21:17:ad:57:38:37:1f:e1:
51:5d:5d:e0:a8:e4:0c:3d:ab:89:52:00:75:c3:1d:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:CA:13:2C:F6:15:09:CB:27:49:21:D5:90:FF:33:F9:2C:14:4D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3snKEyz2FQnLJ0kh1ZD_M_ksFE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a4:c5:ba:dc:8c:02:ca:37:c4:8b:8b:e7:9e:e5:a1:d2:40:
06:a8:25:87:79:d3:67:3c:a1:48:10:26:f4:94:88:c4:72:e4:
36:3b:ea:8e:2a:0f:b4:26:44:bc:fc:f4:64:ec:1f:4c:5a:1f:
2f:71:c2:da:73:2d:61:a1:c9:bd:36:59:ac:f4:c8:f6:62:8e:
4c:4c:fb:49:c2:10:d4:83:f4:be:5a:1a:ba:48:36:8c:3a:49:
2a:26:d8:79:f6:3e:f7:6e:5d:8e:90:a0:e3:45:0c:12:fc:60:
c3:bb:32:17:98:d2:ea:c0:c1:93:66:05:b5:69:26:bc:e4:91:
0c:e9:2e:57:89:07:7b:6d:db:77:62:0c:db:85:5f:0f:f9:5c:
54:03:40:32:30:e1:b0:fc:00:3a:e8:ea:26:a5:b0:67:a2:89:
42:9f:a6:91:00:fe:42:69:17:f7:d3:87:93:4b:30:8f:56:76:
a8:5f:c9:98:81:a2:dc:6e:d9:d0:5c:ad:0b:21:ac:70:be:03:
8d:c8:25:52:af:eb:d8:7e:b7:4d:08:07:99:25:38:e7:1d:5a:
c4:ab:58:fe:ef:ac:b9:00:94:6f:e3:bb:4e:ed:23:8c:64:c9:
68:0f:62:92:41:77:4c:70:71:b4:23:5a:8d:f4:0d:16:54:9a:
44:74:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:20:54 2025 by rpki-client