Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ew4w5tVKIjMqx19f45S8RsRYbkU.roa
File: ew4w5tVKIjMqx19f45S8RsRYbkU.roa (raw, json)
Hash identifier: bUEheHG9U/ifUhOxkexA8RmHXXPv6oQ0yoQSZI9DdQI=
Subject key identifier: 7B:0E:30:E6:D5:4A:22:33:2A:C7:5F:5F:E3:94:BC:46:C4:58:6E:45
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC719A68C6C498E0949FDADE042F85
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ew4w5tVKIjMqx19f45S8RsRYbkU.roa
Signing time: Thu 02 Jan 2025 07:48:08 +0000
ROA not before: Thu 02 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 43.225.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:71:9a:68:c6:c4:98:e0:94:9f:da:de:04:2f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b0e30e6d54a22332ac75f5fe394bc46c4586e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:0a:b7:69:f3:a1:65:dc:9b:7f:e0:0f:22:
79:26:9c:4f:fd:82:b7:6e:19:b2:82:8c:8c:ed:ec:
13:8e:8b:f0:1a:0f:ee:e5:aa:d8:74:62:69:e0:7a:
ef:ab:79:8e:12:12:60:65:96:f9:59:a6:c1:1d:9f:
60:a1:c9:5a:cf:f9:53:b1:69:70:15:1a:9a:c1:0f:
8b:01:14:3c:51:d2:d0:2e:35:e1:ac:91:44:fd:cc:
b8:c9:32:d0:70:19:7f:40:d7:10:5b:42:b9:20:c4:
68:ae:b7:a0:18:5a:d8:03:ea:40:3a:e5:b7:7b:fa:
5a:98:08:98:d8:1a:a6:f8:1a:31:a2:d4:e7:9f:d7:
cf:39:97:a3:cd:82:77:c7:90:da:83:7f:1d:03:c4:
94:b9:b6:25:86:7c:a7:e1:ab:62:e8:19:fc:45:1f:
28:a1:b8:3b:fa:d3:0a:87:ce:78:ef:69:fe:fd:c1:
94:8d:dd:94:e1:cc:d8:ba:e3:d2:d2:17:c8:92:8b:
bb:19:a8:0e:5a:f2:4a:55:d6:29:0c:07:0a:9a:17:
4f:31:45:48:02:4b:7d:d3:83:de:43:d5:bd:d2:43:
f8:62:03:a7:b7:94:93:0f:b9:2e:41:46:99:72:96:
89:bb:ea:f0:8f:c3:0d:31:bd:04:3d:b5:5f:7a:a9:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:30:E6:D5:4A:22:33:2A:C7:5F:5F:E3:94:BC:46:C4:58:6E:45
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ew4w5tVKIjMqx19f45S8RsRYbkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.91.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ea:94:df:ff:fe:9b:0b:fd:d8:6f:5a:f3:59:ad:82:81:27:
49:30:eb:f0:fd:77:b6:0f:84:35:3f:46:90:ae:cf:3b:ca:53:
38:39:ee:25:bf:7b:b7:8e:f4:d9:e5:d2:9a:bf:d5:71:20:7a:
2d:37:6b:0b:7e:c1:ff:91:b8:40:95:7a:0b:26:c4:ae:9a:c0:
9d:a9:43:26:b2:b1:38:55:82:f5:81:4f:66:b8:93:4d:5b:86:
5b:22:01:c0:a7:a0:42:08:16:46:35:a0:92:f7:cd:36:45:2b:
3e:6c:4b:ec:56:8f:8d:d4:e0:30:eb:2f:36:8b:af:bb:57:09:
1c:7e:82:20:d2:d3:42:bc:1c:3a:c4:36:8e:cf:ba:06:52:8b:
b8:97:66:c2:47:c7:4f:94:17:14:c6:85:77:6c:a0:39:f6:3b:
0f:e9:1f:c8:a4:23:99:c0:cb:a4:b4:f6:24:97:1f:32:2c:5b:
b4:ad:72:75:cf:ca:1a:ae:b1:33:c1:a0:01:4b:c0:be:e0:aa:
97:40:a7:37:93:f1:02:22:f3:4c:85:1d:4b:39:be:ba:b4:6f:
cf:fd:93:51:00:b5:ee:bb:b8:7c:11:3a:ba:9e:ef:c2:76:6b:
22:7d:ee:f4:9b:49:e0:69:75:15:16:10:b8:da:c5:dd:22:fa:
fe:f6:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:03:15 2025 by rpki-client