Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/RfhpUZchJkPP_5lxJHpNkmuGgNY.roa
File: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (raw, json)
Hash identifier: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=
Subject key identifier: 45:F8:69:51:97:21:26:43:CF:FF:99:71:24:7A:4D:92:6B:86:80:D6
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 0194206843E0B363E06B9E5EC97991C0E55F
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/RfhpUZchJkPP_5lxJHpNkmuGgNY.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 213.156.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:43:e0:b3:63:e0:6b:9e:5e:c9:79:91:c0:e5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45f8695197212643cfff9971247a4d926b8680d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:11:f6:af:3b:a4:ce:65:5a:a2:95:75:4b:
7f:75:70:4d:58:a6:27:96:b9:e7:c6:f6:06:ed:05:
39:7c:b7:3a:55:fc:0a:cd:a0:11:34:a0:4c:4a:44:
bb:97:fe:8c:cf:71:e8:56:8b:80:8f:96:58:c1:d5:
92:c9:bd:63:4a:25:55:0e:cb:b3:f1:a7:94:b4:7c:
52:52:35:21:9f:c8:a0:5a:0d:4c:93:01:f1:38:b9:
b8:81:e2:bd:b0:10:cf:79:86:ce:20:89:e2:2d:0f:
bc:ed:50:09:52:07:67:f0:f3:cf:21:4f:de:ba:fc:
44:02:60:2f:f8:b8:52:7f:d2:67:73:a9:f3:c7:e7:
0c:e4:76:62:55:57:09:19:e2:2f:42:d1:b8:08:ca:
06:c3:1a:73:cd:35:52:9d:99:7a:f6:9a:59:79:5f:
c9:1a:13:6b:30:dd:de:ba:8d:05:9e:2a:e5:d8:a0:
e5:0c:6e:26:48:4f:76:dd:30:91:2d:04:e7:58:91:
e5:4d:83:c7:da:e8:0e:cc:6f:ad:c2:38:54:4c:61:
d2:d1:60:d3:bc:7a:0b:64:a3:60:a3:27:21:e5:85:
90:89:b3:ab:3d:3c:4e:e7:b0:4e:b0:1c:7a:2c:a4:
19:d7:3d:51:ae:ec:b5:2f:2f:1d:3a:11:c8:ae:c4:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:69:51:97:21:26:43:CF:FF:99:71:24:7A:4D:92:6B:86:80:D6
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/RfhpUZchJkPP_5lxJHpNkmuGgNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.16.0/20
Signature Algorithm: sha256WithRSAEncryption
41:f0:16:f1:84:f1:dd:04:6a:53:2a:8c:9f:64:70:f4:3a:a5:
f8:a4:6f:5f:cd:56:dd:1b:9c:f7:6f:3a:9e:af:6a:1e:5e:9f:
b0:94:15:71:7d:2b:75:d0:c4:50:50:f4:06:9c:de:d0:3d:58:
25:b8:c1:0b:a4:90:15:42:dc:3b:12:e9:82:50:3b:40:42:49:
21:a5:7c:c9:6f:6d:0c:cc:7f:6c:3c:1a:3f:19:b5:38:2a:68:
42:36:16:27:94:fd:4c:89:11:be:e1:e8:7f:6c:e4:d1:92:aa:
e4:4e:0c:c5:01:88:f9:03:6c:35:37:21:08:c0:12:85:0d:31:
cb:32:98:aa:fd:e1:81:92:91:41:4e:8b:cf:c6:46:fb:45:1a:
dc:05:60:06:07:5a:ff:eb:30:6c:7f:a7:c8:01:64:9f:e3:09:
73:50:28:e3:5b:84:dd:7c:e1:5c:02:c8:48:40:c1:9c:f0:3f:
32:c6:1c:0e:d2:dc:08:c5:51:49:bc:36:e1:68:b1:5f:69:12:
6b:64:7b:ec:8a:ba:92:42:cb:53:ea:4c:9e:6f:4a:4e:a6:a5:
cd:a9:62:85:ac:1d:46:98:6b:a2:9f:59:a2:1b:c4:87:06:b2:
63:22:6c:c3:2a:04:35:1a:2f:b0:18:7c:5e:e8:2b:b3:38:67:
a4:96:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:18 2025 by rpki-client