Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CsINt2Tmg5vG3W7fcvV4Cmjz-zw.roa
File: CsINt2Tmg5vG3W7fcvV4Cmjz-zw.roa (raw, json)
Hash identifier: IojT8MP7NuWz706HrzlKIE3H9dx19XcxPkcvwMVaxOM=
Subject key identifier: 0A:C2:0D:B7:64:E6:83:9B:C6:DD:6E:DF:72:F5:78:0A:68:F3:FB:3C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3B08BDBF3A958D323B59BDF4DE93E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CsINt2Tmg5vG3W7fcvV4Cmjz-zw.roa
Signing time: Thu 02 Jan 2025 15:47:55 +0000
ROA not before: Thu 02 Jan 2025 15:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211922
IP address blocks: 45.93.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:b0:8b:db:f3:a9:58:d3:23:b5:9b:df:4d:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac20db764e6839bc6dd6edf72f5780a68f3fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:c1:dd:e6:89:4e:84:c7:c1:c4:ea:70:d1:
ff:d9:ad:5c:fd:13:6f:6d:e3:51:43:12:36:4e:15:
a6:53:c5:77:46:ef:5b:01:7c:76:dd:b0:0a:24:d5:
7a:15:60:a4:ca:20:12:16:3f:ef:ab:0e:7b:dd:6f:
df:64:43:3d:98:5b:f4:f5:52:c0:c6:18:69:c4:00:
9d:4a:0c:bc:6b:5f:d4:ca:97:a0:59:c7:75:78:7c:
9d:74:6d:11:3c:04:82:c9:58:bb:12:6d:24:66:00:
7a:bd:27:b8:a1:7a:99:25:ef:60:f3:65:f5:02:3b:
d5:bb:bd:7e:64:a5:46:68:10:0f:f6:58:ce:cf:1e:
3a:00:3d:b1:11:2a:69:55:f2:0e:93:16:89:36:31:
ea:82:6b:01:f3:e8:d5:67:97:ea:4b:32:6d:3b:a9:
dd:72:81:18:11:f2:6a:dc:71:56:4f:ef:6a:60:76:
de:64:24:85:0e:67:9c:bd:00:ca:ca:f0:56:6f:98:
d2:29:52:48:fe:cd:6a:c7:8c:db:26:53:e4:91:44:
44:5e:fb:48:39:d4:d7:cb:d0:5b:7c:a8:97:08:04:
b1:58:ba:86:d5:57:a2:87:b3:d8:ca:58:db:1b:79:
d3:e7:07:c8:28:19:0a:9d:d8:f7:d8:03:7b:13:28:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:0D:B7:64:E6:83:9B:C6:DD:6E:DF:72:F5:78:0A:68:F3:FB:3C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CsINt2Tmg5vG3W7fcvV4Cmjz-zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.166.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:b1:bf:63:0d:08:a9:45:02:2b:0b:70:8a:ad:d4:a7:5c:3a:
61:e4:9b:07:e0:c4:8e:87:89:ea:d1:7d:82:71:c5:c2:62:4a:
a7:a2:57:64:9b:11:38:04:83:a7:fb:5c:de:04:22:eb:5f:6f:
c0:8f:6d:71:d8:8b:c0:0d:22:82:56:58:ba:4d:9f:ad:79:a3:
d2:06:f2:29:0e:d6:7c:46:d2:00:39:79:f1:87:b8:68:29:d8:
8b:30:b9:a8:b1:06:94:f4:19:8f:52:04:ae:e9:7a:4a:5a:d7:
b2:c4:bc:6d:43:82:f5:98:45:e2:ae:18:ad:38:85:80:ef:86:
73:de:00:c2:b4:05:02:4c:99:2d:ee:ed:fe:bb:d5:2f:3a:a5:
13:a8:8f:e1:b3:13:53:b6:8c:f8:8e:e4:3c:55:9b:7b:74:7f:
06:87:ad:49:ff:af:1a:4b:31:60:0b:25:a0:ca:81:75:7d:cd:
fc:f5:51:ad:60:52:28:d3:fb:4a:86:9c:9d:c8:2d:64:23:2a:
09:65:d6:99:fd:e5:65:9a:e3:4d:4a:d9:75:99:27:21:02:6c:
de:4c:6f:da:9a:60:a1:97:58:2e:39:b2:96:25:da:db:12:d1:
38:76:ff:5b:ba:b6:bd:de:9b:03:e4:ab:b3:72:95:7b:af:61:
52:da:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:58:13 2025 by rpki-client