Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/e6N6L0TksO19CdNdYB-tsG35AfY.roa
File: e6N6L0TksO19CdNdYB-tsG35AfY.roa (raw, json)
Hash identifier: 5Eq8sf7loiQQlTHE2kyCxUeEW9AcUU8hd5bLQ2BYbvg=
Subject key identifier: 7B:A3:7A:2F:44:E4:B0:ED:7D:09:D3:5D:60:1F:AD:B0:6D:F9:01:F6
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0194282741C6F00EBD308B6E873B246EE359
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/e6N6L0TksO19CdNdYB-tsG35AfY.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397373
IP address blocks: 45.150.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:41:c6:f0:0e:bd:30:8b:6e:87:3b:24:6e:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba37a2f44e4b0ed7d09d35d601fadb06df901f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:45:e3:24:38:8d:ad:ae:1e:5a:98:e9:9e:
fc:ef:33:85:45:bc:d2:9a:ba:ac:cb:61:22:44:42:
26:5b:3e:81:95:b7:d6:ce:da:a8:b7:a4:46:4c:2a:
52:a4:99:a6:1b:e1:49:a9:7d:bd:8e:7a:72:c7:c0:
35:64:4a:b4:b8:60:12:dd:13:b9:d0:55:09:73:85:
24:34:89:1f:aa:13:f2:04:e6:cf:f4:5b:1c:20:17:
a6:aa:cd:ee:6d:ff:74:dc:5a:d0:b3:14:2b:b6:1b:
11:e0:eb:63:62:86:2f:8b:d4:f4:3c:38:69:43:75:
d5:82:6d:09:6e:b9:78:9f:d3:3e:97:53:1c:6a:5c:
e8:f6:75:8a:18:5f:3d:ac:89:19:2a:1c:d9:a3:8f:
91:ed:20:b6:e9:80:3b:41:0e:6c:b0:0d:e8:0d:d4:
d6:7b:2b:2a:7c:55:07:df:85:e5:ed:a7:1e:f2:a7:
cc:01:25:6d:b1:44:87:30:64:42:35:c7:cb:d0:17:
0c:45:1d:b4:86:44:f7:93:d8:ba:ec:ec:5a:87:b7:
4b:bc:d4:ff:72:26:e3:69:40:67:4e:ee:37:fd:6a:
d6:0b:44:5b:fd:cb:9b:8d:ca:7d:49:f5:d1:10:83:
5b:8a:b0:7e:36:0b:40:fc:ea:18:c6:9a:2a:c3:72:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A3:7A:2F:44:E4:B0:ED:7D:09:D3:5D:60:1F:AD:B0:6D:F9:01:F6
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/e6N6L0TksO19CdNdYB-tsG35AfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ae:ba:5b:66:42:2e:dd:37:d3:56:f0:20:89:1b:cd:6d:12:
33:e6:8e:5a:e5:43:3a:2d:06:a8:f9:c7:d1:53:1d:8f:a1:c5:
f3:98:35:e4:8a:9c:a2:87:21:18:17:5f:9f:d6:84:20:36:33:
b0:3c:fc:2c:60:65:7f:ad:ad:6b:19:d0:83:fd:cf:f7:e2:a8:
66:32:99:a4:dd:0e:6a:f8:a9:95:93:f5:7d:85:72:f9:ea:f3:
0f:ec:bc:41:3e:d7:28:ca:3a:9e:6d:03:be:52:d4:d3:18:16:
b1:14:e8:da:14:88:50:73:c1:9b:e4:9f:53:b3:9e:a3:ce:89:
94:5b:e1:9b:a9:3d:ca:1e:52:ca:b6:f7:dd:e5:cf:98:79:c0:
00:72:3a:94:e0:d5:9c:d3:7f:d2:92:0a:54:85:89:2b:a2:f2:
25:5f:8e:cf:9a:ba:0b:c1:5b:cc:fa:f4:81:14:e2:b0:d0:8f:
e3:4c:5b:01:70:bb:d6:16:20:16:1f:8c:b3:23:ac:c9:4d:86:
7e:6a:6a:d5:18:0a:35:b6:16:6d:57:17:c6:2a:b3:0d:3c:80:
56:10:15:aa:ae:f9:ff:07:68:be:44:5d:fd:43:bf:d0:b5:8a:
53:0c:09:e3:c7:15:64:cb:0e:64:3e:38:f3:95:d5:08:92:d7:
9c:2a:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:24 2025 by rpki-client