Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/jCogikP25zW8XDbjaGJp-8DJciE.roa
File: jCogikP25zW8XDbjaGJp-8DJciE.roa (raw, json)
Hash identifier: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=
Subject key identifier: 8C:2A:20:8A:43:F6:E7:35:BC:5C:36:E3:68:62:69:FB:C0:C9:72:21
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 01944AB96EEDD4302A00153498C4D0057DFB
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/jCogikP25zW8XDbjaGJp-8DJciE.roa
Signing time: Thu 09 Jan 2025 11:00:53 +0000
ROA not before: Thu 09 Jan 2025 11:00:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 45.158.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:b9:6e:ed:d4:30:2a:00:15:34:98:c4:d0:05:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Jan 9 11:00:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c2a208a43f6e735bc5c36e3686269fbc0c97221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:18:bf:aa:44:98:a1:f3:ee:c2:19:c0:0e:
69:98:b3:55:c0:33:a3:1e:75:60:88:c4:79:39:18:
19:d2:e6:60:20:ea:e2:29:85:95:fc:4d:8f:b2:d5:
78:4d:f5:b7:ce:59:a1:f3:98:6e:07:7f:7d:ec:0e:
f2:f2:6b:2b:dd:2f:a1:20:2c:8b:bd:b5:0c:a7:6f:
34:bb:41:a8:84:6d:92:de:9c:87:c5:30:a9:fc:81:
5f:01:31:46:50:ed:43:83:bb:84:18:40:5e:21:72:
a9:37:02:5c:ba:54:e9:fd:42:c2:d3:14:27:31:88:
2f:53:84:d0:32:4d:ee:fc:04:76:d7:fc:29:72:a6:
6a:9e:55:fb:9a:dd:6b:77:01:1d:91:64:0b:2d:71:
09:83:28:bf:c1:39:7c:ec:d8:65:27:10:ef:7a:3c:
80:66:a5:3c:ea:d6:1a:b1:96:5c:d8:27:66:b7:a6:
a3:ff:0d:14:5d:fc:46:8e:3e:45:d8:38:3f:19:b7:
4f:71:b2:3d:5a:e6:b4:25:6d:b7:dc:ad:25:22:19:
0a:00:a8:cd:b0:56:39:cf:2b:c2:61:7d:17:ab:23:
ca:15:70:4d:45:82:88:e4:e6:28:e3:d9:b2:4b:4f:
2e:86:aa:fb:f8:d8:3f:c8:b1:f3:10:74:72:e5:8f:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:20:8A:43:F6:E7:35:BC:5C:36:E3:68:62:69:FB:C0:C9:72:21
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/jCogikP25zW8XDbjaGJp-8DJciE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.125.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:12:5a:d5:f8:b3:b2:0e:29:a0:3c:86:e7:32:9c:63:40:3b:
81:50:55:34:88:d3:79:a0:d8:02:df:58:c6:f5:16:2e:73:2f:
fc:03:0e:e6:dc:bd:1f:64:e8:e4:36:f1:94:1a:ec:2d:1e:98:
28:b3:26:a7:32:06:68:8c:e4:3b:82:2a:27:f6:7a:a8:33:87:
aa:c9:c7:73:48:33:1e:94:a8:22:05:05:a1:50:fa:a9:e2:f5:
c3:82:c2:3e:76:0e:c0:91:dc:11:39:f1:8e:17:da:4d:6f:dd:
a9:d7:db:e9:95:ec:f9:03:10:75:ca:bb:7e:dd:74:a3:11:a2:
bc:1e:ac:46:b4:e4:75:c4:3d:5c:33:15:8d:17:db:2e:ab:2a:
fd:60:07:19:ae:5f:0b:4a:28:fd:27:20:f6:a2:95:e9:5e:ea:
17:9b:41:03:a0:9f:92:ea:2b:c2:b3:c1:63:94:78:91:79:f0:
83:76:ac:6b:4f:7f:bf:82:86:19:c2:bf:8c:7e:67:7a:66:c1:
ea:20:fa:09:c6:0c:3e:e0:42:5b:9a:f7:3d:28:a2:f2:6c:b3:
0d:33:30:28:22:b9:b8:10:8d:5b:e8:37:6e:0c:60:37:37:8e:
5b:0a:6c:14:35:8f:1f:f2:86:a2:33:7d:e6:e7:3f:c0:5f:0d:
77:ab:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:03 2025 by rpki-client