Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa
File: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (raw, json)
Hash identifier: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=
Subject key identifier: A6:A3:35:BB:C4:A4:4B:8C:DC:15:0B:EB:06:14:16:A5:73:CC:60:20
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01950F60F76FA35334215EC274C3A4536EA2
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa
Signing time: Sun 16 Feb 2025 15:29:27 +0000
ROA not before: Sun 16 Feb 2025 15:29:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 45.142.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:60:f7:6f:a3:53:34:21:5e:c2:74:c3:a4:53:6e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Feb 16 15:29:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a335bbc4a44b8cdc150beb061416a573cc6020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:a0:ee:94:d6:57:50:80:bc:c4:1d:91:29:
c1:ab:cb:f6:1a:67:36:77:12:20:4d:da:8b:e3:db:
97:11:e0:7e:14:e3:3d:c7:35:ca:e5:b2:b3:13:17:
b9:e5:35:2e:4d:6d:81:a3:37:c9:30:c9:41:6d:5a:
58:0d:23:24:51:29:8c:a9:a1:cc:9d:5b:cd:95:b0:
4d:18:5b:a4:df:ca:74:99:95:38:53:51:3a:c0:fe:
40:1d:65:09:4c:62:f9:ae:c8:dd:ef:41:28:6d:01:
7d:00:a5:5d:96:95:42:91:34:50:67:ae:9f:ac:e0:
21:de:a0:25:d7:8f:3e:f6:36:3e:a0:f7:3a:62:c3:
24:64:90:56:23:71:73:85:03:d5:22:f3:e3:48:fc:
1f:66:1c:21:3c:8f:b2:25:55:f2:0e:59:73:bd:6e:
b6:b6:76:d7:6f:68:25:96:31:ba:6a:99:31:7a:df:
d2:1d:98:e7:4b:34:ea:7d:89:63:6c:9e:f5:19:92:
e8:81:25:37:ba:06:91:f0:ec:53:ba:9e:a5:4e:c1:
4a:ae:d1:a9:7a:12:9f:88:b6:a0:6f:71:3a:ed:ba:
0c:b8:5e:4b:53:fb:c5:76:31:ae:c9:ac:1a:ff:77:
7c:38:1d:dc:62:cf:93:8e:19:51:ce:ea:31:e3:15:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:35:BB:C4:A4:4B:8C:DC:15:0B:EB:06:14:16:A5:73:CC:60:20
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.52.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:50:56:76:af:de:9d:b7:a0:b4:42:2c:0d:01:c6:db:64:06:
0a:cf:d8:09:93:93:6a:2a:4c:02:63:71:ba:a3:d2:93:83:90:
9d:29:55:5e:67:73:c1:47:3c:dd:e6:dc:be:80:73:41:d8:46:
de:e2:61:66:72:c1:4d:ad:b0:e7:17:89:f5:25:f1:85:78:a3:
a8:47:21:43:6a:5d:8e:28:2b:cb:f8:ed:84:52:1d:e3:d4:5e:
f8:a2:32:5c:fd:cf:fc:1f:d8:ee:c4:4c:80:71:27:a2:66:2d:
89:02:ab:3b:73:cb:1e:62:40:39:ac:8f:ff:14:c1:36:ea:ad:
fa:76:03:c2:47:55:11:57:45:e5:40:6f:37:6e:6e:4c:60:38:
2b:51:8c:25:18:67:ef:a7:e9:9b:ad:f3:07:8a:7c:89:dc:b7:
70:95:2e:59:96:7a:6f:f7:fc:58:22:24:72:99:4b:ec:fd:44:
84:18:05:df:58:ac:30:e6:cd:3d:6e:e4:0d:c2:3d:05:c9:d1:
f2:cb:46:02:1f:b8:76:03:ed:fa:e1:eb:18:4e:3f:e4:c7:b7:
45:4e:ca:a2:07:5e:ba:31:6c:74:8a:98:fb:57:08:3a:4e:19:
33:38:8a:e4:37:4a:c4:e4:5c:f3:8f:5b:e1:a7:64:a7:08:a3:
5f:cc:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:23 2025 by rpki-client