Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IpU7zQUmUDXjzkrlqjzTjM2B41c.roa
File: IpU7zQUmUDXjzkrlqjzTjM2B41c.roa (raw, json)
Hash identifier: MpmuNBip1nVipuzKBunr9M8Qzu3PZBMW2ljrJEDOaHI=
Subject key identifier: 22:95:3B:CD:05:26:50:35:E3:CE:4A:E5:AA:3C:D3:8C:CD:81:E3:57
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2375D292610208C63F7772D4BAE95
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IpU7zQUmUDXjzkrlqjzTjM2B41c.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 45.8.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:5d:29:26:10:20:8c:63:f7:77:2d:4b:ae:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22953bcd05265035e3ce4ae5aa3cd38ccd81e357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:8d:0e:5e:a4:8f:8f:aa:cd:a7:36:4f:65:
2e:04:81:ea:96:a8:f3:b7:87:61:09:04:c8:b6:67:
fe:d6:76:f9:43:1f:24:2a:d1:96:1f:3a:7d:40:04:
41:87:47:3d:41:5b:a9:bb:38:45:48:76:77:42:42:
f5:ac:7c:0a:50:c5:70:06:04:31:a5:d8:77:dd:93:
d4:b6:05:23:f2:ee:2c:f4:42:89:f0:da:2f:b1:7d:
76:d1:c1:be:59:b6:88:82:d4:b8:ee:0b:cb:9b:7a:
66:6f:13:35:ca:57:e7:58:b1:73:53:af:e2:b0:ab:
2e:2c:88:71:8a:4a:77:bf:f7:7c:03:2f:4f:29:62:
03:6a:5b:40:44:b0:35:22:c7:9b:26:12:aa:31:02:
47:e0:65:ae:6e:2f:99:e4:b1:be:82:54:04:32:5b:
e8:fa:cf:9a:a8:ed:7c:2d:b0:18:e2:12:92:98:bc:
6f:b2:31:79:74:f6:98:77:8f:83:b6:11:76:e1:79:
1d:fb:17:3d:c6:99:de:13:be:f9:b9:c9:82:4a:8a:
02:69:38:22:ab:c5:f4:eb:94:bc:da:6b:8b:0f:b6:
c4:d5:e0:26:d1:5c:17:d4:04:8d:29:0b:b8:39:a2:
16:fa:cd:37:6f:90:e8:a8:d6:39:0d:56:41:a6:d1:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:95:3B:CD:05:26:50:35:E3:CE:4A:E5:AA:3C:D3:8C:CD:81:E3:57
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IpU7zQUmUDXjzkrlqjzTjM2B41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
44:eb:eb:21:c4:6e:eb:d9:58:f9:60:76:5b:e2:8a:d6:e6:fd:
c3:8a:e4:e7:e0:3a:78:7e:7d:bd:87:17:0a:3f:6c:d2:be:d7:
86:6a:43:86:f8:36:09:6f:8f:a8:5d:fe:52:02:1e:0d:a3:3f:
35:7e:66:cc:3e:2c:9d:8f:fb:4d:11:e1:79:b7:f3:fb:30:92:
14:e1:c5:ba:92:7b:23:45:12:e9:25:ab:fc:72:f4:df:f1:d9:
dd:7b:a3:f7:ea:ce:c3:68:83:91:c5:c8:f8:00:1a:99:02:f4:
78:1c:f7:e0:1b:ef:f6:73:3b:e9:51:a8:33:91:c9:04:b8:fe:
7e:d6:f1:e2:d4:35:f4:31:93:a9:fc:35:5e:e0:ed:d5:b9:9f:
e5:6b:54:83:3b:7a:29:23:a2:5d:9e:99:a0:21:f0:15:76:8d:
f6:e0:30:59:83:30:66:be:52:9d:07:a6:e1:8f:5c:aa:21:18:
55:86:18:e7:65:6c:99:bf:15:68:c2:63:67:0a:b5:73:16:3f:
0d:80:60:0f:57:3b:4e:5a:e5:09:7d:f9:12:db:97:36:12:4f:
01:ed:39:3a:97:25:0c:ea:5b:20:91:d5:2b:3b:1c:41:b5:f5:
26:21:99:4f:ae:6f:fb:e0:8a:5e:79:10:a6:5e:d3:55:d7:e8:
df:0d:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:06 2025 by rpki-client