Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/AqdNwPQNkfVczluLWSpSFMC_l4c.roa
File: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (raw, json)
Hash identifier: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=
Subject key identifier: 02:A7:4D:C0:F4:0D:91:F5:5C:CE:5B:8B:59:2A:52:14:C0:BF:97:87
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019425FDD06A2BB841B6EF78EFE27129B0BC
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/AqdNwPQNkfVczluLWSpSFMC_l4c.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 45.158.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d0:6a:2b:b8:41:b6:ef:78:ef:e2:71:29:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a74dc0f40d91f55cce5b8b592a5214c0bf9787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:f9:e6:e6:4b:4c:c7:d9:90:a9:e3:f2:38:
3c:de:59:d5:0d:51:25:69:2f:16:ab:29:e3:ad:e0:
1f:ff:b3:1a:c1:69:19:a4:38:82:df:cf:50:6c:dd:
d1:bc:f5:aa:b4:6a:0e:f4:1d:5a:96:a8:8a:b2:0a:
96:92:21:2b:11:92:d2:96:1a:b0:6c:72:9a:91:be:
49:2c:5d:a0:fc:95:7f:6b:8b:9b:0d:f5:98:b9:3d:
a7:40:bc:fc:b9:6e:c7:52:3a:54:56:18:7d:64:fb:
a0:dc:33:ca:6b:2d:9f:8f:e9:3b:34:cf:08:a8:4f:
24:6b:29:1e:e0:fb:c4:d6:a3:42:7b:32:ee:a3:03:
d0:76:9e:a0:ac:88:a8:f0:ca:95:91:c8:44:a7:74:
3e:99:39:ba:ad:fe:82:3c:e6:6b:f6:39:e7:fc:a4:
31:78:e8:1d:ae:ff:27:5a:5d:02:f7:25:34:86:53:
9b:e6:df:f5:64:64:52:27:8e:fc:e2:e2:49:4c:35:
43:09:23:1b:90:59:ca:4f:0d:d9:f0:2e:77:1e:be:
2b:06:30:29:ee:01:f9:26:2c:dc:f5:6d:25:4e:31:
b6:87:24:79:e3:54:87:91:c0:c3:46:0f:6b:d3:7b:
10:84:91:e4:1b:44:08:85:60:9b:fd:48:fc:cc:58:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A7:4D:C0:F4:0D:91:F5:5C:CE:5B:8B:59:2A:52:14:C0:BF:97:87
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/AqdNwPQNkfVczluLWSpSFMC_l4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.164.0/23
Signature Algorithm: sha256WithRSAEncryption
74:87:00:86:36:28:72:1e:5d:54:1f:ae:70:5d:b6:84:8a:ed:
ce:ef:e0:b1:68:bf:0a:be:26:ba:6f:6c:fb:5c:29:e2:44:4a:
7b:f9:63:46:34:d0:f4:2e:d8:d8:5d:7b:19:60:83:26:72:c6:
37:41:d9:6d:50:de:f8:13:e0:5e:4e:fe:f6:e8:c6:59:ae:20:
12:ce:2a:c1:2d:9d:35:f1:e3:40:71:f5:e5:7c:b5:7f:1a:21:
61:90:ab:a7:1b:02:c7:57:45:c8:3c:09:18:28:94:96:57:b1:
5d:92:b0:3e:cb:4d:54:64:12:a9:3e:8c:12:ad:3c:bf:c7:20:
2e:28:e5:9c:24:bf:e4:7b:86:b9:f5:4d:67:3e:c2:28:ee:b9:
e8:fb:58:bd:f5:3a:01:b2:8e:7e:26:f8:52:8c:8a:c4:7a:df:
f2:5e:c7:63:8c:32:eb:e9:59:fd:7e:a9:22:cf:bb:78:75:57:
8a:49:14:08:ea:f0:05:38:8d:66:1e:70:bf:b4:0b:18:cc:99:
50:a6:fc:50:a5:de:4e:4d:bc:ab:a6:22:68:a3:78:98:43:b0:
0b:9e:aa:14:7f:62:0e:e3:c3:4e:b0:8e:2d:1d:98:92:e6:b1:
e6:51:04:cd:10:e6:1f:55:22:9e:b2:43:af:3a:f9:bc:f5:a0:
c1:2b:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:48:55 2025 by rpki-client