Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/q38p2dL7t029dWFRdSznRG0UCDs.roa
File: q38p2dL7t029dWFRdSznRG0UCDs.roa (raw, json)
Hash identifier: SER6fNtd8df23hWn+6WZezoP9krSPn/CNMhUjqtk/v0=
Subject key identifier: AB:7F:29:D9:D2:FB:B7:4D:BD:75:61:51:75:2C:E7:44:6D:14:08:3B
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 01941F8C262210FDB1B31B4C25CC8EE99D43
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/q38p2dL7t029dWFRdSznRG0UCDs.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 45.155.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:26:22:10:fd:b1:b3:1b:4c:25:cc:8e:e9:9d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab7f29d9d2fbb74dbd756151752ce7446d14083b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:03:60:4a:df:be:55:75:27:b3:e5:2a:00:
a8:1d:39:7f:79:cc:18:33:d2:c5:06:bd:be:45:60:
a4:ba:d1:d4:6b:15:56:72:08:77:d6:53:36:69:5f:
eb:fb:2b:2e:41:cc:e8:f4:16:f8:f6:0e:1a:59:24:
f1:ff:7f:09:20:61:b8:8a:c7:da:9b:a5:83:05:e3:
a3:e4:51:0a:d0:b0:1f:10:a7:fc:63:f9:40:61:3f:
e9:a9:d1:f1:dc:74:f7:81:fd:e6:b4:2a:26:63:11:
97:e0:50:29:15:25:46:09:cd:df:ea:81:f5:70:96:
60:03:5a:9c:f1:f9:72:4e:b9:92:0e:50:37:68:bf:
e2:34:ac:41:f2:6d:9c:a1:17:9b:d3:de:a0:4c:66:
53:1d:f1:df:5d:36:5b:5e:91:70:12:38:15:64:fa:
f5:76:05:59:38:9e:f0:24:00:b2:3c:14:49:aa:d8:
c7:2c:d8:38:93:38:a6:7d:90:04:56:d9:0a:c2:13:
b8:a2:e9:d8:11:6e:ae:ca:9a:74:be:d8:3e:5d:59:
0a:0e:b4:aa:55:74:48:cb:a9:90:ce:36:dd:c7:d4:
65:b2:0a:6a:2e:ee:d6:0f:03:5d:4e:2a:62:7e:b4:
c3:1f:91:b7:cf:f6:ba:d4:28:6d:92:84:0b:0d:97:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7F:29:D9:D2:FB:B7:4D:BD:75:61:51:75:2C:E7:44:6D:14:08:3B
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/q38p2dL7t029dWFRdSznRG0UCDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bf:5d:59:32:a8:16:ef:37:4c:1a:6d:65:3c:49:da:fc:b0:
2b:01:e6:f5:c3:3b:fe:ea:32:d9:5c:aa:2f:31:9a:81:42:e1:
c2:97:f1:1d:9b:8d:70:96:1f:6f:2d:99:6f:41:5c:f7:7e:55:
3c:56:09:fe:02:5e:75:20:00:2e:50:01:88:9b:c6:69:ed:74:
ad:50:9d:2c:bd:d3:06:2b:bb:fb:76:df:d5:b9:02:87:d4:bc:
0a:65:25:fb:bc:9f:d0:a0:e5:fc:20:99:f4:6f:95:c1:f7:95:
ac:d8:0b:10:e2:db:ba:c1:ec:d7:8a:4b:e2:56:ed:46:46:19:
a3:fd:9c:d3:66:a9:8c:ee:eb:e8:d6:92:8e:0f:46:71:af:52:
b5:b1:53:98:14:e4:22:18:4e:3b:73:fa:12:2d:38:af:60:44:
58:59:6f:df:b1:15:a8:c0:09:8d:33:5b:e9:64:9e:fc:4f:a4:
c3:d6:29:c5:34:12:b2:48:aa:77:43:55:6a:b0:8f:89:2b:d1:
af:8c:e9:80:87:16:5f:c7:e6:d7:64:8a:75:84:e9:2d:54:55:
53:31:b1:49:28:e5:b6:21:5d:da:18:9e:37:fc:f8:91:d2:81:
ac:07:86:e7:e5:d5:77:e7:82:cc:11:80:09:8e:6f:f0:ca:fb:
d2:d5:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:14 2025 by rpki-client