Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/rH6FFMbXiIxGI6RIrz3PGqzimRA.roa
File: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (raw, json)
Hash identifier: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=
Subject key identifier: AC:7E:85:14:C6:D7:88:8C:46:23:A4:48:AF:3D:CF:1A:AC:E2:99:10
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 01941F8C26B8C2B62733C89E11DD37635C27
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/rH6FFMbXiIxGI6RIrz3PGqzimRA.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 45.155.125.0/24 maxlen: 24
194.36.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:26:b8:c2:b6:27:33:c8:9e:11:dd:37:63:5c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac7e8514c6d7888c4623a448af3dcf1aace29910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:a7:7c:a8:b7:8a:b8:a5:99:b2:5c:ea:ce:
83:3c:e2:fe:df:71:fc:ec:c0:73:d3:bf:df:d8:0b:
db:a8:86:11:91:aa:fd:64:7d:5b:f5:ef:d5:d7:57:
79:c2:bc:c4:87:24:24:24:f5:d7:a8:ec:5d:6a:3d:
43:f6:9f:e6:dd:db:04:41:b6:2d:e0:8a:ad:e1:78:
f0:c9:d6:83:a0:c2:d5:16:40:3c:0a:c1:f0:61:b2:
95:15:89:9f:34:fd:42:98:28:d9:85:64:68:a2:d9:
e5:c0:2c:e2:c9:a1:fe:5b:bd:84:d9:90:42:06:e2:
11:cb:d4:f9:e0:f5:eb:66:b8:c0:02:e1:30:b9:7a:
55:2c:36:7e:7d:0f:1a:fd:8b:69:95:49:e0:e6:2c:
4e:33:69:c5:b4:49:9f:6a:6e:0c:27:22:09:d4:17:
6e:3b:02:11:d5:d9:df:ec:64:6e:59:57:d5:d5:18:
ee:10:e0:45:d6:54:a4:7a:fb:e4:88:36:90:9a:57:
60:a3:3b:78:9f:67:8d:f0:de:6a:50:41:34:31:9d:
aa:4f:aa:63:b6:d6:f3:f8:99:3d:cb:c6:8b:a0:ce:
1f:5d:7b:4b:b2:9f:f9:9a:de:b1:73:da:3b:0c:e7:
be:ee:94:e6:90:9f:18:1c:b5:61:20:cf:ac:81:97:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:85:14:C6:D7:88:8C:46:23:A4:48:AF:3D:CF:1A:AC:E2:99:10
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/rH6FFMbXiIxGI6RIrz3PGqzimRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
15:db:ce:93:72:1a:ca:d9:eb:fc:85:64:be:0e:70:fe:3b:4e:
64:eb:79:77:92:b0:f1:d3:f6:52:79:dd:4e:ef:4a:0e:4a:13:
d0:f2:ca:c1:cd:d8:c6:4e:d5:7e:7f:f5:05:e4:35:61:10:e0:
c9:a5:d4:b5:4c:0f:21:02:c1:87:d3:bd:06:54:44:94:e2:86:
f0:24:a6:db:93:94:b0:2d:e7:be:d9:75:1a:a0:3a:0b:80:d3:
c4:22:ba:cd:b9:56:e9:d5:ea:66:05:b9:1d:b6:46:96:aa:94:
e7:94:2a:cc:44:29:cb:04:eb:e9:7e:02:8f:c7:ee:8a:87:17:
03:a5:89:f2:10:aa:af:c3:99:f9:8a:42:ce:53:08:3a:c9:96:
f3:f7:fb:14:ba:83:8e:93:80:6f:52:00:60:3a:c2:51:07:15:
ec:25:21:39:d0:49:30:31:40:b5:68:86:f2:ff:61:2a:bd:98:
95:a3:8c:c1:59:93:82:16:74:48:24:03:1f:1f:3f:0f:34:91:
08:73:60:b4:92:9f:5a:25:f5:4e:87:e1:21:0b:ad:6e:62:fc:
43:5b:79:11:9e:b5:93:e4:14:b7:2c:b5:f0:e2:d7:a3:6b:44:
5a:99:58:93:80:89:4a:e9:3d:88:33:eb:ee:44:60:0b:b1:16:
76:bf:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:02:35 2025 by rpki-client