Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/50W6HGJgL-uy4z0mrGmusgS_jos.roa
File: 50W6HGJgL-uy4z0mrGmusgS_jos.roa (raw, json)
Hash identifier: bzjBRCihYSKOALoe1w+jGmEDpjzKUtYE7gR8O8pxaZw=
Subject key identifier: E7:45:BA:1C:62:60:2F:EB:B2:E3:3D:26:AC:69:AE:B2:04:BF:8E:8B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F88E484B103B4139521655116A670
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/50W6HGJgL-uy4z0mrGmusgS_jos.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35682
IP address blocks: 45.92.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:88:e4:84:b1:03:b4:13:95:21:65:51:16:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e745ba1c62602febb2e33d26ac69aeb204bf8e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:cd:21:a7:67:43:07:09:e7:cb:4c:71:e8:
42:71:4d:6a:03:6d:07:bf:95:8a:89:cb:bf:47:c9:
78:b4:b9:ff:36:67:90:b6:cd:33:64:c3:2d:42:96:
e6:2e:19:8a:5f:18:dc:eb:a6:db:45:16:b1:85:fa:
b6:7a:94:93:25:9a:21:c6:cd:29:c7:41:b2:10:db:
6f:a7:ad:82:95:36:9f:b7:b4:fd:42:3a:81:22:1f:
51:5b:57:4e:ba:30:d7:5c:bb:fd:5b:c6:23:fb:f7:
35:16:2d:a1:ed:d4:30:bc:62:42:9e:67:9e:f4:a1:
d8:52:70:f7:30:25:77:06:a9:c9:83:8f:6d:b5:11:
74:da:cd:a9:79:15:16:8e:35:c3:79:0b:0a:dd:d7:
48:8b:4e:b4:c6:2a:fb:18:cf:d9:00:07:1d:21:26:
09:12:a0:a3:4c:e2:96:50:a7:4c:14:dc:a3:01:c5:
2a:71:83:86:a3:34:02:6b:5a:4c:b7:ec:ae:3f:ae:
33:e1:07:19:8b:0f:e0:63:d2:66:00:23:69:5e:25:
89:43:51:0e:88:19:9d:88:98:f5:d5:35:e3:19:98:
71:8c:b8:f6:13:e1:bb:6b:45:27:10:ee:53:d0:c2:
d5:0a:5f:1c:0d:b4:22:51:78:55:49:37:5a:c6:73:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:BA:1C:62:60:2F:EB:B2:E3:3D:26:AC:69:AE:B2:04:BF:8E:8B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/50W6HGJgL-uy4z0mrGmusgS_jos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.173.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:42:79:54:98:78:8e:e1:ea:d3:e5:41:6f:ea:6d:0b:2d:d6:
a1:f9:5b:c4:f8:d6:da:f4:57:ea:b9:ea:c3:7a:a6:72:35:54:
5c:24:49:3a:1a:3c:83:62:0f:60:7e:87:22:20:c3:a0:3f:39:
5b:df:a9:9c:49:65:ee:39:4a:3a:ad:4a:ca:da:a7:55:e1:19:
f4:74:8b:66:6c:38:98:17:8a:8d:91:6e:f2:d4:85:62:25:61:
5b:26:50:1f:8f:da:07:c9:1a:c3:7f:09:22:81:70:2c:63:58:
5c:92:0f:2e:35:62:e9:b5:b2:2f:f3:ae:b3:7b:da:42:b0:d8:
3d:ba:8e:df:78:47:dd:d9:4d:0d:87:8a:d0:5b:00:61:60:28:
99:5d:d6:45:e3:80:e3:ff:e3:29:a7:72:f0:51:fc:ee:6e:51:
b6:e4:88:06:d0:ab:d8:a2:cf:83:2e:ac:51:89:15:41:bf:0a:
56:b7:4a:c0:26:95:8c:2b:61:42:5b:fa:de:9b:ae:22:37:49:
12:17:8b:e4:a4:76:33:cd:5c:ba:80:dc:2e:a9:5c:e3:da:5d:
28:fb:f6:83:1d:8d:e8:0d:f6:a0:80:60:a5:0d:5e:a1:f0:80:
30:ba:82:65:b0:7d:03:ad:cd:de:88:07:f4:42:c4:5a:ab:e3:
ba:7f:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:07 2025 by rpki-client