Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/1TcCUmdFrJ4xY1w7Cm9Ii2p2OAI.roa
File: 1TcCUmdFrJ4xY1w7Cm9Ii2p2OAI.roa (raw, json)
Hash identifier: qmEuHaUzI0FK9017FiHCoxm3Co2AbQRt6mNOCsB01Zg=
Subject key identifier: D5:37:02:52:67:45:AC:9E:31:63:5C:3B:0A:6F:48:8B:6A:76:38:02
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194266B5719EB732314AA7B1A99877B3422
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/1TcCUmdFrJ4xY1w7Cm9Ii2p2OAI.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142561
IP address blocks: 45.140.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:57:19:eb:73:23:14:aa:7b:1a:99:87:7b:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d53702526745ac9e31635c3b0a6f488b6a763802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:88:1c:89:3c:08:5b:74:ba:bb:5a:8a:ad:
3b:a7:13:4f:c3:09:f6:ad:ac:d9:14:d8:a1:33:1d:
d2:3e:87:27:96:13:28:a0:2c:76:21:f5:fb:a2:67:
c1:ca:1f:f0:6a:56:07:76:b1:61:30:c3:d2:ba:40:
3c:73:4d:91:02:ce:0a:54:09:c3:41:1d:b9:5a:00:
60:31:60:6e:a9:b6:e4:b4:fb:60:3f:24:7a:66:fe:
61:c0:09:ff:6e:b0:ad:4a:37:c3:af:73:00:81:c3:
78:a1:a7:54:5e:14:ad:1a:f6:0d:29:ee:55:a8:fc:
af:76:88:53:31:0e:4c:76:51:ab:67:14:eb:27:a2:
b6:a4:54:74:63:58:d9:ef:c4:ce:77:3f:af:a2:e0:
f5:89:34:32:46:2b:0b:b2:e8:ab:8b:26:4d:11:24:
6e:b8:03:2e:7f:6d:99:7f:6e:5b:c2:a9:fc:14:50:
b9:1f:a9:da:39:d9:87:a6:d2:eb:93:a1:98:69:34:
e7:02:ec:ee:8a:39:c0:54:84:6b:67:2b:f0:41:7b:
76:f0:92:3a:43:80:41:b3:cb:8a:0f:98:b7:ab:6c:
1e:ea:b6:af:00:f8:6b:2e:9a:31:bf:3f:cf:8c:46:
d5:bf:c1:e7:4f:23:2a:67:fa:7b:46:ad:57:00:fe:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:37:02:52:67:45:AC:9E:31:63:5C:3B:0A:6F:48:8B:6A:76:38:02
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/1TcCUmdFrJ4xY1w7Cm9Ii2p2OAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
48:11:1e:84:10:4f:37:66:ac:b3:08:38:5c:59:3e:5a:a5:17:
27:ed:0c:dc:2d:6e:b1:9b:75:72:26:bc:e7:64:5e:73:f1:6e:
c1:58:15:1a:db:0c:d4:ca:4a:bf:ab:13:36:48:ce:13:5e:67:
1c:2a:fc:21:66:bf:e7:3f:9c:b4:a8:15:33:bc:d0:6b:08:86:
26:15:1e:ae:63:a8:53:b2:96:73:35:b3:e4:9d:ac:05:93:44:
53:53:66:8b:2a:f7:e9:0d:4f:e3:74:d1:bf:31:30:2a:09:a0:
d3:9b:95:a1:64:aa:1e:7e:b7:39:32:95:ff:a1:11:f2:e1:66:
b6:aa:c3:7c:e0:db:aa:67:67:27:ed:15:c7:0b:9f:03:a7:ed:
c8:5a:fc:2d:44:3a:87:75:69:a3:eb:d0:ac:a0:0f:67:4a:e7:
ab:61:56:d8:e2:04:2d:1b:c9:d6:c9:78:5d:e1:21:27:7b:0d:
1b:4c:c1:8b:38:bb:0c:55:54:65:96:a0:26:27:52:50:73:d6:
ed:7d:4f:10:b9:de:dc:97:ae:c6:f2:a2:6f:8f:7c:50:a2:88:
36:8c:03:69:bb:15:ff:b2:d3:74:e9:4f:1b:22:db:b4:ee:3b:
00:4e:a7:be:d2:c4:58:db:b3:1a:d0:1f:14:71:5f:72:d3:1e:
05:f5:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:30 2025 by rpki-client