Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa
File: 20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa (raw, json)
Hash identifier: Jy9A0VoisBWre1TOkMryXEsS8YexNx87KiBRG3mU7GI=
Subject key identifier: DB:42:48:73:15:FE:61:17:E6:51:D6:6C:33:E0:3D:28:50:95:43:D0
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 0194D120F8F76045CD2A4EEE49DEF6D0FC0B
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa
Signing time: Tue 04 Feb 2025 13:23:06 +0000
ROA not before: Tue 04 Feb 2025 13:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44735
IP address blocks: 185.45.76.0/24 maxlen: 24
185.45.78.0/24 maxlen: 24
185.45.79.0/24 maxlen: 24
2a01:49a0:12e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:20:f8:f7:60:45:cd:2a:4e:ee:49:de:f6:d0:fc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Feb 4 13:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db42487315fe6117e651d66c33e03d28509543d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:bc:db:1d:1e:c9:37:74:54:ba:74:43:da:
b4:44:8e:9f:df:3a:f6:01:83:e9:2c:1d:89:80:5c:
3c:12:05:5f:db:9c:6f:35:d7:57:15:66:d6:6b:e4:
64:1c:58:cd:d6:44:5c:5f:0f:99:e8:8d:b9:d9:df:
79:56:7d:07:a7:4d:ba:85:c3:ed:37:6d:74:6d:d3:
8a:10:48:61:a4:c7:8d:81:1f:1c:9c:fa:04:74:96:
fb:9a:09:0a:17:3e:30:b9:d9:12:a6:c5:34:0c:0a:
85:68:3e:59:3a:51:fd:82:c4:d1:ce:87:47:c5:47:
72:9e:60:61:bc:16:21:b4:c6:06:5a:09:d5:75:d1:
e4:cd:6d:ba:23:1e:d2:0e:11:7a:52:37:b1:e7:ea:
b6:69:15:de:08:aa:ba:a8:b7:63:9c:47:b9:98:31:
c6:0a:ff:1a:c8:d7:58:f4:41:ff:bd:7a:29:ea:3b:
05:a2:9d:82:2d:9c:ce:91:5c:d2:ae:29:09:67:70:
d5:26:10:02:03:25:da:3f:d8:b7:5c:d1:9e:7c:5a:
eb:7b:65:94:59:4a:29:8c:5f:08:f3:4a:93:1c:6a:
40:99:52:5c:4a:be:92:99:f6:b6:7b:6f:d7:15:c7:
b6:09:42:1c:b8:7b:c5:86:a1:ab:1b:c7:b5:15:5d:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:48:73:15:FE:61:17:E6:51:D6:6C:33:E0:3D:28:50:95:43:D0
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.76.0/24
185.45.78.0/23
IPv6:
2a01:49a0:12e::/48
Signature Algorithm: sha256WithRSAEncryption
ac:9d:9d:ce:9b:57:b9:bf:2a:75:05:b9:64:3d:9c:21:6c:9c:
d4:1f:0c:89:ab:ec:31:30:f8:c0:82:7c:83:66:49:1c:61:ea:
da:d5:b4:ca:ef:e3:75:b1:69:fe:86:af:d2:d8:83:a9:75:b4:
4b:1c:68:20:65:65:ca:64:34:df:c5:d3:c2:31:70:d4:57:e4:
c7:02:f5:eb:8f:ad:18:71:c5:2e:0c:2f:7c:05:ce:ae:b0:1b:
26:97:88:2d:7d:c6:09:c4:51:2b:99:b0:52:37:59:a1:00:fc:
d9:66:e3:12:fa:c7:42:94:2c:88:d8:7e:3b:b3:cb:16:d0:a7:
27:4c:7e:5c:8d:b3:f2:f5:ba:43:6e:a2:18:57:72:ed:f9:91:
cf:26:ec:18:ac:09:41:e0:36:35:46:4b:e2:fd:f6:df:2a:11:
20:46:6c:9c:0e:5d:1b:38:da:e9:41:76:32:78:4a:8e:31:c4:
0e:c5:7b:9c:66:d1:d3:ba:6f:7a:9b:ae:5d:fc:d2:03:af:52:
94:be:0f:4b:2f:ed:90:17:55:45:01:b8:3c:a1:57:f9:3f:52:
eb:9a:6c:e5:e6:4b:bf:ee:b3:cd:37:c9:8d:12:12:cc:86:8e:
a1:4d:22:c2:38:ed:a6:f1:31:d3:8a:fc:c6:a4:03:04:8b:13:
3c:9d:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:34 2025 by rpki-client