Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/jCiHPK3wNyuRtDEUwZHSN0KDuO4.roa
File: jCiHPK3wNyuRtDEUwZHSN0KDuO4.roa (raw, json)
Hash identifier: Qj7y4x7BMyHXAR38SpBo01o4/+J3Z9RBCroeA9exmWw=
Subject key identifier: 8C:28:87:3C:AD:F0:37:2B:91:B4:31:14:C1:91:D2:37:42:83:B8:EE
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0B4CE04B0C4DF5ECFC57C6266F0A
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/jCiHPK3wNyuRtDEUwZHSN0KDuO4.roa
Signing time: Thu 02 Jan 2025 09:48:56 +0000
ROA not before: Thu 02 Jan 2025 09:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 45.86.156.0/23 maxlen: 23
45.86.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:0b:4c:e0:4b:0c:4d:f5:ec:fc:57:c6:26:6f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c28873cadf0372b91b43114c191d2374283b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:5c:f4:5a:3e:1e:70:be:23:65:36:18:61:
2d:01:b5:05:84:28:f9:f7:e3:e5:c9:32:45:9c:a0:
75:b7:3f:16:98:13:e9:50:a1:7e:33:7f:2a:1d:c4:
5a:f1:82:8c:e0:03:2d:bb:c6:9c:6c:7f:b6:2b:95:
02:ba:1e:cd:c2:c2:62:79:21:01:e3:96:ff:0f:ca:
8c:3d:85:2d:b1:9d:a3:93:7f:83:26:eb:47:29:e3:
69:6d:46:df:c1:56:d6:cd:9a:cf:5b:84:e1:bc:ab:
7c:56:69:7e:cf:c8:02:dd:c5:dd:d7:92:eb:c5:69:
13:83:18:f6:e6:5f:67:c2:59:4b:2e:b9:7c:ad:c5:
c8:2c:75:cf:78:dd:85:80:72:21:01:63:28:49:ff:
4d:79:14:ca:49:6e:de:57:9d:6e:85:d8:d5:87:9c:
26:9d:ae:5c:46:55:c9:72:c0:c0:58:a3:ae:4d:9c:
56:a2:b3:5a:8f:93:0b:25:1d:7b:a5:06:93:b7:de:
38:6b:c5:1f:a9:03:0a:35:66:05:cf:65:4e:2f:e3:
a8:8f:05:be:1c:c1:1b:e1:9d:9d:a4:df:91:a3:65:
99:56:e2:4d:81:a6:a3:e5:45:0d:0e:14:fa:c1:10:
ff:51:a0:3f:cd:c9:22:d5:7e:a4:4a:ec:1a:76:40:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:28:87:3C:AD:F0:37:2B:91:B4:31:14:C1:91:D2:37:42:83:B8:EE
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/jCiHPK3wNyuRtDEUwZHSN0KDuO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.156.0/23
Signature Algorithm: sha256WithRSAEncryption
16:14:f1:e7:a5:5f:8f:30:f5:2e:14:44:0b:0c:51:6b:55:14:
ef:ab:ef:e3:5f:26:06:b5:92:c7:fc:c5:30:97:c5:f3:69:de:
7d:f6:0e:53:9c:8b:17:6f:67:0f:4b:d2:2f:d6:c2:a8:05:2a:
d4:69:b8:e7:bc:74:5b:b6:e6:1c:46:fc:8b:7f:5e:ee:48:0f:
6d:bc:96:44:2c:fd:19:e5:6f:f8:c8:c5:5e:a9:e4:f6:02:b9:
37:56:23:9d:e3:3a:fb:6c:db:89:0d:b3:09:b9:e8:ee:86:b4:
fe:50:63:6f:aa:67:f7:03:01:6a:f0:c1:fa:72:2e:3a:14:4e:
5e:70:54:ad:6e:4f:c5:30:1d:08:c1:36:0d:f1:d1:b7:2a:d1:
3f:96:57:4b:59:d1:1c:b2:5c:0c:f9:69:f9:4e:0d:52:74:ba:
1e:24:83:39:6d:cd:8b:01:10:2a:b4:78:3f:fa:ed:3d:48:ec:
42:69:20:ba:e4:d4:21:54:96:81:8f:e3:d2:dc:92:3f:b9:fa:
ab:5b:14:b4:e6:2b:ad:b4:4b:ac:90:bf:da:f1:3d:0b:16:c0:
ee:2b:bd:03:20:69:cd:f6:e6:20:05:45:2c:bc:96:7a:08:90:
4d:74:0e:d1:f6:d1:db:24:af:cf:1e:64:60:3a:8b:73:c5:fb:
22:a0:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:02 2025 by rpki-client