Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rjmwrzCXEu-XcGuAIXSGal63JtI.roa
File: rjmwrzCXEu-XcGuAIXSGal63JtI.roa (raw, json)
Hash identifier: S/yADj+wUms3LGPnEcE9tuD1RjvuWJaXGWgabDMNL1M=
Subject key identifier: AE:39:B0:AF:30:97:12:EF:97:70:6B:80:21:74:86:6A:5E:B7:26:D2
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FDB8D12572268A079966C363CF85
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rjmwrzCXEu-XcGuAIXSGal63JtI.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 45.156.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fd:b8:d1:25:72:26:8a:07:99:66:c3:63:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae39b0af309712ef97706b802174866a5eb726d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:50:8c:cd:61:de:ba:4d:0a:44:01:98:48:
d8:46:1f:e0:51:ff:c1:70:fd:3a:cf:52:6c:33:aa:
2c:4d:a4:f5:60:2d:44:2f:df:7c:fb:9e:8d:c6:90:
04:59:b8:eb:19:13:76:58:a4:13:2a:9b:76:52:7e:
f7:fe:eb:7d:15:cf:7a:f0:87:8a:4b:ed:a3:3d:db:
a1:3f:5f:53:99:d3:2a:62:f2:28:e1:a8:6b:04:5f:
a3:c4:62:be:ee:87:ad:9b:79:06:a1:71:55:ce:55:
c2:e3:01:56:bf:e2:50:22:bd:e8:72:4b:88:7e:ba:
54:4e:3b:37:db:a7:b2:b5:4a:10:59:5c:4a:6e:0c:
37:38:90:12:37:5c:a8:13:55:0c:85:91:40:c4:c5:
46:8a:89:47:b8:c6:a7:ef:c6:bf:14:2d:15:d4:98:
26:0a:09:d8:9c:a5:48:20:a9:d4:b4:b9:df:94:64:
d7:c9:3c:63:64:a0:86:d2:5e:c2:00:7a:42:bc:0c:
73:62:8c:e9:04:e0:9c:7c:d2:bc:c0:77:a2:ed:d2:
03:15:83:ec:cb:6d:73:ed:34:c1:ee:3e:fc:75:30:
2d:66:77:2c:19:88:76:30:a2:92:56:77:a7:f9:b7:
87:c8:6b:31:5c:e1:d4:ec:8f:0b:d0:e1:ae:de:e1:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:B0:AF:30:97:12:EF:97:70:6B:80:21:74:86:6A:5E:B7:26:D2
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rjmwrzCXEu-XcGuAIXSGal63JtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.58.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:da:65:28:76:b7:3a:54:ab:55:df:ae:a5:03:ef:7d:51:2d:
1a:3b:22:ba:a9:bf:16:66:58:6c:bb:d0:10:14:25:3a:ff:1d:
d5:fd:e5:cf:b7:e1:0c:2d:18:82:d9:20:a9:f0:3b:ba:f7:fa:
ce:4a:dc:ab:31:46:1a:85:68:69:31:24:db:76:b2:da:0d:eb:
82:ae:c4:55:3d:0c:a8:2b:b0:18:bf:3e:58:9c:e2:4f:8d:a2:
f3:b6:60:89:92:cd:4d:e1:bf:b5:0d:02:6a:34:26:5b:af:25:
f6:66:ad:c3:3c:a0:fe:06:9c:11:e3:d2:82:2a:07:14:ab:ba:
b0:f6:b9:c4:10:ee:a8:79:e9:63:7a:ea:f8:67:a0:89:ed:c5:
49:d3:d8:98:ce:66:89:32:89:7e:42:bf:f5:b4:e7:88:ee:c1:
20:94:23:0e:ff:d1:ab:aa:a6:ea:a5:4b:dc:e7:60:c3:d3:52:
52:45:46:ae:5e:67:e6:bf:5f:aa:ba:b3:3f:bb:74:e9:84:7d:
c2:5e:e3:30:d8:f8:3a:91:2b:df:31:26:ff:49:c3:94:5f:fd:
7b:c6:e3:7c:d5:0c:be:73:2e:72:3b:c0:b2:a1:c1:09:6a:28:
b3:82:52:0d:b4:ec:aa:24:98:6f:ac:aa:af:62:2c:d6:dd:37:
b7:4c:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:09:07 2025 by rpki-client