Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/g4Nm3zw7BZCf660L7J2wB5s2-SA.roa
File: g4Nm3zw7BZCf660L7J2wB5s2-SA.roa (raw, json)
Hash identifier: +YfoAh+I7x70vYXeLBN3w6ZRtj/Ii78yrIjM344/IWs=
Subject key identifier: 83:83:66:DF:3C:3B:05:90:9F:EB:AD:0B:EC:9D:B0:07:9B:36:F9:20
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 019427B64046ADE2486B0305DA73C71B257E
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/g4Nm3zw7BZCf660L7J2wB5s2-SA.roa
Signing time: Thu 02 Jan 2025 15:50:42 +0000
ROA not before: Thu 02 Jan 2025 15:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34309
IP address blocks: 45.82.172.0/24 maxlen: 24
45.82.173.0/24 maxlen: 24
45.82.174.0/24 maxlen: 24
45.82.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:40:46:ad:e2:48:6b:03:05:da:73:c7:1b:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jan 2 15:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=838366df3c3b05909febad0bec9db0079b36f920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:c1:c0:e7:93:fb:32:20:bd:42:f2:82:b7:
83:b0:00:14:a0:9c:c8:c9:8d:d4:16:47:e9:99:b7:
62:20:1f:b9:55:07:ab:fb:6b:4c:35:dc:15:17:53:
bf:c9:a7:ec:fb:93:ad:26:86:c2:cd:cc:fe:75:d8:
39:23:ba:48:29:fc:0f:f2:3c:15:09:46:7f:60:97:
b2:cf:ea:9b:25:3f:fb:69:6a:e4:79:79:85:66:ea:
14:2f:a6:1f:5d:27:1c:fa:fb:d4:48:64:81:7d:17:
07:f3:0b:4c:de:3d:2d:8e:25:ef:f9:53:43:a4:89:
02:b5:fa:c3:4d:3a:de:59:86:b7:ed:eb:a6:dc:48:
2a:5f:f8:fb:90:99:2b:6e:25:5d:0c:e7:3f:66:92:
2e:93:7b:e9:82:27:a8:95:9b:20:85:16:fc:f1:6c:
c8:65:4c:af:9c:83:d3:5d:0d:97:14:63:a3:43:f9:
f4:14:26:c1:4e:ff:e0:51:2a:6c:7e:21:a2:a6:11:
af:c2:a9:cf:09:7d:ef:f0:5c:4b:b5:1f:7f:23:a8:
15:a3:12:1b:70:9d:1d:f7:6a:aa:7d:51:98:cc:e3:
a2:26:ea:dd:e8:36:f0:42:86:ac:46:b0:f8:f7:57:
56:9c:67:57:bc:10:c6:5c:9a:b7:bd:39:25:1e:9f:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:66:DF:3C:3B:05:90:9F:EB:AD:0B:EC:9D:B0:07:9B:36:F9:20
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/g4Nm3zw7BZCf660L7J2wB5s2-SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.172.0/22
Signature Algorithm: sha256WithRSAEncryption
65:37:13:e0:16:e0:1c:04:1e:85:be:f6:5c:c4:f7:12:ac:65:
28:c7:7a:3f:86:0a:81:a1:a2:e2:da:10:8f:08:ca:9a:18:62:
19:ca:3f:8b:6e:fa:62:1a:47:28:21:d9:3b:dd:b2:70:7e:d3:
9d:71:33:bd:22:30:57:9d:43:04:33:55:91:5c:a0:66:5d:a5:
0d:93:61:a0:46:cf:30:99:1d:b0:c2:54:5c:4e:ee:7f:9e:93:
89:0e:84:82:bb:64:2b:fd:c0:83:87:42:52:23:36:ff:06:fd:
43:17:95:ae:51:09:9c:18:e0:ee:91:9e:01:b4:3e:ab:df:c5:
39:c8:32:43:18:71:e8:b6:ac:a0:1c:91:13:49:a9:6d:c2:1b:
b9:7e:f2:ca:63:ef:82:f0:e6:fc:5c:65:cb:32:b6:29:ef:78:
4a:3f:8e:be:84:f4:98:9e:7a:da:85:12:87:39:aa:25:08:07:
38:5b:94:37:67:58:81:04:32:e9:3a:1a:c9:3f:7a:7d:1c:38:
f4:c8:13:89:62:2b:ad:fe:33:9e:fc:db:97:f9:cc:08:1c:19:
42:84:2f:6e:0b:4c:d4:d2:50:f2:5a:59:29:8a:be:c8:9d:cc:
22:3d:4a:6c:f7:f5:87:ec:ed:e3:94:64:50:76:00:31:e4:2b:
c3:a8:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:50 2025 by rpki-client