Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa
File: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (raw, json)
Hash identifier: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=
Subject key identifier: 13:60:98:8E:45:A3:70:34:63:9A:59:BE:B8:6A:AA:D9:C5:F7:F9:BC
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 01942826DCC8D0EA50DC496FDD34E8284022
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa
Signing time: Thu 02 Jan 2025 17:53:43 +0000
ROA not before: Thu 02 Jan 2025 17:53:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 45.151.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:dc:c8:d0:ea:50:dc:49:6f:dd:34:e8:28:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Jan 2 17:53:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1360988e45a37034639a59beb86aaad9c5f7f9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:b3:20:a9:2c:c9:83:1b:15:ac:83:7c:f6:
ac:ae:26:d6:a5:f7:0b:73:62:9a:13:3a:c9:46:fb:
39:e2:4b:42:46:36:9b:f3:6d:b6:87:82:0a:5c:ee:
b8:c7:28:d5:8f:ae:05:2b:9e:88:d7:c8:23:3a:13:
e2:fe:57:8c:f9:45:35:b2:50:7d:70:8f:f9:58:54:
0f:4c:8d:d2:2c:63:b6:b1:56:a6:a6:59:ca:3f:39:
70:d5:5f:87:f2:30:ec:7f:6c:96:21:a8:6b:14:73:
10:93:51:e8:0d:63:6c:24:9e:76:09:4a:f3:7a:6d:
27:51:c5:3f:d5:59:0f:19:9e:66:1c:26:24:38:92:
a8:d1:21:0e:ff:ca:0d:66:05:6d:8a:51:ba:fb:39:
11:1f:9c:1f:70:f7:76:62:8b:69:f8:c2:fe:db:2d:
19:c2:47:fa:32:6f:05:76:6d:72:e8:ed:08:75:5f:
5f:5e:77:ee:49:9f:4d:28:d9:b6:07:4f:69:d1:c6:
06:a0:2c:9e:3f:0b:a2:e8:b4:13:3c:b0:15:79:d2:
f1:4a:5d:61:8f:02:76:ee:58:6a:ab:f2:3f:9f:4d:
f1:2b:9a:11:bc:98:5d:0e:7a:4c:16:cc:5b:c8:6b:
1c:98:06:10:ee:01:f4:27:08:a2:29:9f:fd:d1:1a:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:60:98:8E:45:A3:70:34:63:9A:59:BE:B8:6A:AA:D9:C5:F7:F9:BC
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.240.0/22
Signature Algorithm: sha256WithRSAEncryption
00:da:d6:c2:28:56:79:0c:43:5b:3a:0a:ed:36:0d:c6:ca:33:
22:4d:0e:b1:36:dc:7e:d2:1a:8f:c9:bb:6a:86:13:e8:82:2e:
f1:e1:48:75:dd:a0:45:6e:e0:2b:92:79:a0:65:b5:07:17:b6:
ad:44:8c:1c:6d:7f:b5:7f:bc:0e:9f:8b:9a:30:5b:8f:e6:30:
b0:e1:eb:ce:e4:2d:59:d0:9e:30:af:53:31:02:00:50:cc:89:
f2:38:8c:84:2a:18:21:ba:cc:0a:0c:34:01:36:d7:06:de:94:
7e:af:d1:b9:38:e1:37:40:30:c7:5a:ce:90:21:c5:da:8c:fb:
9f:a7:dd:0e:e7:23:11:c2:78:a0:c7:d3:cd:b0:3d:e1:2f:60:
0f:5b:af:5e:7d:2a:ad:4c:91:92:1f:a4:bd:ef:ee:70:52:2e:
da:70:e4:1a:bc:16:82:80:3c:8e:08:e0:74:1e:b3:97:73:de:
4b:94:bb:83:de:09:6d:cb:71:0e:d1:97:95:fa:c2:c2:d5:3f:
fb:75:13:ee:7b:e9:83:8c:9c:57:dc:7d:08:0f:aa:35:6d:47:
d4:d5:37:2b:26:95:3a:b4:89:9c:cf:41:fb:b9:6b:d5:de:68:
38:0f:b7:c0:ce:b5:99:10:32:21:d6:33:fe:f5:b1:98:32:82:
c1:5f:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:38 2025 by rpki-client