Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/piG2uRHwpvwfiTxMHd8MLSGk4wE.roa
File: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (raw, json)
Hash identifier: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=
Subject key identifier: A6:21:B6:B9:11:F0:A6:FC:1F:89:3C:4C:1D:DF:0C:2D:21:A4:E3:01
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 019424B388390FFF3C62E1534599A4AAFB3E
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/piG2uRHwpvwfiTxMHd8MLSGk4wE.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204572
IP address blocks: 45.143.124.0/22 maxlen: 22
2a0e:e3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:88:39:0f:ff:3c:62:e1:53:45:99:a4:aa:fb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a621b6b911f0a6fc1f893c4c1ddf0c2d21a4e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:b0:86:7b:a4:6a:9b:64:86:4f:c1:1f:a0:
53:18:84:be:03:1b:0c:15:17:b3:88:61:a1:0d:af:
e3:78:ef:f6:2c:ba:5d:8f:c3:64:40:ff:3b:e5:09:
7f:b6:a9:6e:a8:65:15:b4:3e:72:5d:d8:a5:4b:8e:
bc:8f:9f:f0:1f:10:43:4c:60:2a:f4:03:2c:64:20:
33:c3:4f:b2:28:f2:b6:83:b4:cc:d6:db:41:12:97:
dd:36:b2:b5:c5:f9:66:37:4c:b7:06:ba:80:4f:ef:
48:80:16:fa:d2:76:ac:c7:5e:ef:59:1b:6b:14:a1:
fa:af:99:db:a9:6b:4a:3a:20:3f:32:cb:68:c7:a3:
66:fa:59:88:a2:a1:ea:61:aa:50:00:d7:fc:44:9a:
cb:f2:bb:86:98:03:52:1c:b2:bd:8b:24:2c:ac:65:
3c:bc:9a:7d:38:f2:73:80:41:c0:f6:2c:b4:30:d9:
f8:03:fb:2c:50:8e:44:e1:83:0c:37:92:a0:a7:67:
d4:d4:1f:be:a9:3e:63:67:3a:a7:89:b4:f5:05:8c:
c6:c9:11:7d:01:d0:59:2c:a0:72:01:b3:50:43:8d:
47:b6:ca:67:d5:82:1e:e1:13:3e:95:77:77:a9:67:
23:4f:aa:df:e9:2e:b7:db:df:55:15:49:d3:06:d1:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:B6:B9:11:F0:A6:FC:1F:89:3C:4C:1D:DF:0C:2D:21:A4:E3:01
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/piG2uRHwpvwfiTxMHd8MLSGk4wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.124.0/22
IPv6:
2a0e:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
73:bb:44:e1:3a:f0:a9:ed:43:69:91:44:5c:3f:b2:1a:b6:b1:
2f:1e:db:d7:e3:dd:5c:0b:c8:5f:06:89:4e:5f:04:50:f5:ac:
e9:99:ca:f1:e3:68:af:c8:a8:55:da:f2:f0:42:36:5e:56:df:
04:81:57:a3:29:9a:3e:6f:cf:fa:b1:e7:1c:dd:13:fa:b1:af:
cd:a9:48:9a:86:f6:73:d6:ef:21:70:28:29:04:5a:c0:b0:49:
64:c4:f7:c7:53:46:d9:aa:e5:6b:8a:c3:09:fc:e5:21:1b:98:
ff:6f:b0:93:46:ea:4a:b6:01:ba:d2:4d:74:ec:4f:d5:27:73:
05:76:c7:3d:b1:b4:fc:10:a6:34:db:aa:5a:81:c6:cb:b7:57:
00:ff:70:6e:9b:81:60:01:94:07:19:0d:03:2d:8d:b4:9f:37:
c4:d7:e3:47:e3:63:b0:50:89:c3:87:03:11:e3:cb:51:e2:3b:
18:00:3e:fd:eb:d8:4c:eb:f9:c6:20:4b:dd:dc:ff:be:dd:a3:
87:38:5c:29:d5:9b:50:b2:dc:06:ff:80:f3:a0:d0:3b:56:e0:
d4:3c:bd:1b:fb:94:a8:2f:21:4e:85:6a:85:40:c3:7b:35:0c:
c9:72:61:c7:a5:f3:c1:0a:4f:bd:ed:bf:cf:36:04:af:7d:a7:
ab:6c:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:37 2025 by rpki-client