Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/P19E_mZ30tdEHCoKWD_RBelIVm8.roa
File: P19E_mZ30tdEHCoKWD_RBelIVm8.roa (raw, json)
Hash identifier: wn50ZQD7mmlSVGQuWKsydCfGSzOAX4sma0GjvM42Xlc=
Subject key identifier: 3F:5F:44:FE:66:77:D2:D7:44:1C:2A:0A:58:3F:D1:05:E9:48:56:6F
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019424448F99C2DD1A05C8AF38575351EFF4
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/P19E_mZ30tdEHCoKWD_RBelIVm8.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 268581
IP address blocks: 45.157.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8f:99:c2:dd:1a:05:c8:af:38:57:53:51:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f5f44fe6677d2d7441c2a0a583fd105e948566f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:85:21:a3:c3:83:7f:b6:b2:c4:49:bd:0e:
77:ef:60:7e:b4:35:c7:4a:59:8e:e4:c8:81:0b:8a:
26:df:18:da:54:14:28:df:56:ea:1a:7f:62:16:ee:
25:94:be:df:e0:a6:0f:21:44:af:03:f8:67:04:f4:
62:66:14:6a:5f:58:9c:c5:b1:4c:73:27:f8:23:6b:
bc:69:fe:0b:49:c8:f1:eb:ce:b9:ee:ea:d7:b4:7c:
7b:a8:47:78:68:13:70:c1:11:68:06:95:c1:30:bf:
69:ae:98:45:4d:c5:ec:67:bf:93:0d:e5:a3:33:96:
75:7b:04:78:90:cd:f0:dc:3c:4c:14:9b:63:a4:cb:
6c:f3:6f:85:0a:b8:cb:4c:2d:9d:51:aa:2d:fd:21:
2f:26:fd:e2:1f:a1:1b:2d:91:73:b9:4c:e7:ab:b6:
0d:4e:d6:51:3a:9b:a1:cc:71:61:cb:8f:0b:34:12:
c1:e7:cc:c2:e3:11:84:aa:94:5d:d5:61:23:bf:3c:
86:9b:39:e6:f1:90:9d:82:d1:a3:a6:c0:3e:6f:df:
26:e0:5a:21:f1:44:5f:b6:ad:7c:fc:36:f2:d1:cf:
a3:b1:f1:2f:0f:56:ea:fb:37:83:2c:6f:5c:e4:99:
41:39:a7:ab:7d:60:b0:80:55:00:ec:d0:8e:fd:fc:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5F:44:FE:66:77:D2:D7:44:1C:2A:0A:58:3F:D1:05:E9:48:56:6F
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/P19E_mZ30tdEHCoKWD_RBelIVm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:a3:19:81:18:75:ca:82:06:4d:f5:50:7a:d1:67:e3:f9:98:
85:2f:2d:bd:9a:ab:75:b6:a1:2c:83:07:4e:cd:b8:60:2b:11:
6e:cc:38:78:af:ce:0b:79:91:c8:d2:5c:50:3a:a3:df:d7:f5:
2c:60:12:62:c7:a4:25:88:91:0e:48:d9:fd:e9:1f:15:03:85:
75:a5:10:22:8c:75:52:a2:30:e6:e1:15:ee:a6:45:0e:5b:66:
8f:8a:34:e1:60:99:40:fb:69:e9:cb:4c:15:da:81:94:df:ab:
5a:72:67:1c:ca:c4:f2:c3:c9:ff:41:77:74:d8:91:39:9c:11:
c6:d7:4c:cf:1e:92:5a:f3:e0:db:7a:c7:70:b1:4e:37:6c:ac:
36:9b:31:a0:4f:50:f0:6e:89:ac:85:c0:2c:06:b7:af:51:ed:
6b:44:35:2f:27:1a:15:d2:d3:e2:af:33:f1:14:ab:a6:3c:2b:
80:e3:13:2e:2e:34:94:90:09:44:4b:6f:13:3f:82:6b:bb:6c:
09:b0:a7:b5:23:b4:4e:2a:47:85:20:0a:89:18:31:02:32:53:
8c:d8:19:e5:c8:8a:56:c4:e0:96:7a:05:c5:df:0b:be:fd:7b:
37:79:40:b8:68:6d:63:b9:d9:e5:06:d1:6f:0c:5a:38:c4:8c:
e8:62:78:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:56 2025 by rpki-client