Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/rLSgQK3eROYoGVjeEkatzbeLiUo.roa
File: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (raw, json)
Hash identifier: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=
Subject key identifier: AC:B4:A0:40:AD:DE:44:E6:28:19:58:DE:12:46:AD:CD:B7:8B:89:4A
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019420D65D5DA21A43AE94FA9F3FF41ECCD3
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/rLSgQK3eROYoGVjeEkatzbeLiUo.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199829
IP address blocks: 185.45.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5d:5d:a2:1a:43:ae:94:fa:9f:3f:f4:1e:cc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acb4a040adde44e6281958de1246adcdb78b894a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:48:e5:30:fe:b5:cb:5d:00:69:f7:37:37:
64:8d:c7:e9:b1:67:84:45:17:b4:38:62:96:87:7b:
c2:97:de:a8:e5:94:29:9b:be:c7:9d:b0:a6:4d:24:
4c:af:0e:7c:74:7c:a5:80:2e:a8:5a:f2:ed:d1:05:
8a:72:9a:43:d9:cb:1d:2a:ff:47:d7:67:72:d8:38:
e0:fe:12:cc:d4:1e:7c:d0:4c:d3:d3:6e:0e:48:49:
67:85:41:4e:59:e6:6e:8d:d5:6c:55:3e:96:86:60:
38:95:a6:2b:b7:6f:fe:80:ce:57:83:40:ec:98:03:
0d:a1:1e:f1:27:92:a9:ac:86:e8:68:24:30:58:53:
38:7c:4b:91:ba:70:d8:8d:91:4d:1c:3f:36:f4:7e:
d5:78:50:a8:30:82:26:5b:b6:58:dd:cc:56:76:19:
3b:4d:1c:11:54:3d:96:fa:0f:b2:0b:8f:47:58:a3:
62:f9:ef:7a:d9:44:c8:51:ff:a8:c6:e4:52:dd:a9:
c9:1f:77:e6:5e:a4:c9:1e:ac:e3:cb:d2:38:9f:69:
00:64:89:d2:a3:49:fc:ec:8e:1b:be:d9:dc:83:0d:
a4:10:6a:11:19:6c:3c:ba:68:65:0f:12:c2:d7:dc:
34:ff:01:4e:07:66:71:7f:13:f0:94:b6:ee:a6:e6:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:A0:40:AD:DE:44:E6:28:19:58:DE:12:46:AD:CD:B7:8B:89:4A
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/rLSgQK3eROYoGVjeEkatzbeLiUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:87:e0:00:a1:c6:79:6e:56:c5:28:41:81:67:10:52:ac:61:
b3:f1:d9:a9:22:f2:f2:7f:83:19:25:89:36:64:e7:30:f5:30:
2d:90:69:5c:e8:ae:22:bb:1f:9d:ee:aa:20:5d:20:7d:e7:9e:
94:ef:af:26:35:ba:c9:35:8b:6d:1d:96:2b:d1:ae:c8:3f:9f:
a7:e8:25:26:18:a8:ac:c9:6f:51:0c:fd:92:ed:e0:41:8e:da:
9a:30:e4:50:bb:89:18:ee:91:ee:c4:8b:91:0a:54:a5:89:3f:
0b:82:39:39:a8:7f:9b:53:22:e0:58:6d:a2:83:f0:69:86:3b:
75:8a:f4:a6:60:49:63:fb:61:b3:79:ab:f8:19:d8:d4:b1:ec:
cd:6a:19:62:7f:bd:d8:14:31:01:44:fd:91:0a:53:37:34:d7:
07:08:d6:12:d0:04:cd:16:76:c5:e3:71:a4:cc:29:72:01:c5:
78:44:cc:78:fe:33:ad:70:c9:67:64:90:c5:c8:b5:b3:88:70:
d2:ed:c9:59:2e:8e:43:45:f7:30:f0:21:84:2c:a1:ba:6b:ee:
19:ae:2e:cd:f4:0f:e0:39:6d:e7:0e:b6:a1:dd:02:d1:c9:8a:
6a:bd:7a:c6:ba:35:1d:89:30:31:34:d5:7d:88:4f:b1:05:50:
3a:60:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:13 2025 by rpki-client