Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa
File: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (raw, json)
Hash identifier: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=
Subject key identifier: B1:AF:A2:88:44:24:FE:2F:C4:49:85:B4:5C:45:4B:73:97:D4:10:33
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 01942826201D85ACA86F6F49BF474F410304
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa
Signing time: Thu 02 Jan 2025 17:52:54 +0000
ROA not before: Thu 02 Jan 2025 17:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43519
IP address blocks: 51.149.0.0/24 maxlen: 24
51.149.1.0/24 maxlen: 24
51.149.254.0/24 maxlen: 24
51.149.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:20:1d:85:ac:a8:6f:6f:49:bf:47:4f:41:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jan 2 17:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1afa2884424fe2fc44985b45c454b7397d41033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:70:3e:cc:a5:df:65:a8:70:56:41:7e:f6:
8c:c1:dd:41:f2:33:6a:0d:38:04:9d:ef:de:97:98:
d7:5d:6e:63:16:a6:53:86:3f:b6:21:4d:3e:31:b4:
6d:11:81:72:b1:7d:e5:63:e4:01:d8:ea:94:26:3f:
ae:81:50:98:25:b1:4e:fa:dc:66:25:1e:f5:8a:4f:
44:6c:29:20:72:0a:0a:20:a3:2c:f0:1d:5f:2c:41:
f7:73:b1:58:f0:dc:c7:a2:8d:d9:f1:31:5d:16:e2:
45:f1:ca:99:eb:32:97:f8:48:9f:73:9a:91:8c:f0:
6d:26:94:0c:bb:c9:31:17:4c:17:1b:84:c7:8f:df:
5a:7a:43:be:07:5e:2c:2e:8e:13:38:5a:fc:9d:6e:
73:81:cb:86:df:d1:86:8d:41:d9:eb:03:75:34:e5:
8c:ae:a3:fd:92:1c:61:e8:40:2e:fd:e9:aa:fa:3c:
f9:88:93:1c:8f:9e:95:f7:b7:3a:23:7f:c3:eb:0a:
54:11:a8:d1:ad:42:d5:b3:cf:6f:7b:a1:48:60:7c:
e0:00:3e:46:ad:7a:f7:9e:a0:0d:bc:a4:ba:6d:b7:
ec:ca:bb:c7:aa:48:96:fb:58:b6:9d:fc:10:3a:a1:
4f:9d:da:63:10:1e:f3:31:9b:87:6a:cd:0e:c7:97:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:A2:88:44:24:FE:2F:C4:49:85:B4:5C:45:4B:73:97:D4:10:33
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.0.0/23
51.149.254.0/23
Signature Algorithm: sha256WithRSAEncryption
00:f3:5a:4d:5a:b3:5d:14:89:7f:12:e9:50:97:ac:ad:3c:ac:
ce:6c:99:8f:70:c7:dc:e3:32:e1:f7:dd:67:df:1f:8f:11:10:
d3:49:f4:55:0d:0b:2d:30:8a:5c:bd:08:83:e2:cb:1d:64:76:
e6:c7:c3:49:59:b8:7a:f5:76:04:fb:0b:a6:6e:65:b1:51:f7:
8b:bd:22:85:5e:50:4b:43:59:8c:b6:90:bb:39:30:0e:c3:75:
25:f4:79:f6:b2:3f:2f:8f:ae:f1:75:94:3f:56:8c:da:00:da:
24:19:63:a2:12:3c:66:6a:b8:34:0f:0a:18:82:8b:ed:ab:49:
b9:bb:65:2f:90:bd:19:f4:36:7b:c9:5f:cc:d3:22:f7:f3:da:
64:c8:eb:b4:21:1a:27:01:9e:21:40:45:4f:92:66:a6:01:ee:
1c:77:3b:7b:94:45:5e:f0:98:e6:a0:38:3c:b5:24:1a:a4:d8:
d1:bf:7f:a8:5e:d8:01:25:22:50:8f:de:3e:72:83:9b:b2:45:
fc:b3:d7:76:e6:5a:93:ed:6a:f2:86:14:cf:5c:d6:53:a4:0b:
8a:7f:de:39:a8:d6:36:0f:25:49:5e:e1:a7:1c:80:8c:29:12:
cf:19:08:7e:ac:62:5c:b5:d3:7e:2a:cf:39:70:27:5d:46:92:
4b:cb:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:05 2025 by rpki-client