Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Ur4M-uflWSIiX-fjJIPwEvq2oVQ.roa
File: Ur4M-uflWSIiX-fjJIPwEvq2oVQ.roa (raw, json)
Hash identifier: KTwep33OjgXYrDG4kQ3hShGG5KGlJPOGfsxGf6DVlW0=
Subject key identifier: 52:BE:0C:FA:E7:E5:59:22:22:5F:E7:E3:24:83:F0:12:FA:B6:A1:54
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019661A4C69D7B897AC327CB0322FF75AD19
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Ur4M-uflWSIiX-fjJIPwEvq2oVQ.roa
Signing time: Wed 23 Apr 2025 07:55:10 +0000
ROA not before: Wed 23 Apr 2025 07:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16321
IP address blocks: 45.156.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:a4:c6:9d:7b:89:7a:c3:27:cb:03:22:ff:75:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 23 07:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52be0cfae7e55922225fe7e32483f012fab6a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:fa:37:30:13:40:57:57:f6:cd:cf:f8:66:
b6:58:36:d3:c4:f6:f5:eb:fe:8c:22:f4:16:a6:75:
48:32:f8:c4:20:52:66:14:da:68:19:9f:55:4b:bf:
bd:2b:d2:3e:a4:9a:91:75:58:d0:5e:a1:9b:96:06:
73:4a:be:45:44:ca:00:4f:5c:13:c6:5d:42:56:66:
69:4f:d4:ad:48:bd:8f:36:7f:cd:70:93:a6:02:d4:
a5:88:f1:63:27:27:6c:ab:90:c9:5b:7c:e0:44:89:
b8:ad:6f:76:00:58:c7:a5:17:0e:09:24:83:30:bc:
13:fb:00:d5:2e:9e:64:3f:45:a8:24:7c:6f:68:98:
1d:45:8b:81:24:06:43:42:79:b6:7d:17:54:f0:47:
79:aa:00:9a:4d:bf:83:96:ce:22:0e:bb:b9:5d:5e:
b2:b9:03:3b:78:78:5e:da:0e:7f:4b:3b:8b:99:76:
d5:2b:41:a9:51:23:a0:c5:b2:6e:e4:55:4b:03:cc:
1b:8b:a1:72:14:ac:ad:95:2d:c9:2c:56:41:5d:2d:
ad:d6:d8:3b:94:38:5c:38:de:d1:09:b8:b0:38:f3:
a8:39:c4:7d:a1:3a:0f:e0:5c:69:4d:48:7a:3b:f0:
bf:e8:f4:ec:19:25:70:e7:6c:6c:04:f4:88:e5:ce:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BE:0C:FA:E7:E5:59:22:22:5F:E7:E3:24:83:F0:12:FA:B6:A1:54
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Ur4M-uflWSIiX-fjJIPwEvq2oVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:1f:84:2e:2c:82:fb:92:22:e0:96:c3:41:5c:17:00:cd:19:
3c:8c:d5:ca:cc:f4:8a:6c:14:d0:59:76:85:84:e5:96:14:df:
3a:12:ca:05:53:7a:35:ff:83:81:e1:e2:25:aa:f1:24:94:d2:
f8:36:2f:0a:6a:ff:9e:56:20:7e:56:73:41:85:c1:9f:13:8b:
9c:6b:f4:48:10:ac:b0:02:7c:5a:b8:1a:18:b9:60:aa:bd:44:
6c:51:39:93:4f:d2:13:b6:4f:31:e1:9f:ae:37:48:a4:70:a3:
3c:dd:f1:26:b8:8f:ee:f1:f5:23:d1:96:c9:4b:44:23:df:e1:
f3:52:cd:b1:e8:e7:ef:96:f0:53:68:44:a1:22:14:12:49:d1:
bd:6e:c4:6d:fe:ee:36:06:87:7f:ff:07:3c:b0:55:3e:1b:6f:
c8:d5:54:44:f4:98:aa:74:66:c5:3a:3c:02:c4:8b:c5:32:1c:
69:63:19:5f:2e:9f:fd:2d:75:19:55:4b:cb:ae:e5:bd:53:4f:
34:71:41:70:db:cf:48:bd:00:df:64:81:3e:3b:c1:9d:03:df:
0a:a2:b8:a3:59:8e:73:24:3f:33:85:8c:4a:9f:67:31:d3:92:
a0:63:0f:ab:70:df:2f:f1:33:1f:d8:86:f1:c5:15:09:23:34:
a2:77:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:18:36 2025 by rpki-client