Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/pvGlYdNhKz2pnhUHBDmhS1PrNEE.roa
File: pvGlYdNhKz2pnhUHBDmhS1PrNEE.roa (raw, json)
Hash identifier: WH1w7Slb9loDXTZ8TzAepbgAGDtyJ5MDMVLNLiV34H0=
Subject key identifier: A6:F1:A5:61:D3:61:2B:3D:A9:9E:15:07:04:39:A1:4B:53:EB:34:41
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01967BFC8BB32B3DA3181C485E095F057645
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/pvGlYdNhKz2pnhUHBDmhS1PrNEE.roa
Signing time: Mon 28 Apr 2025 10:41:10 +0000
ROA not before: Mon 28 Apr 2025 10:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 45.146.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:fc:8b:b3:2b:3d:a3:18:1c:48:5e:09:5f:05:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Apr 28 10:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6f1a561d3612b3da99e15070439a14b53eb3441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:ae:f0:53:89:fc:94:6d:2f:05:c4:12:3f:
78:6c:e5:d2:20:6a:19:ef:69:79:56:36:88:5c:fe:
bc:a9:1d:76:8d:b6:12:71:a3:c0:c1:61:5d:08:cb:
67:34:29:8d:eb:34:11:4c:0f:eb:c4:a8:a1:08:fe:
09:9e:a6:06:1f:3a:3b:03:4f:2e:62:d8:76:a7:ca:
bc:d2:3b:88:bb:2c:df:d3:3f:7a:a4:4f:3a:c8:2c:
5b:9d:9e:b7:2b:54:23:03:7d:11:91:60:6f:f2:cf:
d3:e0:75:1b:80:5f:0f:0a:77:f9:37:c3:9b:e4:e8:
ce:c7:b8:64:c7:03:45:99:3a:5d:5e:bd:df:74:03:
d5:2f:bb:6e:c2:d3:7f:0d:48:6f:28:42:49:93:12:
d8:10:4a:9d:57:44:ac:af:25:7c:c1:5e:f6:80:ea:
4f:c0:90:cd:2b:23:50:b9:93:db:03:93:ea:2b:31:
e2:15:27:71:ab:4f:2c:ec:12:a7:4d:0c:59:85:0b:
22:81:b3:9c:56:38:f9:af:6f:88:e6:fc:84:eb:6d:
8b:00:e9:27:e4:6a:86:f0:93:c6:2c:87:0c:12:da:
d4:6f:81:db:55:49:df:22:85:43:30:c0:a5:a0:7d:
69:31:80:b5:2a:2b:a6:4d:57:b9:30:a1:f2:ab:0b:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:A5:61:D3:61:2B:3D:A9:9E:15:07:04:39:A1:4B:53:EB:34:41
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/pvGlYdNhKz2pnhUHBDmhS1PrNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:71:62:6c:6c:75:ca:f7:d2:37:43:28:ff:a3:70:85:19:3e:
2b:c6:da:fc:54:bb:a5:8a:ee:39:aa:9b:3c:0c:f6:44:64:36:
ed:e7:bf:92:fc:31:94:c6:00:ff:ae:92:56:32:e3:c8:74:f5:
6e:e7:08:fa:f6:8e:0e:b3:d9:2e:96:61:b5:7c:9d:47:54:35:
56:73:b6:05:2f:71:fa:14:a8:a4:2d:b8:ec:6c:ad:eb:55:3b:
ca:46:9b:ad:bc:66:7a:7d:0f:b0:29:1e:28:53:62:d0:8a:a2:
d9:a2:98:a1:6d:f0:28:76:8c:86:dd:85:58:d6:71:66:22:c7:
dd:f8:e5:19:29:87:e3:b8:a9:3c:92:6b:4d:cb:25:4a:db:a4:
40:ed:b0:00:ca:37:14:e9:0a:a7:79:b6:a7:74:cb:cd:0a:ba:
e0:b7:53:2d:8d:e5:60:a3:3e:ce:b2:9e:71:fb:09:6e:00:8f:
62:c1:ee:92:71:50:96:de:1f:a6:e8:20:ae:fc:67:d2:c6:30:
59:1d:2b:88:02:1f:b9:f4:db:37:cb:d5:07:78:ee:4a:26:d6:
ca:b9:83:46:18:4b:67:f3:cc:14:6a:8a:a0:b9:c3:50:9e:51:
2e:aa:8f:c6:cc:f5:87:cf:9a:f5:f8:be:78:e6:6f:8b:46:52:
f9:6a:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:23:54 2025 by rpki-client