Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/tKmEC4MB5hqVQbFF_5qlwwlDujU.roa
File: tKmEC4MB5hqVQbFF_5qlwwlDujU.roa (raw, json)
Hash identifier: DWWPvUtVR9Z8569/gJySYMoNxwD1GjHbMP8gxFtXEzs=
Subject key identifier: B4:A9:84:0B:83:01:E6:1A:95:41:B1:45:FF:9A:A5:C3:09:43:BA:35
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA9CD567BB645EB6497A00C03152E0
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/tKmEC4MB5hqVQbFF_5qlwwlDujU.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 45.82.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:d5:67:bb:64:5e:b6:49:7a:00:c0:31:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4a9840b8301e61a9541b145ff9aa5c30943ba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:03:a6:1d:48:de:3e:8e:e3:90:07:bf:02:
85:ef:7b:37:16:8f:df:00:66:f0:99:cc:5a:f2:b8:
05:8e:48:94:0c:75:21:9d:e5:43:15:b2:b7:9b:a3:
66:97:39:bf:0a:78:80:26:c5:25:37:83:3d:af:26:
9d:95:1e:d4:f2:40:30:c0:dc:7a:02:93:61:80:3e:
aa:f7:36:94:fb:30:34:f2:f8:6f:33:79:05:57:35:
89:1e:9d:d2:8a:c8:ac:d3:14:dd:f7:80:5d:9c:79:
92:4b:45:c3:5e:36:71:0d:8a:2e:c5:97:ec:bd:d9:
a7:db:9f:32:ff:98:12:b9:54:41:e8:78:8a:35:b9:
f3:95:38:15:b6:96:ae:8e:48:3f:da:2b:00:ba:1a:
58:df:9f:71:74:41:1c:55:98:4a:74:47:15:ab:50:
16:58:fe:03:73:17:43:bc:ce:e3:b2:f9:8d:90:60:
f8:5a:42:20:e4:9f:fb:30:8a:c8:a1:5e:f7:f1:3a:
49:90:a9:98:60:76:e9:bb:5b:0f:48:6a:fe:d4:be:
ef:da:39:81:7d:49:f3:40:e1:d9:44:10:a6:21:d1:
ca:df:a9:75:4a:ee:a4:b1:4e:0d:05:2e:3a:96:85:
57:54:cb:59:55:70:b4:75:d8:03:62:0b:48:9e:28:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:84:0B:83:01:E6:1A:95:41:B1:45:FF:9A:A5:C3:09:43:BA:35
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/tKmEC4MB5hqVQbFF_5qlwwlDujU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.48.0/22
Signature Algorithm: sha256WithRSAEncryption
21:3a:6f:a7:8d:6f:69:e3:dc:6c:c6:38:cb:4d:e5:17:bb:b6:
f0:76:1d:fc:25:94:c4:5a:1e:be:84:81:78:24:17:1c:f7:ee:
8e:ca:b7:0a:a2:e4:51:b6:4c:33:e0:d3:05:dd:dd:00:be:25:
30:1e:16:14:09:09:a2:51:1d:97:8f:6b:ea:6c:98:e3:ee:49:
d2:c4:14:28:a1:fb:ec:39:f9:65:9d:97:53:a3:d4:47:db:ad:
d8:86:24:1c:1e:d0:70:67:04:e0:c3:6b:5b:9d:0d:c9:41:14:
17:e5:3a:db:26:83:c3:2b:09:a8:72:72:39:5c:d8:bf:22:aa:
bb:4e:d0:5e:4b:ff:58:cd:1a:20:88:71:1f:78:52:1e:63:65:
4f:1c:42:fd:66:83:f7:d3:e4:98:c5:e2:5f:c3:f3:81:f1:5c:
a8:38:64:12:e0:90:57:01:8c:86:4b:a4:46:15:93:45:88:7f:
05:32:78:f2:79:be:4a:4f:97:34:de:a1:83:dc:ca:af:31:e7:
32:56:ac:a8:73:46:fb:25:ad:46:42:52:ec:18:b7:c6:a6:7b:
16:ae:83:10:80:09:41:ce:24:05:57:b9:ad:f1:06:94:c6:3d:
cd:79:ca:5c:3a:c9:64:2e:4d:37:2f:40:08:c9:31:1c:f3:85:
60:2b:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:51 2025 by rpki-client