Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/C-9z8ht5WfkqXe5T02TWElDQHq0.roa
File: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (raw, json)
Hash identifier: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=
Subject key identifier: 0B:EF:73:F2:1B:79:59:F9:2A:5D:EE:53:D3:64:D6:12:50:D0:1E:AD
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB68B6BF4F41396C8F95205C37FFEF
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/C-9z8ht5WfkqXe5T02TWElDQHq0.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215206
IP address blocks: 45.89.60.0/24 maxlen: 24
45.89.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:68:b6:bf:4f:41:39:6c:8f:95:20:5c:37:ff:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bef73f21b7959f92a5dee53d364d61250d01ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:4a:b3:00:58:30:f5:9b:a2:bd:1c:9a:fa:
ff:72:0c:65:f7:a4:7a:6e:8a:2e:d1:66:1f:e6:04:
b6:14:f0:58:bf:25:f5:85:92:76:38:30:d1:fe:05:
6d:09:aa:ad:26:36:f2:6e:60:93:78:79:bd:9b:fa:
69:c2:1e:7a:43:f5:f5:d8:52:1c:8d:bf:c3:75:48:
c4:78:74:f1:8b:d8:ae:15:66:2d:16:0e:e6:58:af:
a0:0c:95:66:f5:ab:db:7d:90:60:93:2e:05:cf:b9:
83:a5:e5:ea:7e:6f:cf:c9:de:74:f3:e3:11:52:13:
a9:3a:fc:9f:1c:42:78:fe:83:e2:0a:a1:a9:fd:71:
9a:c4:cd:49:3d:a3:e4:eb:42:b3:ab:52:e9:b8:24:
2a:5c:a9:54:c8:da:06:ab:ef:45:71:54:37:a6:ea:
85:2e:05:d1:f0:a1:9c:6d:40:31:96:b5:09:5e:dc:
01:55:21:04:06:df:34:77:59:78:46:b6:41:05:28:
17:1f:4d:02:42:13:43:5a:6c:8d:2f:48:33:ff:1c:
2b:59:e6:8c:9d:c8:13:15:11:30:d2:61:29:80:29:
06:c9:6d:8f:ee:38:37:47:72:25:0e:40:7c:11:50:
26:55:19:f9:96:1d:ed:54:dd:66:61:4f:60:90:1c:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:73:F2:1B:79:59:F9:2A:5D:EE:53:D3:64:D6:12:50:D0:1E:AD
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/C-9z8ht5WfkqXe5T02TWElDQHq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.60.0/23
Signature Algorithm: sha256WithRSAEncryption
15:91:c6:d2:a3:02:e1:a6:58:c1:1a:e3:7a:91:2c:32:95:04:
34:2d:05:e0:37:3e:d4:60:5b:be:e4:57:45:b5:a3:ed:27:cc:
a3:46:33:59:7a:27:86:de:18:78:2c:3e:0c:99:61:b3:be:63:
e8:fe:91:32:91:cf:db:ce:d1:aa:23:67:8c:5f:26:82:6a:dd:
62:27:ca:9e:4e:d6:07:2a:89:74:dd:8b:e4:42:43:22:29:89:
40:29:c3:09:75:c7:21:c8:6a:72:ec:09:3d:f3:2d:54:0f:81:
51:00:1e:fb:28:95:ce:c1:3a:d6:83:91:36:4e:c1:31:d9:c4:
4c:29:fe:81:dd:94:7f:19:77:4f:f4:87:59:24:74:73:bf:fa:
f2:c5:ab:f1:7d:be:bc:8b:bb:cf:ec:72:65:04:ef:b8:7c:06:
5f:5d:5f:2c:e2:9d:00:44:b9:c9:20:df:5b:ec:95:1c:11:c2:
76:b4:9e:de:d6:23:e4:5c:06:7f:7c:56:ec:7a:07:21:da:3f:
61:d2:d0:c4:f6:40:dd:5e:21:d9:37:64:14:59:bb:9b:73:7f:
4d:8c:98:91:0c:ef:88:da:56:79:f1:ce:3e:ea:55:1c:26:c5:
f4:0d:72:44:2e:42:f6:d9:bc:74:fc:f1:1c:90:8e:16:c2:fe:
f8:f5:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:26 2025 by rpki-client