Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/m8-NvEaTYxdMpq73t7W6hVC0ihg.roa
File: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (raw, json)
Hash identifier: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=
Subject key identifier: 9B:CF:8D:BC:46:93:63:17:4C:A6:AE:F7:B7:B5:BA:85:50:B4:8A:18
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B6849A0A162B5B89B4CCB12A417604
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/m8-NvEaTYxdMpq73t7W6hVC0ihg.roa
Signing time: Thu 02 Jan 2025 15:51:00 +0000
ROA not before: Thu 02 Jan 2025 15:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52374
IP address blocks: 2.20.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:84:9a:0a:16:2b:5b:89:b4:cc:b1:2a:41:76:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcf8dbc469363174ca6aef7b7b5ba8550b48a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:68:bb:30:50:e1:77:0d:57:10:1a:86:56:
67:04:9d:a7:84:ef:d7:83:f9:01:7a:75:48:3d:d1:
de:d0:53:25:67:36:10:fc:8b:37:90:fc:d3:9a:dc:
68:65:33:bb:a7:ad:ea:48:b3:9c:fe:c4:f5:cc:48:
ee:47:86:d2:38:1c:3a:45:6a:d7:fe:01:44:44:e6:
9f:25:0c:04:95:49:e1:9f:76:0f:f8:6d:86:e4:ad:
07:a4:10:1c:af:55:5a:ed:b1:94:18:4a:d1:b5:5d:
d0:fe:a7:12:8f:13:fa:c4:c9:cf:6f:8e:d4:a3:b5:
08:e1:5e:bf:95:2e:35:e7:36:85:9c:cd:be:22:2e:
62:f8:0e:45:2f:a6:cb:a9:7a:4d:ee:ba:3a:13:2c:
40:f1:27:a4:6d:8b:08:b2:42:61:68:4b:10:09:0d:
48:01:55:ca:6a:b4:74:7b:8e:c7:b7:e9:78:33:83:
f4:86:e4:1a:d2:ca:72:1d:b1:2e:3a:6d:56:20:d4:
11:45:fc:51:ec:63:5c:b8:2e:02:ba:36:8f:a2:c6:
e0:39:70:3f:26:79:fa:ee:87:76:ac:34:8d:8c:90:
e6:bd:a4:5b:4f:ca:2e:e8:d2:96:f7:d2:bc:ae:d0:
46:75:95:99:5e:d7:4e:a1:18:22:76:9b:2b:82:3d:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:8D:BC:46:93:63:17:4C:A6:AE:F7:B7:B5:BA:85:50:B4:8A:18
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/m8-NvEaTYxdMpq73t7W6hVC0ihg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.20.46.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5c:c2:d3:55:6a:8c:c0:7e:6f:3d:ad:3b:90:64:5a:39:c4:
21:b3:51:bc:d1:7c:da:47:21:37:c1:50:dd:fd:a8:bb:e9:2e:
43:7d:19:f8:be:fe:99:9f:94:9e:bc:0c:f8:75:d3:86:e7:71:
30:37:2c:45:1c:2e:10:e0:bb:3d:ee:a4:cd:05:43:38:b0:b6:
85:90:da:65:6a:7b:ad:de:7b:31:e4:02:90:cd:7d:c7:80:4f:
66:d9:cc:20:db:c9:8b:a5:9f:ef:2c:6a:2d:f4:b4:56:45:03:
2f:c3:fc:b2:68:a8:ad:ba:d7:74:ab:5b:44:e0:27:05:46:28:
bc:14:96:47:35:37:6e:66:8e:cf:b5:35:c8:a7:37:8d:03:d8:
05:56:d3:a5:f8:05:40:bd:c7:56:d3:6a:27:36:11:a2:b1:4c:
97:23:ed:3a:fa:fc:65:ad:37:e6:b1:db:a3:35:ab:3a:4c:f1:
d6:6a:21:55:20:d8:fe:74:b4:fd:c9:a6:33:00:e3:7f:df:e9:
e9:cf:b3:b7:7c:56:32:0c:99:e4:0e:ea:ca:f6:67:f3:29:f0:
38:a0:01:38:9f:38:e8:98:d7:cc:59:a8:b2:11:04:2e:33:98:
03:10:cd:41:20:74:1d:a4:46:f2:f7:d6:fd:cb:10:bf:0a:59:
06:b4:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:59 2025 by rpki-client