Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/RservbDL-BVcPWiT5GY7GGmaqNg.roa
File: RservbDL-BVcPWiT5GY7GGmaqNg.roa (raw, json)
Hash identifier: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=
Subject key identifier: 46:C7:AB:BD:B0:CB:F8:15:5C:3D:68:93:E4:66:3B:18:69:9A:A8:D8
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0194258F004AC454920F592C3F9D8173B9AC
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/RservbDL-BVcPWiT5GY7GGmaqNg.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 45.12.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:00:4a:c4:54:92:0f:59:2c:3f:9d:81:73:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46c7abbdb0cbf8155c3d6893e4663b18699aa8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:53:6f:1d:da:1d:75:01:ca:66:02:32:c9:
c9:37:97:ec:99:05:db:ef:e8:16:4e:cd:82:47:09:
ac:76:d6:fd:9b:73:0c:3a:f9:d5:b8:a5:4a:68:f0:
cb:eb:2b:01:24:4c:49:c6:bf:72:6c:73:b0:eb:9b:
c5:d6:01:71:76:1d:09:0e:b4:66:74:b4:fe:97:9c:
a5:38:a5:29:63:40:9e:d0:01:ab:58:65:27:82:84:
63:7e:54:40:a7:80:0e:e6:02:36:09:6b:06:ef:fc:
f4:c9:d9:6c:3d:38:88:79:8b:a6:23:ce:ec:6e:c8:
e4:31:ab:62:07:b2:9b:6f:b1:6e:e5:78:04:c8:65:
06:5b:72:d3:4b:c4:2f:f7:59:82:4a:0a:ca:12:df:
04:76:cf:cf:8a:83:81:09:30:d8:6d:31:59:f9:53:
a2:31:eb:16:41:8c:38:97:52:3f:1d:a4:b9:6f:a2:
43:80:6b:ab:10:20:12:72:7b:8a:06:ea:fe:5e:0d:
d6:78:50:62:dc:a0:6d:78:d6:94:7d:90:b4:7e:78:
8e:b1:11:44:40:67:cb:60:c2:43:6f:1d:6e:07:45:
11:72:1d:23:48:a6:a9:f6:12:5e:f4:2c:00:f9:e4:
65:33:e0:cc:9f:30:5d:86:af:71:31:17:36:fd:16:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:AB:BD:B0:CB:F8:15:5C:3D:68:93:E4:66:3B:18:69:9A:A8:D8
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/RservbDL-BVcPWiT5GY7GGmaqNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ac:fa:0e:a2:8c:74:35:0c:e7:05:d9:14:cb:6e:5f:50:9e:
1d:04:3a:26:11:d1:4e:63:91:e9:b5:0f:d2:8a:2a:d5:b7:dc:
d4:fb:69:c0:78:22:65:c9:73:da:9e:4e:26:57:96:58:3d:b4:
3c:1d:eb:c2:a6:62:05:a8:89:11:14:94:be:5b:08:73:ff:7b:
c9:96:dd:f1:76:e3:41:da:75:19:89:5b:7b:34:9b:fd:1e:9b:
04:47:de:08:ef:ba:b8:dd:cb:af:9a:ea:55:44:1d:3e:fc:ae:
51:f6:83:16:9a:25:98:d5:67:36:cc:cc:6e:4a:63:05:a8:0e:
cd:3e:d0:36:01:49:bd:40:33:50:7e:33:7a:0c:32:82:07:27:
6a:80:cc:2c:9b:8d:b5:e5:fa:26:fc:97:5b:c2:7e:fc:b5:51:
fa:b9:9f:2f:28:da:21:98:e8:44:e9:b3:f9:45:6b:10:fc:57:
da:1b:59:6d:29:03:85:4a:85:3c:9b:4b:c9:af:5d:91:44:6b:
d0:75:9f:02:23:85:d9:8d:f0:58:b2:58:a5:ca:27:40:11:54:
ac:4f:02:9f:f9:2f:76:d1:8f:cc:80:b0:a5:b8:c5:6e:d3:29:
01:f3:42:80:a1:f0:b5:8e:4b:1b:50:77:78:86:b7:f1:91:d0:
af:c1:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:10:32 2025 by rpki-client