Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/Rb_a0gRCH0c3VYafxMa-alIDM-4.roa
File: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (raw, json)
Hash identifier: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=
Subject key identifier: 45:BF:DA:D2:04:42:1F:47:37:55:86:9F:C4:C6:BE:6A:52:03:33:EE
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01942521907330E47C7A6F73CE57E6C89E74
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/Rb_a0gRCH0c3VYafxMa-alIDM-4.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56947
IP address blocks: 91.229.108.0/22 maxlen: 24
185.7.116.0/23 maxlen: 24
188.68.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:90:73:30:e4:7c:7a:6f:73:ce:57:e6:c8:9e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45bfdad204421f473755869fc4c6be6a520333ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:30:97:78:53:f3:a4:04:63:26:5b:60:90:
1c:61:6b:48:38:e6:65:42:8c:e2:c3:5f:c1:5c:13:
59:c5:53:47:35:ae:ab:7c:46:0e:9f:21:e6:9c:e5:
6e:fe:f1:9c:dc:8d:eb:13:b0:1a:c5:09:ef:a7:c7:
60:d6:18:c2:fd:a2:0c:5a:ef:3f:5a:ea:0f:a7:b5:
c8:b2:48:f7:90:ef:2d:23:7a:34:f0:8c:6d:b3:28:
94:ed:ea:fe:26:77:02:18:69:94:6c:e4:e0:a2:3c:
a6:47:be:c9:30:79:a2:48:be:53:6f:bf:dc:02:92:
71:a9:ca:0b:82:ea:92:26:c3:32:4d:4f:9f:cd:58:
2c:1b:90:fd:c4:6f:8a:6e:58:f9:5f:ad:ac:6a:3c:
30:65:4a:5f:54:6b:ef:bf:43:de:7d:44:79:b9:ad:
c7:bb:93:d0:3a:cb:14:df:92:1c:e6:b0:e3:66:32:
de:21:a1:05:b2:5e:59:bb:1a:d3:0b:b3:b5:27:f6:
b8:70:62:42:be:81:1e:2d:1d:ff:c4:1a:6c:91:38:
0d:94:05:98:75:95:4f:8c:17:cf:23:a7:14:ad:1d:
d2:29:15:1a:05:93:dd:61:3e:52:d7:ba:a7:ff:3e:
06:95:e1:53:47:96:46:fe:6c:57:19:35:17:06:c4:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BF:DA:D2:04:42:1F:47:37:55:86:9F:C4:C6:BE:6A:52:03:33:EE
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/Rb_a0gRCH0c3VYafxMa-alIDM-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.108.0/22
185.7.116.0/23
188.68.81.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9f:13:5e:47:0c:a3:d0:60:82:da:73:4c:f8:76:60:72:ff:
f7:95:22:9b:dd:40:32:4e:ad:2a:a7:2b:96:a8:9c:d5:7e:8e:
8a:34:83:60:c9:3b:30:fb:41:cd:ce:64:9c:2d:0d:9f:9e:1f:
0c:c3:8d:44:a9:2c:a6:11:6a:ac:ea:93:46:17:75:34:2a:b0:
8b:fe:d8:5d:65:d2:9f:6b:ee:92:68:d9:4e:c6:93:d0:55:79:
54:09:90:97:19:db:2e:2c:9a:7a:2e:b1:ce:79:93:da:c2:cf:
0a:01:8a:17:a1:e8:6b:01:67:9a:c3:cb:47:4c:61:f7:55:a1:
b3:4d:52:a8:e9:a3:90:58:81:41:ca:9f:6e:75:12:8d:22:8e:
9f:97:af:f2:95:91:e0:80:0a:1f:91:7d:ec:93:a4:7d:a5:96:
71:d5:2d:5b:df:ff:0d:ea:67:f0:f4:df:13:15:ec:32:ac:99:
d8:5d:04:0e:7f:09:39:5a:99:66:92:b4:b5:08:98:2d:f0:90:
06:d7:e7:8f:24:a0:ff:ac:8b:d5:6b:20:86:82:31:47:32:64:
f8:f6:8f:57:a3:08:a4:4b:e6:7b:5a:93:cf:8e:7b:e5:bb:38:
43:d7:64:2d:ed:62:ea:22:55:81:5d:6d:57:18:83:9d:ec:70:
e6:6d:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:08 2025 by rpki-client