Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/X1siZ9Qw-Qdr1rdQOI3YLEys8HM.roa
File: X1siZ9Qw-Qdr1rdQOI3YLEys8HM.roa (raw, json)
Hash identifier: 5qhy7PA4ouPLqHLfVTzhYKTNogFI0I7BWVsffjGnW/g=
Subject key identifier: 5F:5B:22:67:D4:30:F9:07:6B:D6:B7:50:38:8D:D8:2C:4C:AC:F0:73
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0194236A0164C5B1F615B698BFAD330DF8CF
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/X1siZ9Qw-Qdr1rdQOI3YLEys8HM.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44094
IP address blocks: 45.67.230.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
2a09:7c47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:01:64:c5:b1:f6:15:b6:98:bf:ad:33:0d:f8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f5b2267d430f9076bd6b750388dd82c4cacf073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:fc:2e:74:bf:9f:bf:1a:ab:26:22:fb:98:
a0:1d:ec:d8:34:85:fd:49:3f:df:fb:04:b8:1b:52:
52:62:e6:c7:4e:4f:4b:e1:4d:d8:7d:ec:03:98:89:
4f:27:76:94:05:3f:11:65:a8:75:60:e7:6a:b4:ac:
98:34:0a:e6:71:da:80:24:f1:07:57:eb:c6:5b:c4:
62:2c:a6:79:45:3d:0e:c6:6f:47:e8:4e:3c:83:a2:
c3:cc:87:36:37:1a:3b:a9:fb:66:39:e2:e9:9e:96:
d4:67:31:a6:ca:e7:74:89:4b:03:0f:2a:d3:9a:5a:
69:9a:66:88:0f:9a:50:68:f7:53:a0:69:ad:98:02:
04:88:63:f4:65:55:0f:88:29:9b:b8:d6:9a:cb:58:
5c:65:f2:be:2f:ba:e1:f8:69:4c:53:ad:fe:cd:27:
5f:73:f3:0c:3b:20:35:8e:01:d3:b1:c5:46:59:2c:
78:c0:e4:e8:be:aa:a8:65:b6:3c:97:18:79:70:2a:
93:db:8d:0a:a7:fb:06:29:14:0b:11:17:5b:09:5a:
67:68:8f:98:dd:59:a0:d0:17:d7:7b:e1:6d:12:09:
ed:9f:4c:a0:93:10:af:a0:09:ac:34:40:43:b9:1c:
6f:76:bd:9c:01:00:db:cc:0d:33:92:9d:f1:07:6d:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5B:22:67:D4:30:F9:07:6B:D6:B7:50:38:8D:D8:2C:4C:AC:F0:73
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/X1siZ9Qw-Qdr1rdQOI3YLEys8HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.230.0/24
185.250.149.0/24
IPv6:
2a09:7c47::/32
Signature Algorithm: sha256WithRSAEncryption
21:cf:e6:47:1a:ab:b5:35:de:c8:5f:c4:4b:1e:fe:e2:b8:0e:
f7:1f:d3:53:6c:22:42:5d:1a:36:38:77:1f:1d:63:da:b7:55:
39:14:2b:4a:22:f8:0d:05:3d:2c:14:ff:89:51:2b:2f:c9:a5:
dc:71:a4:39:a9:4d:55:7b:cf:71:33:8b:8d:c5:80:d2:cb:39:
a1:b6:54:bc:38:18:fc:69:6a:35:96:cb:70:f9:5d:08:5e:d5:
34:bd:c0:d4:17:15:f0:00:0f:d1:76:90:bb:16:82:de:d4:4e:
ac:80:57:ef:01:eb:da:5a:62:ac:2e:b0:a1:40:26:1f:7f:50:
86:04:c5:51:60:fe:80:89:0c:84:b0:5a:80:db:20:46:1e:a9:
c7:e7:f9:77:76:01:6a:e0:33:f7:ee:9e:19:a3:58:d6:44:6b:
31:fa:b4:69:d9:1c:81:f2:69:46:72:66:bb:89:53:32:34:4c:
2c:9f:3c:aa:95:f7:46:a6:27:4b:d1:60:55:05:cc:7b:33:6a:
37:32:a2:a0:16:d5:a5:2e:01:0a:4f:e6:6a:db:89:c0:39:43:
13:e5:16:dd:98:0b:f4:69:71:4d:97:05:92:00:05:34:3d:ea:
c9:32:a5:5b:12:2a:86:ad:c1:9a:18:2a:b9:0e:c7:c1:01:64:
c1:81:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:41:32 2025 by rpki-client