Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa
File: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (raw, json)
Hash identifier: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=
Subject key identifier: 6F:39:9F:C6:6D:D2:E6:16:DE:E8:66:9A:EB:0B:E0:78:B1:22:68:D0
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01951442BE337A7873B293F8816418D9DB2F
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa
Signing time: Mon 17 Feb 2025 14:14:33 +0000
ROA not before: Mon 17 Feb 2025 14:14:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 45.91.6.0/24 maxlen: 24
45.133.152.0/24 maxlen: 24
45.135.224.0/24 maxlen: 24
45.145.18.0/23 maxlen: 24
45.150.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:42:be:33:7a:78:73:b2:93:f8:81:64:18:d9:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Feb 17 14:14:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f399fc66dd2e616dee8669aeb0be078b12268d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:12:89:63:ea:ff:13:bc:f2:14:7d:80:10:
27:fc:3b:ef:a7:2d:0f:80:1f:fb:dd:a7:44:53:0d:
9e:66:dc:7f:92:84:68:55:a2:03:2c:ba:35:a4:37:
71:df:05:89:14:7a:62:13:b7:7d:62:ba:40:68:88:
57:9b:d8:22:bb:23:29:fa:fa:cf:96:1f:98:0f:3b:
2d:5e:73:47:73:43:ae:0d:9e:00:15:7d:89:e5:81:
a3:79:5d:23:76:90:f9:ec:a4:09:66:1d:16:9d:88:
c9:67:aa:bc:18:ad:e6:21:7e:5f:68:c4:35:3b:9f:
e0:15:ff:fc:c8:e7:5e:03:03:b7:c9:53:5b:14:d6:
34:3e:8d:e7:cc:03:4f:fb:4e:0f:b0:70:c6:0b:dd:
51:d0:4c:12:3d:ce:3d:39:97:ca:0c:ce:6c:65:ea:
ff:46:82:21:f6:65:89:39:68:31:9b:ae:19:af:79:
1f:6e:0b:37:71:56:dd:21:b1:62:bf:51:a5:1c:e1:
22:d6:27:25:1a:78:84:c2:f0:3d:d1:7b:77:f2:fb:
f1:da:48:d4:e2:43:62:0f:69:a2:f2:b2:16:3a:65:
b7:b1:21:14:0d:08:3b:3a:fe:af:91:31:0a:bb:91:
67:15:e6:bb:44:ef:7e:d4:c6:56:90:b7:6d:cf:1f:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:9F:C6:6D:D2:E6:16:DE:E8:66:9A:EB:0B:E0:78:B1:22:68:D0
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.6.0/24
45.133.152.0/24
45.135.224.0/24
45.145.18.0/23
45.150.82.0/23
Signature Algorithm: sha256WithRSAEncryption
92:2d:fc:43:9f:f0:e2:4d:36:a5:38:6f:1e:88:67:3e:69:ff:
6a:fe:fc:fe:99:07:73:d8:fc:b3:92:e9:c6:c6:36:b0:a6:b9:
57:3c:fd:16:c5:e0:03:61:41:ac:73:e3:0c:b5:62:ab:2e:c3:
a2:a7:ac:a6:18:57:80:fd:2f:55:38:73:f4:eb:73:ad:81:89:
1c:db:83:4b:40:fb:a1:01:84:63:c3:4b:27:4d:47:c5:ed:1b:
36:76:44:7a:a7:2d:bd:ac:ff:e3:50:9c:66:79:58:78:80:cb:
ae:c1:f1:81:4b:d0:05:ea:9b:f7:e8:5f:80:0f:7e:4b:98:5e:
66:18:8b:a2:53:f4:12:95:b5:fc:3d:2d:0d:6a:b5:79:5c:3c:
f8:57:81:e4:62:e0:c5:8c:c2:92:c5:e8:56:e3:48:43:30:71:
67:34:e2:f1:83:9a:9a:a2:eb:ba:87:fc:31:18:90:cf:d1:ff:
9e:b2:38:ad:3e:13:e0:74:d2:a6:3f:f7:63:74:66:57:d0:29:
b1:2c:97:2c:37:d0:0c:b1:31:38:0c:ce:ff:c7:32:a7:11:77:
01:86:f6:6b:e2:03:2f:63:12:12:e8:18:57:cc:b3:aa:7e:9a:
69:5d:33:f9:cd:46:68:95:be:2c:ae:ac:84:cc:97:1a:68:6c:
17:5f:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:40 2025 by rpki-client