Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/SJ31osOZq8GAkUzTcgDMle6L-Ko.roa
File: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (raw, json)
Hash identifier: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=
Subject key identifier: 48:9D:F5:A2:C3:99:AB:C1:80:91:4C:D3:72:00:CC:95:EE:8B:F8:AA
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01942444C1DBAB34AF0FB4D356B4D7063985
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/SJ31osOZq8GAkUzTcgDMle6L-Ko.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 45.129.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c1:db:ab:34:af:0f:b4:d3:56:b4:d7:06:39:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=489df5a2c399abc180914cd37200cc95ee8bf8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:86:95:22:4e:55:7a:f0:b9:49:68:65:3e:
54:4e:2a:e5:6d:57:ce:df:df:f1:ae:6b:42:91:32:
a9:f3:11:53:20:78:09:dc:80:62:8c:ac:26:54:15:
20:36:eb:e0:0d:54:69:0c:b5:6a:4a:47:3f:ec:c6:
41:0d:50:54:0a:30:ca:00:2d:55:fd:0f:ba:34:da:
f3:88:f8:2f:98:8c:eb:3a:81:1b:cc:8d:bd:3c:0a:
1d:b1:45:06:1f:d4:36:7c:69:fc:9c:a1:45:7d:57:
a2:d5:86:38:3a:56:28:7e:b7:4d:15:e5:9c:35:75:
d5:b1:0a:8e:4e:77:56:6e:48:04:a3:65:fb:d8:77:
5e:dd:48:94:80:ac:e0:45:0f:6e:21:83:0f:75:ca:
16:d4:5d:d8:9b:fc:8f:db:48:a0:f2:88:2a:05:52:
3b:fb:9c:b5:97:e4:9a:10:b6:3d:de:8d:ae:94:42:
d3:26:b4:72:28:f8:8f:c1:8f:0a:c4:1b:1d:2f:ab:
f9:87:31:df:cd:56:f1:4f:51:34:54:04:46:90:4a:
8c:69:3e:3c:89:53:f9:a2:22:70:2b:ff:d6:85:05:
03:89:0a:81:f5:1d:8e:52:c9:27:f5:60:fc:30:a8:
57:b5:39:a5:db:da:3b:6b:28:79:d4:e6:b8:50:76:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:F5:A2:C3:99:AB:C1:80:91:4C:D3:72:00:CC:95:EE:8B:F8:AA
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/SJ31osOZq8GAkUzTcgDMle6L-Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1d:df:2a:e7:60:e2:e5:58:5b:c7:d5:75:72:a4:2e:01:10:
4f:68:41:16:8e:5f:9f:ab:69:63:8f:7f:f9:0b:d0:97:95:20:
4a:bc:ed:1f:aa:65:63:00:04:00:51:7d:ea:76:8b:e1:7c:25:
d7:d6:62:f8:16:7e:56:11:68:b1:13:be:3d:d6:31:b7:fd:e6:
23:8a:29:0f:6a:dc:74:ba:8f:ec:0d:90:d6:4b:55:08:de:49:
18:19:7f:3b:45:6f:7b:56:e1:42:03:ae:15:35:00:e5:93:8b:
5c:e2:de:25:a9:a2:50:3b:2c:2a:96:a2:bc:9d:59:d6:5a:78:
21:68:52:09:12:43:3f:ad:71:f2:c0:86:cb:ac:b0:07:74:e2:
75:49:56:2d:58:8a:5f:f8:51:df:6e:87:8f:f2:38:c1:6f:42:
74:11:33:21:5c:73:c0:39:04:90:8a:89:71:7d:03:01:d4:30:
6c:d0:d5:a4:92:82:f3:f0:17:e7:1d:11:46:cb:6b:dd:e6:56:
1c:77:22:bd:ad:ef:4f:ed:fd:ee:47:51:07:3d:62:b9:74:36:
2d:27:f0:2b:ed:8b:b2:6c:4d:1c:10:b6:3c:e1:8d:60:4d:d4:
0e:a2:43:fb:1e:df:0b:0e:10:cc:ac:7c:ce:0a:be:34:6b:03:
09:b9:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:59:33 2025 by rpki-client