Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa
File: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (raw, json)
Hash identifier: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=
Subject key identifier: 2B:39:A7:8B:BC:5E:03:B1:A7:8B:49:18:9C:73:B9:75:A2:61:E4:C9
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 0194228E1997B3731FCD13400BFA655DA27F
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa
Signing time: Wed 01 Jan 2025 15:48:45 +0000
ROA not before: Wed 01 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39452
IP address blocks: 45.13.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:19:97:b3:73:1f:cd:13:40:0b:fa:65:5d:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b39a78bbc5e03b1a78b49189c73b975a261e4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:9c:73:ad:f3:5d:7c:a1:34:c1:25:95:d2:
6c:b1:ee:4f:0c:fb:f2:1b:2b:9e:d9:ed:cb:4a:5a:
c1:07:07:f4:0d:2e:52:1f:97:88:dc:50:3b:6b:03:
80:b0:7f:d3:71:25:55:83:40:f1:a2:a3:dc:fe:1c:
85:7d:59:6f:3f:f5:d3:a5:4a:89:f0:50:70:01:b7:
9b:57:24:57:fe:26:b4:9f:3a:f7:c2:1c:5a:b6:0b:
c6:70:fc:2a:2c:ba:f3:c4:d5:1b:ff:ae:d5:2b:67:
a3:7e:68:39:1f:b7:18:4e:8f:77:f9:f2:fd:80:fa:
8e:55:d6:5b:04:22:55:77:60:54:74:dc:39:9c:cc:
33:69:f6:f4:34:e8:be:62:2a:1c:a0:a4:9b:1c:bc:
4c:f8:6a:9b:5b:5f:ce:1d:5a:a0:fc:1a:7b:19:3b:
7e:59:ca:23:cb:ce:7f:ed:68:8f:ac:b4:7d:d8:ec:
a9:22:f3:14:79:cf:4c:41:f4:8b:08:04:4a:81:78:
74:ec:58:45:32:72:05:e0:55:66:b6:58:4b:a3:69:
b9:b0:93:83:09:6f:46:76:14:6a:d5:fd:b3:b8:ea:
a7:09:82:93:00:c1:41:fd:b8:07:2c:06:a7:a7:bf:
23:06:02:59:29:33:16:c7:74:9e:d5:2c:00:a8:ee:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:39:A7:8B:BC:5E:03:B1:A7:8B:49:18:9C:73:B9:75:A2:61:E4:C9
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.40.0/22
Signature Algorithm: sha256WithRSAEncryption
96:15:3b:23:29:b0:51:72:6c:4f:7f:14:37:85:e8:09:94:1c:
f2:cf:40:cc:5a:18:b4:62:2f:9c:52:44:a3:7c:db:95:76:b4:
23:75:8f:01:5c:87:8d:a1:d3:a5:79:ae:36:ee:1c:f2:48:f0:
e6:8d:84:c4:ca:55:aa:48:2e:39:56:66:50:2d:48:06:9d:3b:
7f:00:7b:c3:89:32:77:a0:aa:5b:82:67:13:e1:3a:f6:44:b0:
38:46:f0:64:fc:bd:b3:a6:c4:b7:7c:32:5a:f1:a0:4c:e7:fe:
2f:5b:9a:4a:3c:1e:c3:57:b5:61:8c:36:05:bf:24:9f:16:36:
93:39:4f:ed:66:d6:40:36:1d:6a:58:03:ee:6a:87:51:ec:cf:
52:7d:c8:fc:50:bc:d6:27:2a:eb:a2:6f:4d:bf:40:99:b7:bf:
f2:ac:3f:aa:b9:d0:27:ba:b3:73:96:17:90:44:68:a7:7d:df:
43:f5:4b:84:80:81:55:03:48:73:c7:d5:58:f4:97:8c:b6:ea:
de:df:f7:9f:93:3d:01:a4:0d:4c:34:11:f7:7f:c7:63:22:7b:
09:44:d1:c4:e2:f8:1c:f8:96:d4:78:e9:76:ff:c2:2d:e5:68:
00:1d:87:e7:ab:e1:fc:a6:f8:85:8f:e2:5a:06:83:b1:ec:9b:
d2:aa:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:10 2025 by rpki-client