Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aibPICuSr1Uy0nK_E97YFi4aCS8.roa
File: aibPICuSr1Uy0nK_E97YFi4aCS8.roa (raw, json)
Hash identifier: AtT4NX8Iz99gpJFOdvPwLrVX408Nzp/TkkFGqs541tQ=
Subject key identifier: 6A:26:CF:20:2B:92:AF:55:32:D2:72:BF:13:DE:D8:16:2E:1A:09:2F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB1BC2987E24309FBDF22AFC10A9E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aibPICuSr1Uy0nK_E97YFi4aCS8.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 45.132.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b1:bc:29:87:e2:43:09:fb:df:22:af:c1:0a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a26cf202b92af5532d272bf13ded8162e1a092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:bf:fb:0c:7d:36:42:18:bd:18:9d:0f:43:
6b:97:06:ab:4c:ea:46:70:83:77:6f:1f:cb:5a:6a:
75:31:68:5c:c9:4a:c3:32:5a:32:ee:9e:bc:78:d5:
c5:87:76:f8:fa:39:86:90:3b:89:15:d3:c5:c8:f8:
69:d5:b5:15:ed:aa:3b:58:83:7c:1d:fc:b9:a0:fb:
f4:12:6a:12:cb:55:2a:fa:60:bc:6b:0c:68:9c:7a:
72:35:63:9b:bf:c6:ee:47:49:25:21:31:5c:a6:9c:
97:df:a2:ea:53:f6:7a:67:12:08:9b:9c:88:1b:de:
85:f2:58:81:d5:f6:bf:ac:34:17:39:79:4f:ba:e8:
c0:77:b4:cb:23:a1:30:09:9b:d0:0b:6b:f8:fb:8d:
af:3c:c4:db:05:eb:6d:b2:d9:af:b9:ea:71:96:56:
2c:4e:08:47:8d:e6:18:fb:67:b9:aa:fd:bd:b6:35:
f1:0b:98:fe:bc:fe:01:09:a7:3c:e1:e0:1c:32:13:
31:cf:47:1c:26:7b:2c:bd:8d:0b:78:f2:85:80:46:
92:ef:45:be:50:9d:42:d8:37:8a:0a:6d:cd:9b:20:
40:7a:b2:1b:80:2c:cc:43:0f:56:f3:0c:d3:cb:ec:
8b:50:a4:3a:7b:2b:ff:e2:b8:af:1d:13:0a:7e:67:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:26:CF:20:2B:92:AF:55:32:D2:72:BF:13:DE:D8:16:2E:1A:09:2F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aibPICuSr1Uy0nK_E97YFi4aCS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
84:20:72:0e:8c:e9:c1:90:f3:2f:3b:ab:c7:3b:a9:4b:74:73:
31:7c:12:06:f8:33:ba:f1:ca:32:5e:61:48:2a:dc:6d:99:42:
0f:8c:a4:16:1d:16:6f:bd:25:b6:7f:36:69:5c:58:b1:42:1b:
77:65:79:56:80:d9:65:d3:c0:0e:1f:bd:63:3b:02:78:9d:0a:
80:ff:90:10:ca:52:08:7c:f8:00:bc:e0:8d:cc:6b:a2:37:89:
78:e5:32:a9:e3:65:45:c9:89:4a:95:69:b3:2d:04:2f:05:61:
07:e6:67:b0:cb:0c:f8:98:57:76:08:d1:cb:cb:19:2e:6d:e2:
ff:52:b9:97:f7:54:15:c8:7b:f5:02:2c:53:36:75:8a:48:a9:
0d:bc:72:e2:ea:3d:a2:55:aa:2c:66:f5:ac:55:38:65:27:67:
56:fe:7c:bb:07:9b:63:cf:6d:d1:b4:45:c7:6e:96:6e:fe:2d:
15:f5:ce:54:94:49:19:17:f6:0c:28:a4:35:9a:2a:52:75:81:
4d:c1:e9:01:42:cf:b4:92:e6:37:c7:1f:33:4c:cd:19:cd:f6:
62:e4:2e:18:d1:be:56:e8:fd:d0:20:0c:42:46:0b:99:c8:2f:
8b:02:24:8b:f0:2a:38:5a:f0:84:0d:32:ca:35:94:2d:cd:66:
67:ba:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:53 2025 by rpki-client