Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/s_Td9RTVwZTARJ4LUd8kJzxBEl8.roa
File: s_Td9RTVwZTARJ4LUd8kJzxBEl8.roa (raw, json)
Hash identifier: JmKEHROa2IJU+V2TwzhNpBZ8RLdQ92Y2hr7k+3uKt0o=
Subject key identifier: B3:F4:DD:F5:14:D5:C1:94:C0:44:9E:0B:51:DF:24:27:3C:41:12:5F
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0195D3B2429191252F45A5C62D7CD6776EFC
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/s_Td9RTVwZTARJ4LUd8kJzxBEl8.roa
Signing time: Wed 26 Mar 2025 18:23:49 +0000
ROA not before: Wed 26 Mar 2025 18:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.90.147.0/24 maxlen: 24
185.227.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:b2:42:91:91:25:2f:45:a5:c6:2d:7c:d6:77:6e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 26 18:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f4ddf514d5c194c0449e0b51df24273c41125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:97:41:e9:1b:1f:7d:9b:7d:2b:35:e5:6c:
a7:44:5a:ab:20:d8:7b:8d:81:26:e7:2f:04:6e:34:
3c:cc:5e:33:02:d8:08:26:5b:bb:5b:fd:b9:f0:29:
06:74:4e:71:39:ea:54:24:83:bf:b0:8c:48:85:d7:
16:97:74:5b:1a:9c:0d:59:f1:c6:c9:42:d1:24:11:
bf:92:3a:1e:8d:42:ed:20:c8:b5:39:71:7e:46:9c:
44:fb:25:dd:35:05:b2:12:78:dc:fd:bf:be:26:9b:
45:79:19:d3:02:65:2c:16:66:96:5e:f6:dd:6f:95:
b4:1b:6a:0c:e1:2a:0b:ec:44:3a:94:30:e1:5e:11:
ca:81:1b:d8:e3:2e:4f:8a:f6:0a:88:c0:79:f3:f7:
87:6a:7c:cc:f3:c1:21:17:12:a0:ed:13:01:c8:d1:
2a:b0:63:9f:4b:2d:27:ad:ee:57:ce:ad:3f:e5:eb:
02:e2:cc:60:5a:27:a7:35:27:ee:1d:4a:27:43:a5:
b5:be:3a:ec:64:f5:0c:25:e3:b5:18:f2:75:80:8a:
10:24:5f:ed:75:06:c3:23:59:76:8e:3d:8d:a5:0f:
31:7b:8c:81:ff:94:d0:5e:fc:a1:b4:0e:b3:4b:a0:
33:05:53:41:81:76:37:a1:63:42:85:12:c6:1e:d1:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:DD:F5:14:D5:C1:94:C0:44:9E:0B:51:DF:24:27:3C:41:12:5F
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/s_Td9RTVwZTARJ4LUd8kJzxBEl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.147.0/24
185.227.69.0/24
Signature Algorithm: sha256WithRSAEncryption
de:ae:84:2e:c1:9a:44:60:8b:58:ca:11:51:c2:f3:bc:69:d7:
9f:c7:50:d5:60:13:7f:3c:a6:82:d4:74:66:da:c8:b5:73:33:
64:c6:75:7f:5d:2b:12:d0:1b:81:64:85:37:17:c3:63:48:02:
31:53:87:93:3c:ce:96:ac:5e:2f:5b:98:ee:43:f8:9d:87:33:
11:fa:e8:ee:ad:7d:02:29:80:94:19:23:87:4a:fc:92:06:c3:
7a:5b:ac:4f:62:81:32:26:b8:32:f7:fa:be:7d:aa:65:70:d9:
dd:cf:05:d5:f3:f3:6c:ca:6e:5a:47:35:10:bd:35:7a:7b:95:
06:05:a7:63:49:f2:3b:f9:86:0f:91:a8:b8:e6:ea:4f:9d:5f:
fa:cd:20:b2:18:23:15:ac:87:8e:7a:54:c1:55:07:75:84:08:
fa:7e:d2:bd:ee:21:ed:07:f9:c2:ca:8c:41:07:b6:49:2f:2a:
86:52:78:b4:ec:e4:ce:45:37:4a:e2:62:42:7d:4b:71:f6:69:
25:e6:53:eb:4f:3e:85:7a:0d:22:c7:dc:5f:4c:cc:4f:f9:ad:
4f:28:3d:89:c6:21:a1:64:b6:6d:46:70:7f:dc:77:01:ea:77:
7c:1b:35:dd:53:88:3b:f8:9f:eb:a4:a5:18:7f:0f:82:83:79:
d2:a3:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:00:40 2025 by rpki-client