Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa
File: DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa (raw, json)
Hash identifier: uCJntwDZ+cDZxpzZO6MqyTDIkNdtXNsEPYp7HWqPHR0=
Subject key identifier: 0C:1B:BA:4B:60:4B:77:16:7D:A9:84:BB:E4:3D:A7:B2:29:76:06:1E
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 019421445ABD6CD85C93DF808E931D58522B
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 45.85.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5a:bd:6c:d8:5c:93:df:80:8e:93:1d:58:52:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1bba4b604b77167da984bbe43da7b22976061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:87:90:bd:dc:16:c8:b8:04:ab:35:72:78:
14:a2:38:f7:62:39:47:50:bd:9e:e2:94:db:f1:2e:
5d:a2:68:5c:51:d4:70:35:1f:f6:1c:56:e5:67:9a:
83:1f:a9:19:17:60:6b:57:59:7e:48:1c:82:e7:c7:
11:8d:be:ef:51:12:b7:ce:f2:5d:7e:41:72:f0:a9:
4a:61:ab:c7:2a:69:fb:91:35:f3:7d:2b:44:bd:d4:
e9:64:ac:ed:59:49:fa:d0:54:16:f0:54:63:1d:2e:
b8:aa:8e:ae:1c:a1:14:12:69:53:48:ce:0b:93:34:
fc:ef:77:44:d5:40:41:7c:d3:40:b2:80:7a:62:1b:
c0:3a:eb:7e:42:83:22:23:34:54:40:61:d7:00:9d:
4a:93:70:a5:6e:50:76:7e:db:ac:90:a1:fa:59:9a:
89:f7:3e:87:fe:a2:b5:4f:6d:0b:79:70:52:1d:dd:
20:30:11:31:ef:6f:e9:b0:d9:c8:ec:7a:14:11:f7:
0f:53:f7:4a:81:5d:5d:3b:7e:a7:c3:25:f2:d1:a5:
f3:f1:bd:b4:fd:90:d0:1a:11:fe:01:08:7e:b1:fe:
cc:b2:89:c7:ba:fa:07:c3:fb:50:2a:5c:41:9f:67:
38:40:58:46:6e:35:91:c4:2b:88:2e:73:c3:1f:33:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1B:BA:4B:60:4B:77:16:7D:A9:84:BB:E4:3D:A7:B2:29:76:06:1E
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
Signature Algorithm: sha256WithRSAEncryption
32:0a:9e:eb:81:4c:56:f4:0e:10:96:f5:fe:d9:85:bf:7a:4f:
b9:0f:8c:c6:41:41:bf:66:fb:96:cb:d0:f0:6a:65:7e:4a:2b:
01:7c:cb:2d:2f:8f:9d:17:fd:8f:62:2a:ba:54:93:43:62:2b:
b4:a0:c7:47:23:08:3f:80:de:db:91:99:23:a7:f0:3b:58:1d:
65:59:53:15:47:7f:19:7c:5c:a9:5a:02:32:c0:0b:6f:04:ba:
9e:b8:70:1f:a5:7f:70:fc:5a:31:8d:16:26:d1:97:ce:dd:af:
61:26:64:f9:75:a8:a8:ba:e1:0e:2c:97:8a:1e:96:e2:5c:ee:
88:62:92:6e:63:bb:b9:56:91:d3:91:b0:9f:8c:0a:0f:df:77:
58:70:6f:97:88:01:28:01:9e:ec:99:29:7f:66:98:ce:c2:31:
51:87:06:4e:83:50:40:89:35:8c:0e:01:bd:a9:63:e8:0a:33:
f0:d2:55:04:bb:23:2c:14:27:5a:91:27:c0:e4:68:77:01:c6:
a0:70:a3:86:03:22:f1:e6:1c:f7:b5:b1:42:cf:a6:ae:f2:7b:
3b:8b:05:0b:bc:a2:54:24:32:4a:f8:2b:90:f3:f3:bc:b8:57:
93:2f:7e:3f:a5:d9:da:01:c5:9f:57:eb:bf:5c:e2:22:01:4f:
cf:c1:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:21 2025 by rpki-client