Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/u0FRx2j9PY9XanBbcgTrVe_Co_s.roa
File: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (raw, json)
Hash identifier: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=
Subject key identifier: BB:41:51:C7:68:FD:3D:8F:57:6A:70:5B:72:04:EB:55:EF:C2:A3:FB
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 0194274890C991D76726BFE9DD5D55D9EF1F
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/u0FRx2j9PY9XanBbcgTrVe_Co_s.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 45.9.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:90:c9:91:d7:67:26:bf:e9:dd:5d:55:d9:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb4151c768fd3d8f576a705b7204eb55efc2a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:33:e8:58:bb:e4:2d:da:21:70:6b:a7:a4:
b7:01:18:74:9c:57:c4:df:74:7d:47:04:e4:1e:93:
30:49:92:1b:25:51:79:dc:6e:b7:63:71:17:4a:36:
85:5b:6d:3b:39:c5:ca:8e:10:e9:85:41:41:a8:91:
df:69:23:0c:42:79:17:fe:49:bd:a8:cf:8b:c9:e3:
17:1e:bf:55:06:f1:51:85:09:96:64:3d:ea:2b:10:
23:19:07:af:27:6a:ac:cf:82:0a:0f:d9:8c:69:2d:
9c:68:8e:9f:3a:1e:2c:3f:16:af:82:06:17:6b:c8:
1a:c1:ad:dc:f1:fb:25:80:8a:24:fe:de:b7:f5:f9:
46:31:d9:b2:86:17:85:85:2c:2f:ca:fb:3d:2e:9f:
55:3a:40:05:cc:15:b2:15:8b:bc:c6:44:bd:6f:66:
d3:0f:fd:5a:47:ed:a7:27:08:99:da:10:00:ea:1f:
9d:c6:e0:97:f5:7c:ec:d3:97:34:c2:d3:5e:e2:c5:
d8:f3:dd:54:0f:ea:20:8c:32:54:51:65:96:f9:02:
76:44:5f:d6:22:45:10:85:6e:15:5b:2c:fc:ed:7b:
5e:9c:19:80:59:19:99:6f:ae:c8:e7:f2:c8:51:4c:
23:1b:b9:32:78:04:41:b6:ad:ed:35:94:ff:94:f2:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:51:C7:68:FD:3D:8F:57:6A:70:5B:72:04:EB:55:EF:C2:A3:FB
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/u0FRx2j9PY9XanBbcgTrVe_Co_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:35:49:5f:16:76:69:6c:ba:55:8f:28:81:ee:81:82:d6:17:
3d:bb:06:53:0d:3e:60:db:b3:ec:c6:c1:a6:0f:19:b3:82:ee:
aa:b3:41:57:3c:57:50:e1:0e:03:c6:94:e1:76:ea:c0:31:83:
24:a0:37:32:05:de:0c:2d:70:fe:95:0e:94:fd:a0:20:28:a4:
49:8a:85:5b:c6:67:19:5d:59:88:ec:10:3c:9c:39:26:07:7e:
33:6c:64:89:e1:84:4a:87:3e:ca:8e:9a:2e:70:57:50:c7:65:
73:cb:f8:32:53:9b:9c:fc:19:8c:6b:df:ef:58:62:5d:0c:cc:
05:f3:f1:6e:fd:fe:6d:d0:ff:a0:5e:04:f9:15:88:cb:15:12:
62:f1:9b:4c:cc:01:8e:9b:3e:de:d4:4d:00:14:c6:66:cb:07:
86:3c:f6:33:6a:47:ee:99:31:3c:8e:fe:5d:32:de:d8:ec:3e:
de:80:70:fd:00:04:76:de:82:86:4e:c3:bb:d5:0d:53:96:2b:
b9:e3:e9:0b:bc:82:7d:b6:3d:72:30:31:ca:82:0e:cb:cb:c3:
a9:72:4c:0e:e6:ff:11:dc:ae:2a:c7:e0:39:55:f8:3a:6f:ff:
5b:d9:70:13:66:77:58:32:fd:fa:6e:f4:4a:5f:1c:9a:29:9c:
7b:77:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:56 2025 by rpki-client