Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa
File: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (raw, json)
Hash identifier: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=
Subject key identifier: 6F:95:20:E8:D3:C9:A3:65:ED:7B:36:3C:51:5C:F1:9E:63:C4:FA:2D
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 0194228D16F9C7D557CDD7AD55BAAB4A51D4
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204572
IP address blocks: 45.86.216.0/22 maxlen: 22
2a0e:e880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:16:f9:c7:d5:57:cd:d7:ad:55:ba:ab:4a:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f9520e8d3c9a365ed7b363c515cf19e63c4fa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:d5:d4:27:cd:b5:a7:3a:37:9f:a9:b4:17:
23:9d:fc:99:38:95:b0:30:9d:ee:b1:1c:35:89:f3:
f2:fe:8b:d5:f4:29:bf:1c:dc:04:42:bc:fb:00:45:
8f:b6:82:29:25:8b:00:53:95:75:61:c2:0a:86:20:
b0:01:f4:6c:eb:ac:78:3c:cf:9f:f8:4c:82:dc:63:
df:bd:ea:25:92:f3:ef:fb:0b:03:87:96:2d:ce:9a:
30:3d:14:2e:04:c3:1c:c8:ea:87:85:bd:49:0c:ea:
93:d7:1b:08:50:61:c9:0f:1b:2a:09:4e:62:ef:26:
07:f6:a3:30:30:44:5b:8b:33:ec:f3:fb:5c:9b:1d:
d1:cc:5b:ba:c9:14:02:09:0b:97:e9:7a:ab:39:6a:
a4:e2:85:3b:7c:c9:7b:ef:56:10:61:20:35:c3:b7:
08:5c:de:ba:ca:24:2c:ec:38:c7:db:07:e1:67:5e:
f0:4a:c7:26:c2:91:d7:e5:e1:d7:02:fe:01:f1:3a:
bc:5f:f9:fb:a1:4e:34:0e:ab:93:9d:f9:ad:db:82:
18:4d:4a:84:5d:82:70:ed:18:f1:e6:39:21:8a:75:
1e:b2:cb:79:40:c2:1c:8e:63:9d:19:f5:41:be:f5:
a8:21:8c:c7:f3:77:06:3b:81:23:f0:dd:e8:86:6c:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:20:E8:D3:C9:A3:65:ED:7B:36:3C:51:5C:F1:9E:63:C4:FA:2D
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.216.0/22
IPv6:
2a0e:e880::/29
Signature Algorithm: sha256WithRSAEncryption
43:0e:4c:6e:a7:92:80:cf:3f:82:2c:30:30:2b:13:ca:4a:24:
4c:d2:ce:86:9e:cc:30:15:22:38:7a:9d:f6:35:95:7e:d7:2a:
46:c1:7d:64:2e:0e:4e:56:5c:f1:20:d5:4f:78:d2:0d:5b:7b:
c0:00:9c:d3:11:ff:8c:f4:53:ee:49:f6:50:69:cc:c5:45:60:
f7:90:ce:00:d9:97:b8:c2:34:c7:c8:e2:2e:4c:db:23:02:4d:
69:29:ee:b5:94:de:e4:35:5f:4f:03:b0:b7:5c:65:3a:4c:29:
84:2c:c5:42:a0:4c:89:a5:fd:89:bb:ea:b4:1d:3c:a3:3c:bb:
ec:86:a3:dc:ea:10:9b:9b:2b:d4:c9:8d:3e:8d:1e:b7:32:44:
f3:d5:32:1d:48:fd:30:64:14:b3:f1:ef:07:85:ba:fa:a0:41:
2c:c7:6a:c1:24:eb:d9:d6:80:9b:8b:18:cb:18:5e:14:1e:be:
ab:b3:26:85:db:b5:a6:5f:36:80:fe:38:19:af:8f:86:94:50:
23:d8:0b:63:58:20:00:96:ea:20:71:59:c4:24:eb:53:9c:61:
c8:62:e6:97:d0:68:59:63:3f:c5:30:ff:0f:17:12:65:1a:68:
57:81:1f:36:ef:03:ac:7d:52:f0:ad:fe:1f:79:6c:c5:d1:90:
d6:13:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:33 2025 by rpki-client