Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/BoW2by1lN0g2YBGtk82GxuU6N7A.roa
File: BoW2by1lN0g2YBGtk82GxuU6N7A.roa (raw, json)
Hash identifier: yruHTpQJiVTW71spIvzrVqpCkH7Qc9ckx2fSF4NvFOQ=
Subject key identifier: 06:85:B6:6F:2D:65:37:48:36:60:11:AD:93:CD:86:C6:E5:3A:37:B0
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23AD55102C0A75FAA40C8203B0A62
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/BoW2by1lN0g2YBGtk82GxuU6N7A.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198690
IP address blocks: 45.14.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:d5:51:02:c0:a7:5f:aa:40:c8:20:3b:0a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0685b66f2d653748366011ad93cd86c6e53a37b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:4f:b3:5b:dd:04:28:2a:07:88:c7:8a:69:
a7:da:59:4e:1a:e1:11:f7:88:18:d9:52:ec:70:5a:
cb:c0:0e:6b:2a:d8:fc:74:09:73:6e:1b:ab:34:fa:
b8:1a:4b:7d:1f:93:9f:bf:0d:ed:bc:17:9c:92:50:
cc:c1:dd:89:50:63:d4:41:c1:55:aa:4c:f1:82:8b:
0d:f3:02:e1:3d:c1:f9:e3:95:0d:3f:48:d8:78:78:
e7:18:5f:87:93:e0:3e:78:41:65:a4:8a:e5:04:7c:
9b:ec:49:96:fe:17:f4:74:98:c7:88:5d:b3:dc:c1:
74:00:80:a1:4a:7a:2d:0d:51:e1:54:f2:7e:7d:7d:
e0:35:20:6d:42:6a:a5:56:ce:34:91:6c:32:f5:72:
b6:62:64:84:9e:20:ca:80:be:7f:46:db:05:33:c3:
5a:a8:ea:f4:7d:29:c7:99:91:02:25:ef:75:08:2e:
79:94:b2:a9:c9:1f:2c:a0:d1:23:40:43:f7:b3:63:
ce:ea:7a:28:c7:b6:cd:1f:6e:30:5e:6e:3b:58:f0:
7d:54:a3:30:9f:16:89:9f:5d:9a:09:48:98:d5:a7:
68:ce:54:4f:6a:0a:b0:64:12:de:72:b0:13:12:40:
12:3b:6b:21:f7:5c:ed:d5:66:76:39:e6:cd:f9:04:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:B6:6F:2D:65:37:48:36:60:11:AD:93:CD:86:C6:E5:3A:37:B0
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/BoW2by1lN0g2YBGtk82GxuU6N7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:fb:8c:85:26:62:9e:2a:0c:18:05:86:f6:06:72:f6:12:3b:
a9:5d:7d:1f:29:ab:3a:f7:fb:66:3f:6c:f4:ac:a4:df:96:47:
8e:da:a1:de:5b:ac:11:6c:a2:d3:c0:82:14:8c:c4:2b:81:7d:
48:df:ca:2e:4f:de:81:cd:7a:66:8e:80:d4:77:d7:9c:8f:4c:
ec:26:cb:19:81:29:08:e5:b4:72:25:a9:64:c1:b8:0e:f1:a7:
29:57:d1:34:64:e3:f2:3f:dc:f0:94:e1:3f:ef:8b:87:b6:29:
26:f3:c1:3a:9c:15:38:cf:39:9b:1e:1e:70:3e:42:ed:48:7f:
b5:cd:de:b2:1c:ad:4d:f7:16:9a:b2:3b:20:6a:47:92:f1:0d:
a2:c3:aa:ce:55:5e:da:fa:96:64:3b:11:89:7a:fd:60:63:57:
ae:9c:5c:84:ff:da:93:08:65:a4:70:ba:0c:01:d8:34:94:09:
45:a5:41:61:17:10:16:66:3d:06:26:fb:61:68:d4:cb:68:a3:
51:b3:1e:df:97:fe:f2:d7:f6:f9:7a:a0:58:80:df:37:39:c5:
a9:45:17:cc:59:d8:a6:37:50:ed:5e:05:02:39:b6:41:ea:99:
24:9d:a7:48:77:0b:72:4d:ba:36:09:ae:79:06:86:79:f5:e4:
cb:b1:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:25 2025 by rpki-client