Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/vKytNfbEF9joRT3eNK0fcMnnPsw.roa
File: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (raw, json)
Hash identifier: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=
Subject key identifier: BC:AC:AD:35:F6:C4:17:D8:E8:45:3D:DE:34:AD:1F:70:C9:E7:3E:CC
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 019425FD4066DE5382859C1271D967675959
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/vKytNfbEF9joRT3eNK0fcMnnPsw.roa
Signing time: Thu 02 Jan 2025 07:49:01 +0000
ROA not before: Thu 02 Jan 2025 07:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202270
IP address blocks: 45.130.44.0/24 maxlen: 24
185.207.225.0/24 maxlen: 24
2a13:6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:40:66:de:53:82:85:9c:12:71:d9:67:67:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Jan 2 07:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcacad35f6c417d8e8453dde34ad1f70c9e73ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:d6:3b:66:f1:5b:44:86:65:a2:70:20:da:
44:77:50:2c:3c:c4:81:52:d1:f6:8f:21:3f:bc:5c:
c1:1e:31:02:37:2f:31:8b:fd:f5:a0:c9:aa:91:14:
41:98:34:da:4e:7b:45:de:2a:ce:25:c1:6f:3a:25:
50:2c:c0:2c:c6:9f:d7:c1:8e:f2:1d:14:93:fd:92:
6d:cb:34:83:14:9b:09:2c:3e:a4:9b:25:8a:20:be:
9a:42:76:5e:ec:89:54:c7:db:11:c8:88:35:ac:97:
63:63:68:32:38:bc:7e:74:ac:3a:3b:30:40:4e:c9:
30:2c:aa:b1:e0:65:c0:32:97:b8:04:a3:70:dc:8b:
90:a3:82:86:31:30:da:aa:43:d4:7b:c7:79:06:0f:
fd:c0:95:cf:40:46:b5:4f:68:87:95:3d:ae:7d:f3:
66:76:94:4e:1e:0c:6f:b3:ec:bb:a2:4c:b8:f7:59:
f8:98:28:1c:d8:83:bd:c6:2e:94:8f:32:5f:db:03:
bb:cd:5a:96:5d:37:f5:28:de:6d:cc:bc:7b:7d:16:
6c:11:00:05:6f:39:4d:a9:bc:d6:ef:36:bb:54:65:
7b:32:72:3f:e0:97:a0:11:05:d9:7a:22:90:63:03:
68:e3:5a:40:37:e1:98:3e:8f:b3:1e:44:bc:2d:b4:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AC:AD:35:F6:C4:17:D8:E8:45:3D:DE:34:AD:1F:70:C9:E7:3E:CC
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/vKytNfbEF9joRT3eNK0fcMnnPsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.44.0/24
185.207.225.0/24
IPv6:
2a13:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:c8:d8:e7:2b:4c:39:23:f4:89:78:3d:44:6d:ee:75:a8:20:
48:d7:92:29:3c:6d:be:10:26:6d:98:ce:21:41:e5:98:57:0f:
2b:6f:c9:f3:26:4c:88:4a:0f:bb:5d:a6:9e:3a:fc:97:9c:46:
8c:d9:fd:8d:05:ac:8d:3d:5d:e9:e0:91:63:4e:3c:85:9e:4b:
67:6f:86:d3:51:d8:25:74:f1:a2:68:92:db:46:8d:2e:d1:9a:
08:29:dc:51:94:d2:2f:84:34:21:e2:92:f1:3c:8e:38:a0:fd:
c2:9a:01:f9:75:dc:5f:9b:59:93:59:7e:d4:c4:56:0d:c1:7c:
da:a9:1f:c9:92:c7:66:3b:30:2b:6b:c1:5c:29:88:24:d5:fa:
95:27:c6:32:bf:1e:0a:a2:77:14:39:65:1f:43:79:d0:19:c1:
4e:b4:15:db:7b:6f:3c:06:87:22:27:91:52:3d:49:6d:81:13:
89:72:67:93:84:3b:7e:f6:10:ca:90:c8:9a:26:e4:68:52:47:
cf:3d:e5:95:9d:00:e6:2e:55:8e:ee:c5:bc:16:34:e1:f2:46:
32:77:61:7e:2c:59:2b:12:57:41:9c:24:e5:c1:a2:14:0b:5a:
af:cf:ab:52:e5:2f:bb:38:a4:40:c0:29:35:15:ad:e5:a9:3c:
8c:9a:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:41 2025 by rpki-client