Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/a2k-bxYcmm3kHfce2aU5FLKv-4E.roa
File: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (raw, json)
Hash identifier: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=
Subject key identifier: 6B:69:3E:6F:16:1C:9A:6D:E4:1D:F7:1E:D9:A5:39:14:B2:AF:FB:81
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA61A0EEAB9A065780C15753462B46
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/a2k-bxYcmm3kHfce2aU5FLKv-4E.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.135.8.0/24 maxlen: 24
45.135.10.0/24 maxlen: 24
45.136.216.0/24 maxlen: 24
45.136.218.0/24 maxlen: 24
45.138.76.0/24 maxlen: 24
45.138.78.0/24 maxlen: 24
45.139.32.0/24 maxlen: 24
45.139.34.0/24 maxlen: 24
91.228.231.0/24 maxlen: 24
91.228.251.0/24 maxlen: 24
91.229.25.0/24 maxlen: 24
185.76.150.0/24 maxlen: 24
193.35.231.0/24 maxlen: 24
193.110.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:61:a0:ee:ab:9a:06:57:80:c1:57:53:46:2b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b693e6f161c9a6de41df71ed9a53914b2affb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:9c:4f:46:33:e9:3a:d0:75:ab:99:41:9c:
8b:8d:25:41:7c:fa:1a:ec:f0:46:ec:cc:c6:79:25:
40:02:73:16:ab:cb:ac:e9:60:a4:14:c8:0e:c9:fc:
4b:80:bf:2e:e3:8c:92:4f:0b:02:c9:1d:95:07:6a:
38:86:72:e0:3c:91:4c:0a:7a:6a:d0:db:d7:d4:3a:
27:b7:8c:8a:72:b6:0a:18:a4:b7:54:47:1e:87:e0:
40:e1:fc:37:03:36:59:3c:e5:2f:4e:5f:c3:f3:24:
2d:ae:43:34:5c:76:64:08:85:81:03:0c:3b:1f:40:
bb:99:29:15:4c:e5:22:23:c7:8d:78:46:21:90:fb:
43:5e:04:f4:c0:34:10:b9:d0:60:06:25:7b:71:70:
f7:8b:64:d7:37:16:fb:13:36:14:44:9c:ed:cd:d2:
d7:8c:78:fe:27:d7:31:e7:7e:ba:ea:35:c8:6e:e6:
d1:8e:37:82:29:4f:c1:85:21:34:27:bc:cd:bb:00:
1a:f2:4b:03:24:83:ae:d4:8c:82:5e:92:55:d8:a3:
ed:02:ad:11:f6:1d:3c:18:90:1f:2b:be:15:1c:f5:
65:58:e2:c0:98:84:4f:1c:b9:b5:e0:56:db:ca:52:
62:7b:5e:f9:72:78:1a:d0:26:06:fe:c6:3c:86:63:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:3E:6F:16:1C:9A:6D:E4:1D:F7:1E:D9:A5:39:14:B2:AF:FB:81
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/a2k-bxYcmm3kHfce2aU5FLKv-4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.8.0/24
45.135.10.0/24
45.136.216.0/24
45.136.218.0/24
45.138.76.0/24
45.138.78.0/24
45.139.32.0/24
45.139.34.0/24
91.228.231.0/24
91.228.251.0/24
91.229.25.0/24
185.76.150.0/24
193.35.231.0/24
193.110.134.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:54:1f:15:b5:56:e0:e0:47:75:98:3e:0d:8a:b7:f8:fc:c3:
a5:c1:f9:a8:75:6a:66:fc:9d:0b:ce:d9:11:19:d9:f3:b7:87:
8d:80:b5:27:19:ba:86:fb:e6:0a:99:28:6e:d9:11:d4:f6:82:
7e:29:28:f7:f4:d6:46:56:82:00:4a:cd:e1:29:dd:62:bb:92:
1d:e4:36:48:93:2b:05:84:cc:ad:49:80:89:0c:e0:05:27:3f:
6a:b2:5c:09:9f:09:11:f4:9d:9c:5c:9c:2f:fa:ae:c6:9b:92:
c9:b7:10:b3:90:94:2f:74:b6:65:a4:ef:ee:33:ad:22:a7:5a:
53:66:ab:42:c9:13:5f:6b:22:41:57:8b:c7:5f:90:85:84:db:
5b:63:e1:ba:37:70:d5:57:53:be:cd:37:26:1b:be:94:11:53:
7f:33:e3:a9:86:e5:8c:68:bf:39:62:ad:2c:e1:a6:99:cd:f6:
1b:71:33:4d:a6:e2:46:bc:05:82:5c:1a:5b:9f:08:b8:b7:1f:
c8:07:0b:44:95:4d:d1:98:18:0c:6e:bd:04:ab:d9:4a:2c:08:
03:ee:6f:d0:9e:61:6a:a2:c1:a6:ed:4b:cb:b8:3f:e1:49:04:
4c:d7:c8:bc:8c:19:91:b7:14:57:a8:25:c3:1a:44:59:60:19:
de:f5:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:42:23 2025 by rpki-client