Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa
File: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (raw, json)
Hash identifier: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=
Subject key identifier: EA:BC:0D:D8:7F:53:75:E3:86:6F:BA:BC:1C:FF:09:26:D8:38:A9:27
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01942445569071B691D3D7D98E8DAFF8F2D7
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400395
IP address blocks: 45.155.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:56:90:71:b6:91:d3:d7:d9:8e:8d:af:f8:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eabc0dd87f5375e3866fbabc1cff0926d838a927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:80:cc:75:b4:89:f9:27:4e:4a:af:60:55:
9a:ba:2d:03:b9:31:f7:cf:ae:d3:5a:53:f9:24:9e:
20:f3:e3:dc:d7:22:6f:05:75:27:54:e0:51:b1:b4:
60:4c:08:9e:91:54:04:80:f6:e4:fe:b4:ee:0b:4b:
78:46:42:70:cf:db:b7:4a:b8:1c:63:be:4b:c9:60:
fd:5f:1e:75:6a:36:27:f4:59:fa:a0:6e:d9:c9:66:
d0:b7:7e:c5:00:44:f9:2d:e7:e2:11:7e:e6:10:0f:
6a:20:00:05:71:6b:48:e1:25:d0:cb:1c:48:e8:dd:
4d:3b:c1:cf:74:4f:57:48:5a:b8:60:90:08:ec:7c:
01:b4:b2:87:9a:f1:92:3c:5c:9e:9d:c1:d8:8e:ca:
5c:63:ca:50:a9:9c:4a:e3:74:60:ca:ee:ed:e0:22:
07:53:a3:b0:17:07:1b:7e:22:8d:2c:8d:c7:9d:1d:
06:4c:46:d8:78:27:72:b1:b6:68:73:c0:e2:42:8c:
0a:f6:60:bb:1f:ec:a5:b7:4d:67:27:3e:f6:f5:2e:
7f:fb:ad:10:b7:05:b9:b5:a9:bb:53:78:99:0b:44:
0f:6d:98:00:07:12:b1:5b:fb:45:20:27:ad:1f:0b:
54:88:0a:4e:b1:61:38:ea:1e:d9:dc:1c:76:3a:c3:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:0D:D8:7F:53:75:E3:86:6F:BA:BC:1C:FF:09:26:D8:38:A9:27
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
Signature Algorithm: sha256WithRSAEncryption
94:22:1b:c0:41:3d:6e:ca:af:5a:09:99:e4:af:9b:37:42:40:
45:f9:6b:f0:16:7c:9c:1d:3b:0c:e1:b2:21:28:7c:f9:d5:63:
b8:49:70:56:a7:96:2c:71:46:fd:fd:86:2b:41:0e:99:1f:6a:
d8:3d:b1:21:e2:88:62:95:2c:48:c4:1d:0e:c6:a9:ac:73:01:
a0:eb:a7:8b:f8:2e:23:c7:ad:8f:6c:15:ec:4e:e8:e4:fa:bc:
41:f0:77:24:df:c7:ff:38:fb:f6:d3:b7:56:b8:62:4c:43:a1:
c4:9c:80:39:a6:59:18:2e:15:bd:d0:ee:c5:81:05:4c:e5:86:
54:95:f9:8d:13:28:53:63:41:5d:2d:c8:d2:43:99:b0:20:0c:
3c:60:5a:bd:1f:7d:57:b6:f3:68:1c:09:5c:65:15:53:75:62:
8d:37:72:3c:4b:57:85:b2:49:21:cb:29:9e:29:6b:15:8c:a6:
db:eb:85:d5:c0:28:a2:75:68:2e:56:5b:f7:fd:2b:ea:a6:58:
32:43:26:96:7d:63:92:49:a7:8b:92:29:8d:5d:09:84:32:0b:
1c:91:3b:f4:5b:e0:c5:83:20:01:4a:3b:d8:75:69:ed:d8:60:
17:80:2c:a7:31:bd:0a:ac:09:b6:6f:c5:84:29:a9:5c:4b:84:
b8:59:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:52:30 2025 by rpki-client