Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tL13bKYCyLWrgVLq5rj3zQP0U1A.roa
File: tL13bKYCyLWrgVLq5rj3zQP0U1A.roa (raw, json)
Hash identifier: N4y3Mr8huJhN5Fs2Du/pn/lOOu0yx4TD/7dMLYgCxP4=
Subject key identifier: B4:BD:77:6C:A6:02:C8:B5:AB:81:52:EA:E6:B8:F7:CD:03:F4:53:50
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445209D5B97173023F7CF8F5AACBAB4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tL13bKYCyLWrgVLq5rj3zQP0U1A.roa
Signing time: Wed 01 Jan 2025 23:48:17 +0000
ROA not before: Wed 01 Jan 2025 23:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51317
IP address blocks: 45.84.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:20:9d:5b:97:17:30:23:f7:cf:8f:5a:ac:ba:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4bd776ca602c8b5ab8152eae6b8f7cd03f45350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:f5:82:98:c7:da:3f:45:6b:b1:0c:6a:78:
e8:13:42:f5:51:c4:4a:b3:bf:d6:d9:ef:d5:44:9c:
8f:5d:bf:5b:6d:e5:ac:10:bf:57:18:97:f7:01:98:
17:4c:d7:ac:b3:b4:0c:79:dc:d5:18:09:ea:b1:20:
6a:b5:0c:6e:a6:4e:4c:7a:5e:00:c8:c4:ee:d6:09:
ba:09:e6:de:ba:6e:35:9b:76:2e:77:f9:80:ae:fa:
fe:8f:7c:d4:80:9f:ba:99:7a:dc:f7:92:9f:b9:a4:
f3:58:6e:14:4a:1c:9d:e9:58:35:64:9c:85:1e:93:
76:26:f6:22:22:e8:d4:da:5a:62:aa:ea:e8:79:54:
e0:6f:46:79:34:50:9b:29:0c:e5:19:ce:cb:dc:a8:
96:a0:df:54:de:cc:f4:2c:a7:e4:98:d0:4c:47:4e:
a5:fd:37:3f:55:ea:21:91:62:d0:e2:57:13:a1:84:
b0:96:10:50:e9:9d:f8:03:70:75:ef:67:63:36:fd:
ab:8a:8a:13:cc:67:a9:5b:c8:70:b2:c7:0b:9e:bc:
76:f9:e1:54:91:ac:17:c3:cf:4d:29:db:ab:a3:1d:
d4:99:fe:e6:1a:64:15:f3:a4:a1:17:26:e6:48:a0:
03:9b:01:8d:25:29:c5:20:c1:8c:93:d3:0d:10:38:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:77:6C:A6:02:C8:B5:AB:81:52:EA:E6:B8:F7:CD:03:F4:53:50
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tL13bKYCyLWrgVLq5rj3zQP0U1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.179.0/24
Signature Algorithm: sha256WithRSAEncryption
06:21:c9:70:9d:7c:50:eb:ac:5c:de:02:3c:5e:e8:5d:a3:90:
eb:47:b7:73:39:b0:ac:d2:20:c9:4a:8c:f3:86:c6:e6:81:58:
23:0f:0e:2e:ff:8d:f2:c7:84:d2:04:8a:6c:d1:c0:fc:56:38:
a8:a1:9b:b8:6e:2f:63:cf:c4:69:09:69:61:0e:e3:17:5c:0c:
57:dd:c5:2a:61:01:34:91:96:b9:ab:f3:fc:f8:74:66:5f:55:
d6:03:e1:94:e2:c5:16:79:29:31:54:c4:03:43:34:0b:57:dd:
d9:8e:ee:95:de:e4:e8:4b:65:b9:25:6a:33:12:91:1a:92:80:
5b:25:e2:a6:38:af:71:8f:96:de:cb:e3:14:a9:04:82:65:1a:
2d:59:5b:d5:81:7b:2d:28:67:60:aa:b7:10:bd:c0:ec:b7:21:
57:4f:44:ca:b5:6f:30:45:3e:f8:10:16:15:75:68:4d:93:39:
03:a5:c6:bc:d6:01:83:e8:53:54:f9:aa:b4:24:b0:39:a1:6b:
a7:eb:7a:ec:48:1f:cf:4c:1a:c7:e0:e1:b3:9b:b5:b5:11:20:
5f:d4:d0:7d:4c:dd:23:9d:aa:99:65:87:b9:ff:c8:ad:e2:f0:
ef:37:09:fb:81:47:a1:ce:45:2a:91:7d:f5:1c:a9:24:93:13:
b4:6e:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:58 2025 by rpki-client