Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/s-6iu0euq8mwctWc84gynbP4Gz8.roa
File: s-6iu0euq8mwctWc84gynbP4Gz8.roa (raw, json)
Hash identifier: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=
Subject key identifier: B3:EE:A2:BB:47:AE:AB:C9:B0:72:D5:9C:F3:88:32:9D:B3:F8:1B:3F
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 0194258F54E8A9BFE40888DED385037E623E
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/s-6iu0euq8mwctWc84gynbP4Gz8.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203050
IP address blocks: 45.10.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:54:e8:a9:bf:e4:08:88:de:d3:85:03:7e:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3eea2bb47aeabc9b072d59cf388329db3f81b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:67:b7:4c:81:75:d2:6c:7c:09:e7:8c:b3:
37:aa:e1:0d:2f:67:87:7b:66:7b:ec:a6:41:ee:31:
de:0a:b4:3a:b6:22:54:32:82:7d:b3:11:10:20:66:
d0:dd:2d:9f:7a:4c:c3:c8:4c:68:59:4c:67:30:7b:
4e:db:e6:2f:60:96:fa:79:7b:a8:c5:3e:6c:b5:8d:
c7:28:42:73:5d:d1:fb:02:cb:2e:b7:af:d3:60:6e:
27:da:8b:47:01:29:47:d9:d2:ea:56:da:ee:07:10:
1c:39:b8:3e:45:18:d9:e1:8d:8f:bd:3f:72:cb:96:
ab:e3:87:19:c1:b4:b4:ca:dc:a2:4c:8d:a8:b4:ef:
a1:1c:79:79:3f:02:03:c2:10:11:f6:e4:6e:6d:7f:
13:61:ca:7a:a7:f7:66:f9:f9:25:3f:e7:e0:ab:6d:
be:bc:10:98:aa:03:f7:52:42:8a:a8:2c:8d:7d:65:
25:71:c3:69:42:74:b7:30:e3:e5:38:5b:49:3c:a0:
e5:21:48:c6:06:6c:f3:72:ec:24:18:67:62:5b:24:
f9:68:6d:6d:6a:ba:2e:02:29:e7:72:20:d6:13:22:
b8:2e:81:f7:81:ba:6c:b2:d0:b3:85:91:09:aa:4e:
4d:17:de:7b:e4:3a:bc:cd:e1:d0:61:a6:57:c2:76:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:A2:BB:47:AE:AB:C9:B0:72:D5:9C:F3:88:32:9D:B3:F8:1B:3F
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/s-6iu0euq8mwctWc84gynbP4Gz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.37.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a8:d5:ad:a8:11:38:1b:74:ac:16:34:c7:f3:bb:59:ec:1d:
dd:96:a2:52:07:5e:71:46:65:39:72:32:20:ed:3f:46:8b:b5:
dc:32:47:0a:8d:2d:e5:33:9b:45:86:5d:d3:45:cb:63:da:f7:
43:d7:85:54:6c:62:64:21:ba:2a:8e:7e:d4:92:b2:0f:aa:f9:
67:40:2a:70:5a:98:d5:22:57:81:27:63:9d:4b:fc:d6:21:e4:
77:1f:8a:10:f8:b0:38:45:ab:e9:5b:b2:38:bd:5c:0d:43:30:
94:3f:be:24:39:bc:7b:ea:50:c4:22:ec:4e:fc:49:aa:ae:82:
60:b7:7b:e6:30:2a:c8:01:c1:95:6c:df:87:7c:7a:58:b5:09:
a2:44:b0:12:3d:72:f1:1b:c6:0b:db:c2:ce:cc:98:f4:a5:44:
82:bb:22:d1:0e:50:a1:d3:1a:86:3a:93:30:a9:a6:f1:69:28:
26:b5:65:7b:c3:96:5b:ae:be:84:dc:f2:bf:6e:5b:4c:81:d9:
85:b4:0e:10:6c:b0:d4:5b:e7:cc:2b:4b:41:20:d7:31:c3:8d:
dc:b0:bf:4b:96:b1:0a:e5:5e:c6:9f:45:6b:9f:d6:6a:90:8c:
0e:61:7c:12:c8:e8:ed:c0:9a:70:c5:03:23:51:cb:52:b7:3d:
27:e9:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:35 2025 by rpki-client