Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vY3Y3etrniGVDWVqa-wGwlb4wOM.roa
File: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (raw, json)
Hash identifier: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=
Subject key identifier: BD:8D:D8:DD:EB:6B:9E:21:95:0D:65:6A:6B:EC:06:C2:56:F8:C0:E3
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A4B2EB9296A3E3270E55CC03338A0
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vY3Y3etrniGVDWVqa-wGwlb4wOM.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 45.84.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:2e:b9:29:6a:3e:32:70:e5:5c:c0:33:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd8dd8ddeb6b9e21950d656a6bec06c256f8c0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:ba:b0:af:7a:06:66:98:ec:a8:22:e1:61:
2f:2e:8b:8e:15:1e:ef:d0:90:08:1d:92:06:20:f8:
c3:51:ff:9e:c9:52:3d:a0:07:e1:61:86:48:38:48:
0d:5c:d5:ab:fc:46:54:6d:22:c8:ef:b1:8b:e9:2e:
ae:82:43:5a:b4:72:bf:f4:5c:64:c9:23:28:bd:d0:
45:13:c2:a7:56:9d:69:73:e9:57:f9:14:9c:33:9b:
d3:96:75:20:87:b9:8b:e9:9f:f4:2b:b4:a0:13:3e:
c0:f2:10:e5:e3:04:b0:9f:8b:91:54:36:6d:d6:93:
8e:23:9c:8d:d5:86:ed:80:2e:53:67:ee:b1:72:02:
ed:3d:f2:05:f2:51:97:1c:a0:b5:21:13:28:5e:ec:
12:b8:a6:c9:83:03:3f:55:29:b3:f0:96:03:6b:47:
d6:16:a3:19:94:e5:18:c6:77:18:12:a0:23:18:8a:
8c:66:1f:b1:bd:ab:43:e4:bf:af:c9:21:67:7a:f0:
cb:af:64:db:f4:49:27:c8:a3:ff:8c:4c:1e:d8:b7:
f5:1a:22:20:cf:a0:e8:96:fc:36:0f:19:91:09:5d:
13:15:b1:8b:6d:7f:47:d9:2b:57:69:d5:f9:6f:80:
5a:0e:8d:b5:7c:d0:e3:61:84:ab:99:fb:6d:d7:ed:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:D8:DD:EB:6B:9E:21:95:0D:65:6A:6B:EC:06:C2:56:F8:C0:E3
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vY3Y3etrniGVDWVqa-wGwlb4wOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:01:b1:f8:13:5e:d5:7b:ec:57:3e:52:57:83:6c:0e:80:4a:
9d:08:dc:78:bc:c3:db:c9:34:3e:cd:3b:4b:2d:e9:59:68:8c:
b9:8f:e7:0b:87:f8:c1:6e:6a:d2:b4:69:4c:7c:d1:06:b5:8e:
d2:02:ff:04:30:3e:a6:14:42:d7:ef:cf:fb:df:33:1e:a4:4d:
08:22:2f:b0:bb:09:95:ea:97:16:bd:56:ce:c9:81:99:55:8b:
4b:40:68:0b:57:ca:42:2d:1a:a4:6e:8d:bf:8d:25:b2:69:dd:
24:32:e9:63:c1:dd:1d:79:5e:f7:3d:9f:f1:fe:9f:53:84:61:
a1:3a:78:71:ed:0d:83:cc:58:5e:c8:58:fe:aa:50:79:78:b1:
ac:76:77:52:a0:02:cb:30:8a:5a:93:3e:dd:66:22:40:f4:cf:
ba:e5:44:0a:43:0e:41:e3:64:7c:a7:38:25:45:83:ee:47:d6:
8c:d0:a6:47:14:bf:2f:f3:57:75:7e:88:f5:4a:70:af:72:c5:
0f:ce:85:2c:40:d9:24:af:bf:1c:e3:7d:26:cd:79:4b:fb:99:
61:c0:8b:f5:72:aa:58:18:33:3d:51:09:bd:62:04:4a:6f:b3:
ae:ce:63:81:aa:0a:2a:c2:f7:0f:23:66:d9:01:f6:83:24:d6:
bf:1d:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:06 2025 by rpki-client