Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa
File: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (raw, json)
Hash identifier: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=
Subject key identifier: AF:CB:8E:3B:01:CB:DD:6B:78:A4:6A:D4:25:E6:E0:F3:26:7C:59:A6
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 019421B252FD2FA0F9E90A43D358076350BF
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59592
IP address blocks: 45.146.136.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:52:fd:2f:a0:f9:e9:0a:43:d3:58:07:63:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afcb8e3b01cbdd6b78a46ad425e6e0f3267c59a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:72:5e:a4:18:9c:49:cb:da:e0:46:33:0d:
5f:ea:97:e3:94:1f:3c:49:0c:b3:81:04:23:1c:42:
2e:af:03:e0:b5:45:45:65:be:87:72:e6:68:85:d2:
30:43:c7:b3:88:b0:b4:e9:d8:0e:8d:5f:50:8a:e3:
7a:13:f1:7d:c5:de:bb:7d:b3:1b:63:b1:63:75:84:
c5:a0:da:b7:f8:f0:12:96:21:d2:d7:cd:21:dd:c9:
10:42:9e:56:6f:b3:f4:e9:0a:92:ff:fb:e8:ae:4e:
69:1e:08:46:34:50:48:0a:c2:6f:c9:39:16:ca:ca:
6c:01:31:f7:52:32:2d:ad:c9:33:50:d9:a3:04:34:
d1:73:58:43:39:3e:de:e2:5c:08:d0:a6:09:06:87:
49:1d:cd:3e:ec:ff:21:07:2b:e5:e3:ba:58:ee:25:
f7:71:1b:d5:a5:b0:84:74:ff:4b:57:43:74:09:36:
a1:c6:d8:8c:e8:eb:8d:bd:b1:82:8f:c0:d1:44:f7:
d1:98:f2:a2:ce:3b:16:9f:c6:18:eb:49:71:58:10:
9c:af:1f:9f:c1:0c:f5:b5:b8:62:11:20:e4:a3:ef:
0f:13:63:85:55:8c:12:74:d5:37:7e:82:f9:2a:05:
62:6e:6a:f1:af:6b:30:ab:22:4c:be:2a:15:b8:d4:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:8E:3B:01:CB:DD:6B:78:A4:6A:D4:25:E6:E0:F3:26:7C:59:A6
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.136.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ad:fc:9f:52:a4:2a:9b:46:5b:6e:c5:e0:8b:21:39:88:59:
7b:35:40:9a:50:48:a8:45:4f:b1:2b:0e:49:f4:30:ff:6f:89:
b2:78:33:36:2e:c8:e2:11:36:1b:02:ae:a7:88:e7:59:3d:5c:
69:95:78:0b:fd:59:11:f5:98:19:67:9d:3a:ae:87:d7:c0:84:
7e:70:54:87:9b:ce:f9:98:37:2c:be:13:93:48:68:18:8c:61:
af:75:62:1d:06:e9:27:ae:4c:ad:b1:d1:a5:e9:b9:33:2a:3f:
59:d8:4e:0e:4f:17:b6:1b:26:69:ad:58:e8:80:50:b3:7e:fa:
27:64:66:23:f9:df:83:39:11:fd:e4:f0:73:77:0f:f3:ad:b8:
63:f3:68:1a:6f:ca:02:18:b9:c3:d0:e0:c1:65:e7:d1:6d:58:
a5:df:1d:95:a6:77:4b:e7:1b:9e:dd:af:c3:57:7d:b7:5b:9d:
60:3f:50:e3:47:0d:0d:5a:67:ec:98:d1:a4:e8:3c:b4:2d:db:
5f:47:f3:a7:91:f8:1c:66:b3:4f:a1:45:91:b3:6b:2d:ce:b6:
28:f8:12:37:0b:74:52:9d:ca:a3:ea:67:35:8f:1b:a8:20:00:
a1:76:03:07:0a:aa:85:ee:f9:0c:99:ee:71:3e:14:f8:a1:48:
f7:56:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:31 2025 by rpki-client