Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/b87W7eN9BznPQm8aB4omiPaEdrs.roa
File: b87W7eN9BznPQm8aB4omiPaEdrs.roa (raw, json)
Hash identifier: lCm4K8vWR/Dae/kGj1ZxLUzgjVsud3BDqcUD5gVWuyA=
Subject key identifier: 6F:CE:D6:ED:E3:7D:07:39:CF:42:6F:1A:07:8A:26:88:F6:84:76:BB
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 019420D64A946203D7A3007541F9BA205BDE
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/b87W7eN9BznPQm8aB4omiPaEdrs.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210895
IP address blocks: 45.66.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4a:94:62:03:d7:a3:00:75:41:f9:ba:20:5b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fced6ede37d0739cf426f1a078a2688f68476bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:3a:78:a7:f7:59:48:a2:01:c5:11:e8:36:
05:48:0e:9f:2d:bc:02:26:e9:56:1e:12:c5:78:2e:
e2:c7:43:a9:33:18:67:e7:47:7d:6e:a9:bf:fb:9a:
be:84:9c:fe:f1:58:ea:5a:e3:9b:dd:a7:b9:17:b9:
a0:b8:d4:3b:dc:a4:2a:ad:bf:2d:80:d4:87:df:33:
c1:81:ad:db:a2:d2:89:45:c1:c2:f9:1a:cd:5e:e3:
f7:6c:3c:67:be:35:4a:42:ff:eb:7c:6a:66:17:e9:
45:4f:b9:ae:75:60:f5:01:d7:30:26:3c:54:97:18:
b9:6c:5d:98:17:22:4b:52:a8:d5:d5:4f:df:c2:82:
d1:23:0c:1f:19:f0:87:e8:e9:12:cb:18:6f:25:6a:
0e:c9:b4:0d:54:fb:d6:a1:e6:df:38:58:91:4d:43:
e3:b0:31:e4:94:d5:e9:d4:39:ab:fa:92:0e:fb:56:
b3:00:05:9a:0c:66:a2:4c:0c:de:4e:bd:58:7f:06:
72:7c:5c:03:f5:0f:0e:2c:e4:bf:8d:6b:be:8c:23:
9e:b2:0c:4f:82:5c:93:72:df:71:7a:3f:06:5c:f5:
a2:d8:5d:89:03:7b:74:63:5e:6e:c4:a8:57:24:41:
2f:03:2b:42:97:87:36:eb:15:dc:59:f2:eb:8c:4f:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CE:D6:ED:E3:7D:07:39:CF:42:6F:1A:07:8A:26:88:F6:84:76:BB
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/b87W7eN9BznPQm8aB4omiPaEdrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.11.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8b:e3:9b:89:53:f5:78:e3:e0:5d:06:68:d0:d3:bd:d0:a8:
59:7e:91:6e:fb:cf:b3:1c:8f:3c:e8:60:65:cf:b0:da:8e:4b:
db:ab:22:f7:41:af:94:68:50:78:a8:2a:25:38:f8:a8:b7:be:
55:48:ec:71:bb:85:ca:35:3e:50:eb:c3:6f:c5:4f:1d:d9:31:
7a:66:1a:3a:89:25:3b:9c:5e:b4:66:b0:0a:35:1c:38:a8:e1:
73:0e:54:be:f1:b5:d4:b7:2f:ed:63:be:56:d1:b1:70:8f:5c:
79:94:1f:af:36:6e:a8:b3:c3:a4:e7:ff:07:64:33:cd:d9:97:
16:ad:a1:71:e2:cb:77:87:c5:8f:d9:e2:91:da:b2:3c:8f:af:
bf:b1:11:e2:cd:ab:cd:e1:3c:9c:fb:27:86:75:4a:f0:27:08:
93:7d:60:54:16:a1:ce:52:3b:c1:b1:3a:7f:44:2f:d1:93:cc:
3b:92:35:ea:a3:52:dd:f9:3b:99:d9:41:76:5f:9e:83:9f:67:
85:8a:ff:9e:7b:73:b9:19:d8:f7:25:13:60:40:b3:cd:89:a1:
f7:24:ad:64:f7:a5:8b:9e:4e:30:1c:75:a0:5f:07:a9:f8:d3:
31:57:ac:8d:09:6c:27:da:fc:65:25:3e:05:da:1d:b8:6c:21:
e1:69:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:45:50 2025 by rpki-client