Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa
File: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (raw, json)
Hash identifier: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=
Subject key identifier: 6C:23:B9:6E:A1:4B:41:3B:5A:4A:A4:B0:4D:12:E1:AE:99:B7:C0:20
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 0194252198D18BB2C4EA761424CA8F4A831C
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 45.157.236.0/22 maxlen: 22
2a0f:4e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:98:d1:8b:b2:c4:ea:76:14:24:ca:8f:4a:83:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c23b96ea14b413b5a4aa4b04d12e1ae99b7c020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:e1:fc:d9:06:de:b3:e3:2b:98:3e:7d:8e:
a1:6f:33:4b:d5:a8:2e:8f:87:19:91:d1:80:43:19:
61:9f:a1:01:ef:2c:c4:06:c6:23:bc:1e:12:64:83:
7b:2e:bf:40:07:0e:5b:16:4f:21:3e:84:75:15:b7:
fe:ff:ba:43:80:fd:e1:69:95:4f:85:29:c8:7a:19:
0e:d5:1b:58:10:55:6c:6d:6f:0f:e7:23:71:09:57:
bf:aa:03:88:dc:b2:da:98:1f:4b:ac:4e:19:31:49:
81:9f:0c:32:03:7c:38:b8:c2:d3:8b:47:33:15:c1:
69:dd:e3:84:83:b8:7b:f8:b2:71:9f:1d:d9:30:f2:
a6:0b:9e:e3:9d:8d:92:0e:13:14:71:52:88:80:c1:
9c:18:4d:57:f0:f4:17:75:59:64:0e:9a:65:59:92:
11:40:18:e5:91:bd:25:1d:b0:2a:35:c1:87:5c:50:
ef:07:19:2c:91:2e:dc:90:55:c4:88:9c:aa:b3:5a:
36:71:93:4f:d0:7b:32:26:9c:09:4f:84:65:67:5d:
72:dd:c8:f9:04:46:bf:0a:1e:a6:67:f5:82:d3:e5:
ad:c0:db:99:1c:f8:64:13:f2:5d:a4:2e:fb:4c:34:
ac:50:13:5c:83:9b:41:a3:5a:2e:9e:c5:0a:ef:fc:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:B9:6E:A1:4B:41:3B:5A:4A:A4:B0:4D:12:E1:AE:99:B7:C0:20
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.236.0/22
IPv6:
2a0f:4e80::/29
Signature Algorithm: sha256WithRSAEncryption
a8:8d:c3:f8:b3:10:be:19:d4:87:df:76:e5:87:9a:53:b1:8c:
d9:ed:e4:b8:19:f3:3a:d5:83:22:ac:da:a9:e7:5c:5c:92:45:
9c:7d:ab:39:12:de:6a:cc:fc:fa:5f:0f:7e:bb:bd:ed:da:ab:
88:88:45:d3:d8:3c:d2:3f:e1:09:d5:4b:e6:eb:53:50:ec:8e:
b8:12:6b:9c:73:08:ca:92:06:e3:76:c0:15:fe:26:62:4d:af:
16:e9:5c:a5:72:1c:39:5f:53:74:5d:d0:63:fd:76:32:56:d1:
eb:46:11:13:44:f3:0c:17:22:b3:78:66:04:e6:cf:44:bc:aa:
de:7b:b4:11:f7:36:95:86:2d:63:62:20:c8:37:ec:b1:23:47:
36:85:42:e3:c9:69:30:27:78:1e:27:ee:b0:39:c6:cd:65:29:
46:bf:89:b4:5f:90:7c:61:6b:64:8a:25:8b:83:7d:df:1d:ff:
b5:9e:02:7c:7c:85:5d:65:35:3b:87:5c:b0:6f:60:18:0a:c6:
7c:3c:eb:f7:17:fd:c2:a5:1b:a8:bb:cf:a7:3f:6f:f0:d4:d3:
46:e7:78:a8:26:9c:3b:0e:75:14:dc:ce:2a:8e:47:86:d0:20:
97:ab:e0:ca:e9:63:c9:54:22:fe:b3:8f:52:31:49:16:04:b2:
c4:cf:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:37 2025 by rpki-client