Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa
File: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (raw, json)
Hash identifier: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=
Subject key identifier: 44:46:E9:99:7E:7C:A2:A7:94:65:0E:8E:F6:1F:44:8F:B6:62:AB:40
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 0194228D3602DC83B2A05FABC98FFB91616D
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209835
IP address blocks: 45.149.182.0/23 maxlen: 24
151.248.20.0/22 maxlen: 24
185.185.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:36:02:dc:83:b2:a0:5f:ab:c9:8f:fb:91:61:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4446e9997e7ca2a794650e8ef61f448fb662ab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:ff:3e:89:22:6f:a1:24:0a:83:35:71:a6:
55:be:9b:5c:94:e3:23:06:e1:c0:e3:a7:b3:fa:33:
28:09:c0:03:8c:40:59:57:9a:eb:a0:5c:21:46:24:
4a:e0:51:0b:43:12:97:fe:59:7f:fa:ea:21:29:cd:
6d:21:a3:8d:a8:d5:78:66:62:4c:e2:d5:7a:82:d2:
1e:1b:47:e3:e3:ab:78:ff:cb:ba:30:7e:1a:c4:e0:
f4:2a:96:8c:c5:5c:5f:45:11:db:c4:98:4e:82:65:
c8:5d:0d:3c:e6:11:a6:7a:34:35:5f:05:09:02:46:
30:1f:08:5a:0d:36:32:d9:f3:3b:2d:e2:4e:88:fd:
af:3c:02:bb:78:54:33:08:86:d2:f3:15:bf:44:41:
fa:b1:97:58:f9:d1:79:f1:62:11:e1:34:22:e5:12:
a1:62:97:2f:82:ca:b1:2f:ce:41:61:ee:09:89:51:
16:7c:3e:f8:de:c9:a6:7a:a0:25:3e:ab:7e:d6:22:
38:a6:b4:72:78:17:7d:a8:78:b2:7a:cb:2f:c7:4f:
ba:08:b3:fb:7e:6a:90:11:f6:13:7c:45:53:1a:db:
8f:2e:a4:7a:a3:b3:c5:f3:e0:47:87:09:c6:6f:04:
36:d4:04:8f:f3:3c:f5:e7:7e:69:5f:f5:c2:cf:9c:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:E9:99:7E:7C:A2:A7:94:65:0E:8E:F6:1F:44:8F:B6:62:AB:40
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.182.0/23
151.248.20.0/22
185.185.94.0/23
Signature Algorithm: sha256WithRSAEncryption
23:55:fb:95:f9:38:48:40:cc:bf:95:3f:bc:6e:47:1d:60:8e:
e0:30:c7:df:a6:fa:73:51:39:7c:44:e1:c6:8f:2a:e3:67:42:
a7:f2:25:97:17:21:7b:d4:d5:c8:a7:ab:5d:49:57:ab:d8:cd:
6e:64:c2:da:bc:33:04:1a:9d:39:68:ba:a7:bc:45:04:6e:bf:
b4:82:ee:8d:11:ef:cd:61:23:cf:7e:4b:44:98:ab:2e:29:95:
36:1d:83:b0:28:2a:68:46:88:7f:80:0c:51:20:d3:a8:da:de:
06:0c:b4:e9:1f:b8:89:bd:a8:83:43:68:92:ab:0d:13:08:30:
a0:c6:5b:f6:de:d3:18:00:38:3f:7b:29:ac:bd:e8:f3:dc:1f:
20:a4:f0:15:e0:45:81:08:25:ee:59:5d:b4:bc:0c:70:c7:b4:
1c:72:61:11:74:b7:f1:97:11:8e:39:6d:72:78:37:03:99:89:
1d:b3:8c:25:f1:d8:a2:36:4f:67:e3:3d:b2:55:b2:97:64:d2:
13:61:ac:66:ee:4f:ea:5a:46:29:df:e6:16:98:91:00:61:9b:
96:de:18:cb:bf:8c:b3:26:9f:e2:c4:a0:da:5b:72:16:c8:8d:
9d:64:40:60:af:c6:2e:d6:19:3b:ca:6d:8c:d9:01:70:97:b4:
8f:73:e4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:06:29 2025 by rpki-client