Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/BOI1awQxdXwnD-j71lBbNJhD_Lc.roa
File: BOI1awQxdXwnD-j71lBbNJhD_Lc.roa (raw, json)
Hash identifier: RDggKzi5X4GzB5qxGRZl8jlJFnbQqP70OHVTn4IeWCs=
Subject key identifier: 04:E2:35:6B:04:31:75:7C:27:0F:E8:FB:D6:50:5B:34:98:43:FC:B7
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C411BC4556A6F4733B8AD0540C3C7
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/BOI1awQxdXwnD-j71lBbNJhD_Lc.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206446
IP address blocks: 45.151.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:41:1b:c4:55:6a:6f:47:33:b8:ad:05:40:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04e2356b0431757c270fe8fbd6505b349843fcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:ed:fd:3f:40:7f:24:83:e6:10:b2:db:5f:
ab:95:fb:b1:d4:da:9b:2b:0a:06:b5:7d:06:29:36:
cb:d8:9d:a1:8a:76:9a:fa:46:65:72:41:70:be:9d:
ad:d3:f6:78:d1:70:c7:93:ae:93:df:e7:0b:83:ec:
95:83:5e:54:80:02:ba:36:58:f6:5d:23:45:1a:b9:
2c:c1:80:28:87:59:25:9f:b8:66:c3:b8:e8:9d:64:
14:71:24:1b:df:54:ca:14:80:9b:84:59:9b:10:db:
8c:88:81:a1:62:72:02:f1:7c:6b:bd:e3:8a:79:53:
76:16:80:8f:38:57:ad:00:8e:89:d2:78:92:91:8e:
3f:6e:14:58:0e:2f:11:ec:1a:ad:f0:da:d1:7c:9b:
be:a8:7c:73:b9:d6:7e:60:36:68:ba:97:f4:56:7e:
55:81:32:44:b6:ea:6f:26:30:7a:14:32:05:21:5a:
35:cb:9e:45:3d:32:7d:e8:57:84:03:14:df:8e:3c:
06:7e:3a:ad:4d:30:6f:d2:ad:a9:3d:43:0f:0d:3f:
2e:63:76:ed:ce:73:4f:2e:98:89:a5:a1:c4:5e:8b:
a4:e9:10:ec:92:8f:49:85:07:01:76:75:f3:5f:05:
72:8a:a6:b6:2a:73:e6:98:07:ba:58:92:43:3d:43:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E2:35:6B:04:31:75:7C:27:0F:E8:FB:D6:50:5B:34:98:43:FC:B7
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/BOI1awQxdXwnD-j71lBbNJhD_Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3c:4c:e7:d6:1a:35:c9:55:57:4a:79:77:ab:99:74:20:bf:
f8:ad:2b:27:b1:30:6c:5d:ce:4f:1a:8f:d9:bf:69:8c:ea:d6:
4b:64:f9:ca:c1:9a:25:8e:3c:a0:1b:eb:65:bb:7b:9c:0d:61:
d6:58:b1:c4:a0:3e:f1:bb:6a:33:3e:62:08:7b:97:12:3c:a2:
17:97:11:9f:04:79:85:2c:25:9e:da:a2:02:12:ff:98:f1:fd:
82:f8:aa:18:63:75:40:da:b2:74:05:38:db:ca:66:0c:75:24:
5b:e7:2f:8a:9a:65:dc:53:58:17:26:c8:a4:0b:70:93:9b:30:
39:04:56:e4:23:1b:37:cf:86:1c:c0:c4:f8:81:5a:86:ff:0c:
63:8e:5d:0b:f3:d9:aa:96:f1:3f:30:a9:6b:9f:c9:c0:20:59:
da:0d:a3:8b:e2:9d:20:a8:85:d6:71:01:e2:31:97:68:0b:23:
fd:39:1c:75:2d:e4:02:0a:cd:1b:4b:4d:d9:3e:9c:1b:c3:c6:
9a:62:5f:a6:66:9d:02:23:89:ad:93:9d:79:00:f0:97:a7:31:
74:f4:bf:d7:71:53:5b:99:60:f7:27:83:f2:e0:86:b4:ca:77:
6c:28:db:4e:34:57:5e:09:1d:1b:bf:77:38:56:7e:64:4c:99:
40:02:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:56 2025 by rpki-client