Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bPY9ahZxxt2lvVyVwzqBcjtryAE.roa
File: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (raw, json)
Hash identifier: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=
Subject key identifier: 6C:F6:3D:6A:16:71:C6:DD:A5:BD:5C:95:C3:3A:81:72:3B:6B:C8:01
Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial: 019424B3C524A85AB4F4C848378F65EC1730
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bPY9ahZxxt2lvVyVwzqBcjtryAE.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204272
IP address blocks: 45.155.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c5:24:a8:5a:b4:f4:c8:48:37:8f:65:ec:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cf63d6a1671c6dda5bd5c95c33a81723b6bc801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:e0:9a:51:6c:22:43:ac:40:ae:d6:c2:c2:
9e:ae:69:3d:80:97:ef:35:23:99:53:ee:88:1d:4b:
1c:f9:2c:2b:35:39:4b:d1:2b:62:75:a6:67:b5:34:
2f:d0:29:57:51:cd:4f:7c:49:09:59:f4:39:9b:a2:
13:a1:3f:64:44:b2:d8:1a:6e:c9:7b:a8:21:71:a1:
45:6a:a7:34:ae:a9:52:82:a4:15:5a:10:79:42:19:
c2:24:c3:03:98:7d:63:58:73:25:cc:c8:88:ce:79:
7f:e2:1f:5d:fb:e5:be:61:3c:d0:63:a2:15:57:7e:
9c:bf:41:dd:b7:ef:09:e5:0e:80:cf:5c:1e:66:f2:
f4:2d:09:60:f7:04:7a:5d:4d:41:e0:1d:c0:b7:bb:
48:7c:df:94:6f:4c:de:2d:15:18:43:0b:a9:8e:17:
c4:61:3f:4a:f2:f6:55:a6:07:80:19:c1:47:8d:bc:
7d:36:45:d7:ed:12:10:f3:a3:c6:9c:03:c7:4f:05:
f6:58:48:7e:8b:52:5b:ba:4d:38:c5:d2:36:f9:b9:
ad:ce:5d:f9:b4:c2:fd:07:b2:97:0f:4e:f9:14:ca:
d6:e4:83:63:62:69:3a:26:b7:6d:19:d7:d9:b1:f1:
6e:1d:be:1f:86:7a:c8:bc:cf:fb:3e:6c:af:1d:55:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:3D:6A:16:71:C6:DD:A5:BD:5C:95:C3:3A:81:72:3B:6B:C8:01
X509v3 Authority Key Identifier:
keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bPY9ahZxxt2lvVyVwzqBcjtryAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ff:2a:e0:9b:18:a6:b6:ae:40:b4:9d:8d:83:a6:65:5d:0f:
5c:df:a6:4b:2d:73:b8:75:78:2a:27:65:bc:5a:ba:db:96:67:
4c:71:2a:4a:a4:87:62:e9:25:4b:af:89:cc:e4:a5:e2:6b:8a:
c0:15:0b:9a:b1:10:ca:68:b9:4e:9a:0e:f1:ec:da:c4:df:71:
9a:bc:5f:e8:82:ad:51:ef:ea:eb:83:8b:97:e2:d2:06:db:ab:
2c:6a:00:f7:8a:f2:ad:2f:ad:9c:e6:a0:97:03:a2:c8:bc:71:
99:d1:02:28:26:d9:fa:c4:ea:8a:e1:31:ce:9e:45:39:a6:7d:
81:24:1c:4e:68:6c:c9:a5:95:85:2d:94:58:da:ad:5d:1c:d5:
15:ae:ea:45:ee:29:e6:86:ee:a8:12:1a:3e:3a:61:49:a4:52:
8a:a5:f6:6a:1d:e3:ec:bb:53:7b:03:e9:ac:69:4d:5c:44:f5:
03:cd:e1:3b:bf:17:d1:e7:d7:46:93:53:73:1b:41:d2:0d:66:
4d:19:48:92:d1:7f:08:db:c0:72:62:6b:f5:d2:47:13:70:e6:
3e:b1:63:9d:db:cb:f4:b0:b0:09:fd:c9:8d:a0:ce:55:1a:22:
92:9f:dc:dc:fd:7b:fb:39:3c:b8:ff:3e:6d:ec:c6:6f:70:31:
57:bd:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:08:20 2025 by rpki-client