Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/BkqDMjLgbH5zZJ4TuCPk1-AlujY.roa
File: BkqDMjLgbH5zZJ4TuCPk1-AlujY.roa (raw, json)
Hash identifier: RHTUMglXXWlOcn3y56cQU2IO8GMd6DoEPYtlQycHQUo=
Subject key identifier: 06:4A:83:32:32:E0:6C:7E:73:64:9E:13:B8:23:E4:D7:E0:25:BA:36
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0195478D09ABB0A8ABBE4F98BB23F6126769
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/BkqDMjLgbH5zZJ4TuCPk1-AlujY.roa
Signing time: Thu 27 Feb 2025 13:16:20 +0000
ROA not before: Thu 27 Feb 2025 13:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 45.141.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:8d:09:ab:b0:a8:ab:be:4f:98:bb:23:f6:12:67:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Feb 27 13:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064a833232e06c7e73649e13b823e4d7e025ba36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:cd:78:d0:c0:12:1d:9e:9b:d9:84:7b:c6:
70:e0:e2:e1:bf:6b:10:09:a3:a2:4f:c2:9e:3b:cb:
6c:65:94:fa:8f:0d:02:48:d8:f1:e5:5d:fd:1a:ba:
65:dc:c5:69:9f:4d:cc:b0:58:dc:1d:47:c2:d1:bc:
19:19:51:89:e1:85:00:6f:ee:b5:f5:ef:41:ab:3a:
6c:00:fe:c0:3a:cd:b1:d6:4d:46:5d:45:30:96:0e:
7d:21:37:2a:3a:12:07:98:88:61:23:25:9b:8d:7a:
a8:79:25:2d:e6:5f:a9:01:f5:56:6b:f7:b3:d8:77:
ac:d5:27:dc:89:e5:3b:08:b8:42:1a:c6:86:5f:ec:
cc:cd:1f:e6:d0:66:a6:77:f4:13:92:28:73:a3:28:
83:93:b7:83:01:00:b2:02:a3:e7:5d:81:24:ba:95:
26:36:07:80:86:d2:4f:34:43:84:f4:15:6c:40:9c:
64:37:7c:33:92:e0:ad:3f:ae:47:4c:8d:aa:5d:81:
89:33:1e:99:ed:ed:0e:e0:b4:90:bd:5c:60:27:8f:
e4:87:37:25:de:09:72:2d:37:70:75:e7:21:03:1b:
77:8a:65:5c:cc:00:cf:9d:bb:97:50:ff:d2:66:9c:
0c:ba:ab:56:e1:99:45:4b:7b:73:4e:57:cf:05:60:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:83:32:32:E0:6C:7E:73:64:9E:13:B8:23:E4:D7:E0:25:BA:36
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/BkqDMjLgbH5zZJ4TuCPk1-AlujY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:24:9e:e4:f4:67:45:43:8a:ea:06:18:2d:94:33:7a:3a:26:
a4:a2:47:74:f2:0f:0e:3a:2f:4c:8d:c6:00:aa:49:32:65:0e:
0e:fe:fa:0a:ac:09:67:85:dd:42:24:82:c4:15:c2:d5:3e:91:
7f:d9:b9:e0:5d:fd:f3:96:94:e0:3f:3e:4a:91:1a:59:f7:8f:
45:4e:7b:54:3b:0d:bf:9d:c5:37:c1:8c:79:86:55:72:e3:29:
e7:46:ab:91:eb:b1:56:20:0d:7c:df:5e:e4:69:63:45:7d:6d:
22:d5:b3:5d:c8:a0:da:1d:71:d4:1c:44:ad:fb:7a:ef:1f:f4:
06:45:51:fc:a9:1f:27:3d:58:36:f2:f9:4e:8c:db:e9:27:36:
2e:19:13:19:01:55:1e:e1:48:28:d7:3b:d2:9c:e0:4d:ed:69:
08:0a:36:55:48:0f:34:eb:51:b2:b5:60:c2:7d:64:57:1b:49:
f2:f9:ee:3e:f0:e0:3e:d8:d4:62:c4:74:f5:9c:77:71:67:22:
7b:7b:c0:7a:27:c7:c9:69:dd:76:60:b1:83:1e:ed:5b:b5:50:
9e:d7:d5:0a:28:0d:b6:16:5e:4f:04:75:12:ad:ea:eb:64:0f:
bb:ac:8a:1c:e9:1c:14:89:ce:d7:70:d6:98:9d:70:b9:b2:fc:
3c:33:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:51:59 2025 by rpki-client