Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/m3bRUH-3pqMD_upv1j5WKzkMgus.roa
File: m3bRUH-3pqMD_upv1j5WKzkMgus.roa (raw, json)
Hash identifier: RKd+aeqRE7mHj9c9VIK2lVV4a7W8/z2Nwr1N3bz1QR8=
Subject key identifier: 9B:76:D1:50:7F:B7:A6:A3:03:FE:EA:6F:D6:3E:56:2B:39:0C:82:EB
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5CD90444BEED9E9936AA429D1B31D
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/m3bRUH-3pqMD_upv1j5WKzkMgus.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 45.133.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cd:90:44:4b:ee:d9:e9:93:6a:a4:29:d1:b3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b76d1507fb7a6a303feea6fd63e562b390c82eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:cf:36:ed:20:62:99:f8:54:9a:5f:be:39:
75:01:e3:ed:e5:f0:72:64:7e:4e:aa:cd:e0:73:c9:
29:56:f1:05:d9:58:b3:d0:f6:d3:9f:92:4e:63:32:
e7:bd:7f:b3:57:c9:ad:a5:64:95:5f:d1:a0:37:34:
ac:7c:f7:02:07:b1:fa:6a:0b:3b:03:3c:38:f3:1f:
f2:3d:a4:2b:88:52:6f:7a:b0:f1:00:5a:5e:ca:0a:
0c:d1:ba:3c:25:46:62:fe:74:73:d7:23:aa:5d:c9:
3f:4e:d4:c8:e0:74:87:83:df:85:ff:f6:ec:25:d5:
cc:18:dc:43:4a:74:42:4c:53:c4:77:06:85:cd:5e:
77:ed:a8:2b:f0:37:90:5c:5c:ed:ac:52:54:5a:c2:
7c:af:e7:fc:81:3e:4b:49:86:ba:41:83:0d:e7:ea:
1f:ee:38:f7:63:1a:17:91:88:bb:0f:38:c3:e6:8d:
28:fc:31:82:9c:ee:0e:8b:48:55:89:83:eb:c2:a6:
1d:77:18:1e:46:5f:8d:87:33:ae:1c:7a:24:a3:27:
ed:d2:7f:5a:74:b3:1d:bc:d5:46:63:9d:e5:9d:74:
9b:9b:11:8b:25:bf:19:fc:4d:14:61:a5:51:e3:a7:
dc:8e:e8:93:8b:89:37:42:0d:a1:0b:c8:bb:ae:b6:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:D1:50:7F:B7:A6:A3:03:FE:EA:6F:D6:3E:56:2B:39:0C:82:EB
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/m3bRUH-3pqMD_upv1j5WKzkMgus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bc:f9:dc:fa:47:32:c5:96:a0:53:9e:49:3c:32:5b:8b:2d:
ae:5a:5a:38:99:5c:90:e0:2b:e8:4b:84:f0:51:94:ef:d2:92:
93:69:60:b7:c2:93:26:dc:ff:85:93:de:ed:2e:8e:82:95:71:
a3:40:02:76:f8:a9:ae:56:84:17:27:ce:9f:a0:bd:52:be:7a:
0c:19:0d:34:8a:3f:34:b7:ea:74:a4:d2:94:af:17:b7:06:26:
1b:d5:1b:47:d8:7b:92:86:1d:f7:b1:da:c2:e8:27:67:79:80:
6f:f5:3f:02:09:eb:35:7a:93:45:e5:c4:66:27:94:1d:ed:4a:
7f:a0:c7:0d:0d:40:e3:ed:6d:03:3d:87:37:ad:c2:56:c3:dd:
14:0c:13:1b:8e:83:a1:b6:2c:5f:9f:7a:5a:54:08:de:2d:eb:
ea:48:9e:9e:b5:85:7e:58:3c:93:87:5f:b5:62:aa:0a:7a:e3:
d7:37:da:d3:1c:35:f5:e1:ba:4e:8d:9a:37:d2:fc:29:21:e1:
2b:05:51:a8:8d:d2:26:9e:45:c2:f9:9b:18:3a:fa:47:41:75:
80:36:f2:0a:8a:e2:b4:e9:56:df:bf:d1:ef:50:63:22:9d:f7:
7b:e7:95:39:b6:fa:3b:dd:d7:42:ce:87:f9:b3:42:bc:b9:3f:
6b:c1:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:32 2025 by rpki-client