Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa
File: Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa (raw, json)
Hash identifier: LCGI3/5d7XNi/Gu71Peh/rfncJ6J664qZ+UlhSx3wTg=
Subject key identifier: 09:B8:31:F8:14:1B:4B:41:47:C2:64:6C:82:89:EE:3F:FC:B4:B8:8C
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 019425FC3A75F8F26435C0C3F105357BC26D
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 45.80.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3a:75:f8:f2:64:35:c0:c3:f1:05:35:7b:c2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09b831f8141b4b4147c2646c8289ee3ffcb4b88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:5a:d1:90:32:2d:e4:7c:c9:a8:46:62:49:a3:
23:81:f3:e1:d2:37:3a:ef:33:a7:cc:4d:ea:99:ba:
87:e8:4b:f7:93:06:20:4a:bb:77:25:21:ac:8f:7e:
ea:87:3e:f4:ef:9d:42:32:22:32:60:af:37:ef:23:
87:6e:25:99:d8:15:a4:8c:7b:3c:63:ec:a2:15:eb:
88:93:b7:ee:13:6f:f7:26:16:3d:eb:1b:0f:40:50:
49:a3:82:58:29:19:e8:bb:16:0f:82:04:f6:80:8c:
da:ed:c0:46:fd:53:0f:60:ce:6c:04:ee:b8:2c:c2:
bc:65:5f:c3:bd:a0:fb:b2:5d:58:eb:58:00:2f:41:
e5:f6:c6:1e:7b:68:be:02:6e:c0:8c:fb:f5:cc:0c:
74:a8:27:c6:db:8c:bc:cd:92:89:41:25:d3:5e:71:
dc:c9:93:1e:21:30:5b:97:78:9f:96:9f:e1:5b:73:
8c:34:23:d3:7a:a8:73:75:f0:3c:76:5a:67:9b:83:
8e:88:42:ea:19:40:59:30:a9:72:6a:c3:62:0b:d9:
ce:79:b1:e3:a3:54:98:e7:cc:c9:c8:54:4b:01:09:
21:73:82:07:9c:53:c8:19:32:58:f0:4f:85:06:1d:
87:de:d3:f8:28:54:6f:bb:d2:b4:d6:a8:2f:08:86:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:31:F8:14:1B:4B:41:47:C2:64:6C:82:89:EE:3F:FC:B4:B8:8C
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fe:56:24:ef:ad:80:91:5c:24:a5:fa:41:9a:52:0f:d0:36:
77:ce:b7:4c:a6:34:72:f1:e8:e4:9e:2f:4b:e9:4a:2c:a4:ae:
48:13:bd:fc:77:4a:a5:6a:87:08:ed:36:b5:dd:cb:8e:30:65:
00:dc:3e:d3:db:aa:7c:06:43:32:7f:a5:3d:47:65:09:69:cd:
5c:50:05:74:63:fa:ed:28:33:65:19:c0:b0:03:47:3c:5a:2b:
fd:05:c7:b1:47:15:36:b1:5e:9c:24:4b:76:08:09:23:6d:46:
7b:ca:df:96:18:99:dc:73:51:a5:12:5c:33:35:3b:23:15:d6:
6a:dc:7c:2c:fe:fe:3f:2f:23:e9:33:8e:ca:da:33:4c:f4:9e:
b9:0f:1f:a5:46:05:71:e5:aa:e0:1c:1e:d9:25:28:d1:ec:fd:
41:cb:1c:42:8e:65:b9:4d:71:3e:3b:67:5a:bd:84:b4:3f:fb:
2b:b1:6a:33:74:16:16:26:77:26:d9:da:6e:3f:fb:56:58:7c:
92:01:b0:f8:f4:55:b7:76:08:ec:69:1d:a8:c7:e6:cb:47:8a:
40:9a:a3:82:25:bf:ad:9a:99:86:ab:d3:68:15:6b:c1:04:ce:
ab:bf:a8:91:69:f6:98:35:49:8b:68:6b:42:36:52:85:94:9b:
3b:5a:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:13:50 2025 by rpki-client