Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bxVhRFkbdqV_8fMc5O3mpIVGFd4.roa
File: bxVhRFkbdqV_8fMc5O3mpIVGFd4.roa (raw, json)
Hash identifier: iw7kwcqDdxWfjShSC4HtRUsx5Xc1fheMuJKPVn+mohU=
Subject key identifier: 6F:15:61:44:59:1B:76:A5:7F:F1:F3:1C:E4:ED:E6:A4:85:46:15:DE
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5A539883E4936E1C16B3BBDE545A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bxVhRFkbdqV_8fMc5O3mpIVGFd4.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1149
IP address blocks: 145.100.118.0/23 maxlen: 24
145.116.218.0/23 maxlen: 24
2001:610:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5a:53:98:83:e4:93:6e:1c:16:b3:bb:de:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f156144591b76a57ff1f31ce4ede6a4854615de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:84:d2:b0:76:da:47:aa:5d:59:33:35:b8:
19:aa:56:9f:1a:1b:85:31:b1:e0:a5:db:7b:0e:f5:
34:10:98:eb:df:ac:1b:d3:44:c7:f2:f6:83:38:bc:
4d:ae:ac:4a:e6:1d:8b:fc:8c:5e:17:36:2c:fd:60:
71:ab:60:59:55:3c:f6:7c:e3:b7:c1:19:0b:47:f9:
b3:a5:a4:94:5d:74:44:67:7d:99:75:52:9a:84:1d:
22:40:47:5b:21:f5:4f:ee:d6:ea:bc:fe:94:31:37:
06:da:3f:89:70:0c:5a:f8:70:d8:cd:d7:3f:8d:16:
19:ec:ee:02:1f:77:fc:13:bf:72:21:40:29:21:47:
2b:2b:47:32:b7:15:f2:77:1c:fc:9f:d1:79:34:ff:
aa:a5:81:84:8f:5d:01:89:62:af:3b:69:76:cc:79:
f6:65:1c:d8:63:c5:a0:35:f2:d1:b4:2b:af:23:63:
1c:bc:1c:06:f8:50:6e:f8:65:b8:a3:89:32:33:eb:
6b:fa:56:55:7f:83:22:67:53:d6:91:48:62:c8:0a:
a0:03:06:c5:b1:80:8e:42:45:a6:3a:a1:ef:bb:22:
a7:1c:98:3e:05:d2:55:f7:7b:17:fd:31:b3:e6:d7:
1b:5d:30:76:3b:5b:5d:00:b8:17:10:14:c0:5f:98:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:61:44:59:1B:76:A5:7F:F1:F3:1C:E4:ED:E6:A4:85:46:15:DE
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bxVhRFkbdqV_8fMc5O3mpIVGFd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.100.118.0/23
145.116.218.0/23
IPv6:
2001:610:9000::/40
Signature Algorithm: sha256WithRSAEncryption
76:1e:d6:55:68:0a:f2:36:c3:55:dc:23:5d:ee:be:1b:a8:cc:
35:48:70:16:84:16:35:b1:c7:1f:26:82:04:c8:4f:50:df:af:
12:48:7b:78:a9:33:ff:3f:f8:0c:c9:d4:26:05:20:a9:73:d5:
ef:11:14:c0:06:75:b0:2f:8c:35:ff:0c:c9:89:fb:0d:f3:9d:
7e:86:b7:9e:f5:b7:c1:3a:98:82:82:3b:5f:24:db:87:e5:68:
34:2b:c4:35:e7:77:db:ca:7a:50:76:1d:10:ed:20:9b:ce:a7:
61:ba:cb:24:30:95:cb:5c:0c:63:cc:3c:23:56:b4:74:4a:12:
09:52:18:f3:48:45:ef:cd:14:d0:5f:0e:56:8f:b6:71:a8:ff:
15:26:ad:1b:4d:60:85:ca:f3:7a:78:cc:51:de:e7:1f:3e:c9:
d2:ea:df:b0:eb:1c:0f:97:90:12:51:5f:45:8b:71:57:34:5e:
22:db:ee:49:65:13:a8:12:b3:d0:b7:33:76:d7:c7:aa:87:23:
a8:d7:ce:09:04:26:8d:ab:e7:8d:87:df:c9:93:e2:c1:54:03:
57:61:c9:e8:39:fc:87:49:d7:28:bd:13:9a:30:c8:19:cb:bd:
4c:c1:ee:12:75:c8:19:00:66:54:d8:18:b2:fd:d7:77:d0:85:
86:43:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:50 2025 by rpki-client