Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/BpIEEpORYhLtmm2kEFVbM4yVpac.roa
File: BpIEEpORYhLtmm2kEFVbM4yVpac.roa (raw, json)
Hash identifier: 8uP50sMQkVgJzde0h/pFWMnj4GJWasY6iyv+/p9heSU=
Subject key identifier: 06:92:04:12:93:91:62:12:ED:9A:6D:A4:10:55:5B:33:8C:95:A5:A7
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 0194258F3768FF5EC169BD33717AF708C470
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/BpIEEpORYhLtmm2kEFVbM4yVpac.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207992
IP address blocks: 45.145.164.0/24 maxlen: 24
45.145.165.0/24 maxlen: 24
45.145.166.0/24 maxlen: 24
45.145.167.0/24 maxlen: 24
146.19.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:37:68:ff:5e:c1:69:bd:33:71:7a:f7:08:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0692041293916212ed9a6da410555b338c95a5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:70:f5:17:1d:c8:8d:d7:90:7e:5c:fa:3f:
ac:87:21:af:1b:36:a3:1b:81:2b:91:03:b5:ac:fc:
a0:d3:05:d6:80:5b:cf:a3:16:e1:3e:ba:77:45:72:
3f:d7:e4:d5:ad:e9:49:f9:de:f6:07:12:40:db:24:
6e:f6:db:d6:94:9d:9b:e8:47:5a:24:2e:92:a8:0c:
80:6a:9d:fa:c0:f6:2f:9e:9a:93:a5:6a:83:53:16:
34:a9:4d:db:c4:a6:9d:79:f8:2d:d6:96:72:04:f4:
82:c0:a6:bd:15:ff:11:1c:0b:2a:a4:47:0c:ac:ae:
b2:08:5b:af:81:81:b7:41:34:86:30:2c:f4:b2:15:
e1:d7:bd:f4:c1:36:4e:30:f3:c0:91:d0:00:a2:7f:
9f:8a:84:f9:23:7b:1c:23:32:12:9f:4b:7e:75:fa:
f6:4a:2a:1c:a5:60:9c:b4:0c:c0:78:12:95:38:30:
08:35:a7:97:93:15:38:4a:d6:18:e0:99:d4:47:18:
6f:48:ae:ec:35:64:cf:e5:01:f0:9d:74:e5:c3:b5:
49:41:a8:16:a1:c5:1f:a7:6c:d1:96:b7:ab:0f:d2:
d8:41:8e:f6:70:d9:1d:7b:db:1c:d0:b3:37:ad:00:
4d:ea:13:6e:1d:77:4a:7c:fa:ba:4b:a6:2b:32:59:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:04:12:93:91:62:12:ED:9A:6D:A4:10:55:5B:33:8C:95:A5:A7
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/BpIEEpORYhLtmm2kEFVbM4yVpac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.164.0/22
146.19.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:96:0a:42:25:67:91:92:a5:32:c9:e9:d9:e7:47:5d:19:ea:
93:01:45:b4:ac:ec:36:4a:4f:78:12:48:3f:ee:ea:aa:28:e1:
8d:06:11:2b:e9:47:d6:d5:6b:ba:58:3d:0f:09:b0:a7:db:0c:
ef:73:19:bf:8d:4b:d7:8b:c5:52:3f:f4:a3:1a:44:d8:f5:4a:
1a:84:3e:24:33:96:22:4a:de:da:6a:b5:6f:77:f3:36:db:b9:
fd:da:f6:98:b9:e3:41:b7:37:df:7e:7b:13:f6:9b:db:46:6f:
a1:cd:d5:d2:7b:e5:cb:29:aa:0e:90:0c:9e:43:8d:5b:0f:d0:
3b:7c:31:e9:7e:77:d2:81:a0:2e:8e:b9:07:33:01:46:37:c0:
27:57:dc:33:90:a0:c8:36:aa:56:40:dc:0b:f4:77:7e:43:16:
7e:b5:66:59:20:0a:8d:3d:d7:0d:41:03:3c:c8:ac:b2:8b:7a:
9f:db:20:65:ae:ff:7e:ca:e6:d6:25:92:e4:85:94:2f:22:9f:
0a:b1:01:7c:13:86:cb:7d:54:a7:63:cf:a4:2a:4b:11:52:f5:
ab:07:9e:9e:76:c0:60:19:90:4f:78:79:b6:ff:9f:90:76:6c:
ef:5a:c1:a9:ca:a3:07:ac:e8:b2:c1:33:aa:84:22:a1:56:9e:
43:0a:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:40 2025 by rpki-client