Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/_tBUXGLFeeKTNMit4od0RNATZXo.roa
File: _tBUXGLFeeKTNMit4od0RNATZXo.roa (raw, json)
Hash identifier: athIqN712Nn9ZvwJAZkQ9ogvGwW83fg7Abmm94I+u1U=
Subject key identifier: FE:D0:54:5C:62:C5:79:E2:93:34:C8:AD:E2:87:74:44:D0:13:65:7A
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 019422FC1B3601D0957E4B478BF55CA7D618
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/_tBUXGLFeeKTNMit4od0RNATZXo.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29691
IP address blocks: 45.9.160.0/24 maxlen: 24
45.9.161.0/24 maxlen: 24
45.9.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1b:36:01:d0:95:7e:4b:47:8b:f5:5c:a7:d6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fed0545c62c579e29334c8ade2877444d013657a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:e6:08:9b:74:ef:8f:d7:36:eb:0d:d2:a5:
78:07:3f:c6:35:1c:5b:14:20:56:2f:b8:9d:f4:56:
cc:4a:cd:3e:05:9a:1a:94:52:ce:4b:db:05:dd:ea:
56:ec:f4:87:d3:60:8d:21:c7:3a:3f:66:43:d8:3a:
be:f8:eb:9e:ce:98:98:d8:fb:57:41:a5:c8:1f:9a:
59:43:ce:f3:a1:09:ad:66:37:62:f3:d1:71:6f:ea:
e1:44:f2:86:f9:be:9c:62:43:81:b6:10:15:af:05:
a3:41:87:74:cb:1c:c3:42:15:80:f7:b7:c5:01:44:
52:db:3b:01:75:ae:f2:38:9c:0f:01:65:d4:3b:bd:
e6:66:17:d0:fc:2b:4b:e5:75:8e:f6:6d:2e:b4:ef:
94:a5:ab:af:40:5f:b2:e3:d7:6e:a9:05:17:79:61:
75:72:f2:d5:7c:15:c0:ab:3d:0e:0c:8a:93:af:40:
7c:ae:75:0b:b0:2e:05:dc:da:2b:3b:69:0a:89:a1:
e3:c9:54:14:53:29:c6:6b:fa:3a:e0:3e:35:19:f3:
71:65:78:39:61:5e:47:4e:c8:fc:dc:c3:69:f9:0e:
22:4b:00:d6:4c:a9:80:65:c6:9e:c7:3e:c1:9e:e2:
f1:c8:28:75:ad:13:d6:38:3d:20:ae:75:4b:99:f3:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:54:5C:62:C5:79:E2:93:34:C8:AD:E2:87:74:44:D0:13:65:7A
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/_tBUXGLFeeKTNMit4od0RNATZXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.160.0-45.9.162.255
Signature Algorithm: sha256WithRSAEncryption
c9:e5:dc:c8:29:e4:0e:41:6b:41:5a:12:22:6e:2e:69:75:05:
fc:74:e1:d9:c6:32:0e:87:9b:5f:08:98:b3:1c:c2:6e:78:ca:
a0:96:4e:92:6d:76:71:32:50:0c:70:dc:08:bd:e8:78:e9:f5:
73:58:32:45:a2:a9:50:14:fc:a7:9a:f6:aa:a7:f1:85:c8:05:
69:7c:2c:51:14:ce:34:60:e3:14:22:ef:db:cd:fc:22:18:01:
5a:90:6a:b3:92:c8:c7:7a:22:8c:ac:bc:4c:e4:0d:b9:e7:a1:
4f:d5:ab:0d:68:46:bf:94:40:cd:94:ef:22:7a:b8:c1:82:31:
87:fd:80:33:91:16:e2:01:bd:de:4f:1d:d4:5e:61:7d:c1:ac:
4e:c9:cb:12:80:9c:ae:b3:a6:6f:4f:c1:8d:d8:7b:c1:b1:e0:
71:a3:8f:de:12:b6:42:64:a6:12:c8:3e:23:15:28:c9:85:89:
8f:6f:3f:af:6c:af:17:4e:ac:f0:6c:db:ea:23:4c:81:68:00:
a7:6e:2b:ae:b0:88:f8:92:4a:d1:00:60:db:1a:42:ab:fa:59:
d6:0c:a1:56:39:c3:6f:5d:e3:0f:8a:5e:f5:08:d5:71:19:43:
c5:11:97:27:37:a3:39:13:f9:1c:fd:77:c0:bd:b7:6e:a1:96:
86:94:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:01:44 2025 by rpki-client