Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/tKyKZjLEDoku_61jkuUZJsA6mh0.roa
File: tKyKZjLEDoku_61jkuUZJsA6mh0.roa (raw, json)
Hash identifier: mS9ELNBChswUREefPfJwkVLPPBkzapMb0K1Iwkj0ZXY=
Subject key identifier: B4:AC:8A:66:32:C4:0E:89:2E:FF:AD:63:92:E5:19:26:C0:3A:9A:1D
Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial: 01942444836B677E1C47B51080AA408CAD89
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/tKyKZjLEDoku_61jkuUZJsA6mh0.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206703
IP address blocks: 45.85.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:83:6b:67:7e:1c:47:b5:10:80:aa:40:8c:ad:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4ac8a6632c40e892effad6392e51926c03a9a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:b8:22:1e:b5:51:05:16:71:1b:81:a6:b3:
78:f5:f9:1c:e5:dc:f2:6e:33:c8:90:6f:d7:8e:28:
ec:e7:a6:61:72:28:8b:fe:5c:f1:65:62:97:42:03:
4b:c8:a7:8e:e5:3a:b9:c7:c6:7b:ee:92:fb:9e:c2:
c4:af:1a:7a:f1:e1:e4:e8:aa:12:91:64:69:a0:32:
e1:7d:f2:4b:6d:0c:2c:2a:b4:12:45:6f:24:64:ef:
de:91:8d:5e:5b:a8:ea:0b:97:fa:ce:c9:23:94:98:
70:0c:ed:46:f1:27:dd:17:9c:97:56:f2:cd:2c:9e:
ab:d9:7f:e3:65:c2:62:2e:b1:17:04:32:c5:30:58:
48:ed:5b:62:f4:33:00:dc:4e:79:19:90:25:30:07:
ed:f3:2d:6e:4b:3c:af:77:e4:a7:fe:5f:aa:ad:fe:
22:ce:dd:c7:71:b0:37:a9:bf:ee:78:91:e5:7c:80:
f2:3d:6a:89:5e:33:e8:13:c4:12:10:16:f6:0a:41:
51:eb:92:ed:21:15:88:42:ff:da:77:92:9c:df:24:
a9:bd:9e:76:c9:dd:4c:ff:91:bb:66:c9:da:7a:77:
d5:13:6d:7b:18:c1:7e:74:a8:f9:9a:90:bd:7e:4d:
13:09:9a:f8:ac:ac:27:15:84:36:a0:d1:b5:e9:6e:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:8A:66:32:C4:0E:89:2E:FF:AD:63:92:E5:19:26:C0:3A:9A:1D
X509v3 Authority Key Identifier:
keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/tKyKZjLEDoku_61jkuUZJsA6mh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.252.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f4:40:80:f3:96:28:ee:b5:a5:2c:3e:f2:8c:9f:c7:8c:6b:
f9:d9:c2:9b:70:c7:02:d7:45:ce:61:6d:fd:1d:4e:86:ab:fa:
ba:c8:c9:bf:b0:97:cb:51:72:72:7f:65:08:54:65:72:62:1a:
e5:e1:b1:48:83:b7:ae:82:7d:64:89:9a:bd:7d:8f:25:88:26:
ef:be:94:57:27:67:89:dd:e4:17:b9:77:9d:80:d7:11:10:08:
ea:86:a4:77:19:62:cc:3f:3a:8b:00:da:b7:07:5d:96:e1:38:
76:28:84:08:8b:e7:0c:56:43:cb:39:1b:29:73:f5:48:6e:ab:
34:c5:a0:2f:07:49:f4:34:98:a8:42:45:2d:90:8b:b8:db:f7:
3d:32:06:2d:2e:f6:a3:cf:22:1d:de:95:68:68:68:c0:e4:22:
89:66:9a:62:7c:21:8e:d9:5c:ab:85:50:00:36:ac:6d:aa:3b:
91:a5:dc:a4:ef:64:71:d5:4a:eb:7c:86:be:3b:69:d2:19:0e:
7e:7d:57:a2:6a:cd:31:1c:67:90:bd:b0:18:ab:1c:8e:8a:07:
58:8f:07:2d:e0:3e:23:e6:70:b0:5e:d2:96:8b:22:27:24:b8:
5f:c0:fa:0e:dc:60:dd:16:9d:c8:20:7c:79:3b:06:ba:07:f9:
36:f7:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:19 2025 by rpki-client