Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/bkHUy_sgghNYVbWsbVxAbLGezkg.roa
File: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (raw, json)
Hash identifier: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=
Subject key identifier: 6E:41:D4:CB:FB:20:82:13:58:55:B5:AC:6D:5C:40:6C:B1:9E:CE:48
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 01942827A399729CC32A10034E7232C38831
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/bkHUy_sgghNYVbWsbVxAbLGezkg.roa
Signing time: Thu 02 Jan 2025 17:54:33 +0000
ROA not before: Thu 02 Jan 2025 17:54:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58317
IP address blocks: 45.85.72.0/22 maxlen: 24
45.85.72.0/24 maxlen: 24
45.85.74.0/24 maxlen: 24
45.85.75.0/24 maxlen: 24
2a0e:bb80::/32 maxlen: 32
2a0e:bb82::/32 maxlen: 32
2a0e:bb83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:a3:99:72:9c:c3:2a:10:03:4e:72:32:c3:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Jan 2 17:54:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e41d4cbfb2082135855b5ac6d5c406cb19ece48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:88:6e:5c:e8:9f:2f:ff:4e:a9:9f:d3:86:
1d:c6:1c:e3:4a:6b:1f:af:4b:d1:00:e9:02:f0:08:
a8:07:2e:0f:b1:a8:ca:f9:8a:8b:23:6b:ea:45:5c:
51:45:1e:e5:37:9e:c4:64:b1:9b:f9:70:8b:31:6c:
ea:88:a1:ed:98:6e:c7:c1:5c:0c:06:1e:b6:08:67:
08:47:5a:7f:3d:89:2e:6a:06:ef:be:2b:d5:b1:79:
f5:48:ed:63:c9:c2:ad:21:85:d4:b7:2a:c8:10:44:
a1:99:ea:9a:18:a3:fd:bd:c4:ba:4b:6f:4a:3b:ee:
4f:83:62:b4:c0:20:83:f7:48:58:3d:38:4d:7f:46:
69:23:f4:14:3f:7a:5e:78:53:a1:87:ee:f6:f0:1c:
fe:86:10:0f:00:b5:db:b4:b2:06:d7:07:a8:ab:72:
22:1a:72:52:32:b6:d0:8d:6a:73:38:47:8d:15:a7:
b8:48:77:ba:8e:c8:91:ef:e8:96:a4:27:1c:1f:d6:
12:99:b9:03:a8:10:28:ba:a0:80:32:3a:16:6e:ba:
4b:04:78:b1:7e:73:cb:81:cb:6f:9b:30:9e:97:60:
a4:02:13:76:84:c0:23:80:92:71:81:df:64:68:45:
cf:9a:a9:07:51:4d:37:af:fb:ac:82:cc:1d:bc:af:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:41:D4:CB:FB:20:82:13:58:55:B5:AC:6D:5C:40:6C:B1:9E:CE:48
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/bkHUy_sgghNYVbWsbVxAbLGezkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.72.0/22
IPv6:
2a0e:bb80::/32
2a0e:bb82::/31
Signature Algorithm: sha256WithRSAEncryption
48:44:74:86:6b:e7:4f:b2:17:02:86:d6:be:74:13:46:14:b5:
b9:7a:8e:1f:cf:b5:93:fe:4a:e8:b7:42:42:d9:bb:f9:7f:43:
ba:ec:2b:5b:8d:16:a4:78:dc:f4:31:98:8d:47:ce:f1:83:1d:
81:ba:fe:30:e1:6f:45:71:1a:d5:6c:3c:58:17:ac:e4:92:5d:
e7:b7:a4:8b:81:1c:e5:b3:2f:fa:d0:56:b8:80:97:38:91:a8:
47:4f:e6:3c:d7:64:b7:a9:9e:59:35:d1:b7:12:03:b0:00:ce:
b5:dd:04:8f:9f:7d:27:d0:b5:a8:0f:41:55:8b:55:d8:c6:56:
fa:ad:09:1a:c5:03:d2:28:16:bb:08:d0:d9:b7:8e:5d:21:c6:
d4:41:aa:a0:f9:f0:b8:4a:d0:3a:dc:8f:57:36:b2:ed:70:fa:
b6:f2:dc:8d:77:06:01:eb:1e:cf:3a:c7:4a:68:9c:05:69:77:
47:45:40:08:7e:57:1d:80:a6:11:88:c3:a9:62:05:0c:53:57:
e6:9a:cb:1b:7c:7e:d5:aa:a7:a2:87:74:26:31:fe:9b:2a:aa:
e3:45:88:1f:e8:f6:b4:5b:53:4a:0d:d0:46:e9:6e:32:77:ef:
94:de:9e:32:bd:b1:81:be:6f:21:00:c6:46:fd:08:62:62:b3:
53:4c:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:45:32 2025 by rpki-client