Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/beiTDj2zXTqFS71TOFpPvmffaII.roa
File: beiTDj2zXTqFS71TOFpPvmffaII.roa (raw, json)
Hash identifier: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=
Subject key identifier: 6D:E8:93:0E:3D:B3:5D:3A:85:4B:BD:53:38:5A:4F:BE:67:DF:68:82
Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial: 019420D64D68B13275E97C574B97F35A71F6
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/beiTDj2zXTqFS71TOFpPvmffaII.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3225
IP address blocks: 185.46.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4d:68:b1:32:75:e9:7c:57:4b:97:f3:5a:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de8930e3db35d3a854bbd53385a4fbe67df6882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:c0:35:91:d4:e2:9f:f9:2a:9a:0b:2d:89:
ad:db:f0:e4:73:5b:13:8e:c1:45:63:c8:07:c5:97:
f3:d6:b1:05:da:c3:73:b6:f1:d9:3b:9a:bc:ef:26:
26:5b:e7:47:cc:ed:38:a7:ec:63:0d:3b:a3:78:3e:
9c:d6:82:75:f5:db:c4:5c:35:25:31:d5:d8:b0:fc:
19:8b:df:b4:75:56:84:19:f3:c9:60:00:2c:b7:7d:
40:41:74:8b:e2:8f:6a:15:f5:ca:d8:16:6e:62:67:
95:14:87:6c:56:05:72:d8:2a:20:25:1a:52:64:28:
ae:49:65:da:c4:08:f5:de:ec:d4:64:44:a0:1e:25:
7b:fe:6b:8d:5b:85:ac:c4:cf:5c:3e:b3:16:b6:62:
a4:df:24:1e:2c:83:b6:a0:bd:7e:15:ff:f7:fc:df:
f8:0c:3f:61:bc:b5:a4:23:49:60:fb:f1:d2:7c:f1:
1e:97:e2:3c:9a:0f:95:6c:ae:80:a5:b1:15:67:96:
4d:d8:93:fe:7a:ec:e7:01:7b:00:3a:19:3e:11:c8:
a1:46:82:5a:e3:c4:e1:bb:0a:12:91:97:62:37:ce:
a5:68:0e:8f:1d:74:fb:ef:9a:5e:04:70:8f:69:19:
77:6b:7e:dc:45:84:4e:1f:a0:26:0a:42:82:6f:fa:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:93:0E:3D:B3:5D:3A:85:4B:BD:53:38:5A:4F:BE:67:DF:68:82
X509v3 Authority Key Identifier:
keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/beiTDj2zXTqFS71TOFpPvmffaII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.144.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:3f:8a:c0:f5:91:4e:a1:aa:dd:f8:e7:3c:60:d5:d5:a8:cd:
e5:2f:21:0c:13:55:0b:f3:8d:73:57:c5:0f:5b:f1:fb:98:28:
4a:f2:a8:06:41:e5:41:93:31:6a:25:26:7a:06:ed:59:32:52:
5b:2a:a0:a9:4a:1a:f5:67:11:11:00:9b:5f:03:d7:81:f6:b8:
88:56:c1:a4:84:5d:46:bd:26:ed:32:1b:ee:b8:d1:ca:15:a8:
32:9a:5f:27:57:b2:9c:7f:65:13:fa:16:aa:fa:b3:dc:ee:51:
61:75:f9:a7:d9:2c:d9:2d:6c:de:73:cc:0f:9c:14:e8:9e:85:
ce:05:44:9b:d6:68:26:e4:8d:9d:01:cc:9b:c0:a7:86:20:70:
9a:f7:f0:73:aa:f1:0b:1a:5e:14:0e:5a:c8:9e:16:42:5e:7a:
f2:b1:07:45:70:80:8d:5a:0f:ba:af:50:a5:97:07:a7:3c:df:
29:53:36:0b:53:d7:44:0c:be:4e:b5:21:fa:c9:65:2e:d4:a9:
8a:14:2f:1b:91:00:a9:49:17:e3:32:ae:c5:cb:64:6b:0f:35:
3d:69:03:bb:9c:be:59:d8:d8:0e:88:ce:ff:38:e4:4d:79:4b:
d3:28:17:1d:4f:ea:ff:76:76:db:7f:e5:f3:c5:52:f2:34:e9:
d1:69:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:41 2025 by rpki-client