Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/s2dvs87g7mYk_o56Wn0SDYYnNL4.roa
File: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (raw, json)
Hash identifier: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=
Subject key identifier: B3:67:6F:B3:CE:E0:EE:66:24:FE:8E:7A:5A:7D:12:0D:86:27:34:BE
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC7622C21419DFE4AABEDB54DA509
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/s2dvs87g7mYk_o56Wn0SDYYnNL4.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.95.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c7:62:2c:21:41:9d:fe:4a:ab:ed:b5:4d:a5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3676fb3cee0ee6624fe8e7a5a7d120d862734be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:4b:9a:bd:1a:4d:98:26:f4:1f:93:b9:e5:
ff:d5:8c:f1:7b:40:87:28:eb:98:46:bc:dc:56:d8:
3a:b7:be:5a:e5:ae:c4:47:14:c1:03:2c:8f:67:10:
0e:c0:9b:9b:10:1b:81:62:dd:dc:61:b7:60:d4:15:
52:02:70:b4:1f:bf:a5:6c:a5:22:b5:44:14:da:fb:
b0:cf:cb:82:6a:45:cd:26:c1:04:c5:d4:96:a3:0f:
23:ec:50:4d:ea:95:c1:ff:0d:53:67:8f:22:70:63:
09:60:04:7c:52:3d:28:71:c5:5e:1e:90:ee:e3:60:
9a:30:af:30:2d:2e:fb:f1:21:aa:77:d8:68:ac:02:
02:25:c8:3f:ac:ca:c0:a6:78:fb:38:4a:38:d2:d2:
8b:88:33:dc:33:a9:68:00:f9:ec:c3:53:f7:1c:23:
d3:23:8a:04:91:ea:d0:e0:2a:9b:21:c8:23:c7:4b:
e3:7a:16:d6:b2:d1:2c:86:be:78:ac:d8:b6:61:e2:
96:36:c1:ef:fe:a8:61:6d:ac:30:b0:2f:31:be:9f:
62:d5:de:4e:d2:dd:5b:48:63:42:6b:51:db:c6:09:
a2:e4:7f:2f:33:a4:d1:54:08:53:62:6d:a1:17:04:
ff:37:23:c1:78:4b:f7:dc:22:07:df:6d:22:ef:54:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:67:6F:B3:CE:E0:EE:66:24:FE:8E:7A:5A:7D:12:0D:86:27:34:BE
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/s2dvs87g7mYk_o56Wn0SDYYnNL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.35.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e3:85:eb:62:b9:a4:10:ca:85:38:1d:99:b1:70:ae:7f:12:
9f:69:bf:9a:26:7c:e1:dd:2e:b1:78:27:a3:de:dc:e3:ba:38:
74:65:76:57:74:c5:60:07:cd:a1:0f:e0:c2:ae:fb:26:c8:2d:
df:e4:81:90:04:d3:a2:13:3f:81:16:69:3f:ec:d3:af:41:0c:
1c:11:a1:e1:f7:2f:74:ff:34:66:67:a5:95:06:4b:57:5a:cc:
a1:89:ed:6a:61:95:9a:dc:93:25:68:f8:d6:70:51:3e:50:f5:
a6:ed:ec:15:0a:03:c8:3d:89:59:2d:9e:36:59:8a:93:e9:e7:
f9:df:10:80:f6:bd:92:2d:71:f7:39:e8:92:22:ac:2c:2d:7a:
a3:23:32:0f:fe:19:2c:cd:48:97:75:0f:27:54:e6:0d:71:68:
d9:49:4e:19:18:a1:f8:be:67:db:29:15:02:35:02:53:ea:f7:
65:5b:15:15:b3:5e:55:d2:65:9f:b1:42:06:c6:38:6f:0d:a2:
75:b9:3a:57:f0:81:f0:d1:fa:36:7e:dd:d1:b2:4d:10:70:79:
b6:f4:70:bc:cc:aa:ac:27:a0:a0:61:66:b5:31:d4:8b:77:1a:
f9:65:ac:dd:3a:55:2e:ce:5c:88:96:69:81:86:1e:23:67:1b:
b5:a8:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:38 2025 by rpki-client