Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sOK0BopZxa66z1eZfsdAjVQVmvk.roa
File: sOK0BopZxa66z1eZfsdAjVQVmvk.roa (raw, json)
Hash identifier: F87AXInfzS5gH+gFlNoDKRs/ZZkz625IxB6o5VsNp+E=
Subject key identifier: B0:E2:B4:06:8A:59:C5:AE:BA:CF:57:99:7E:C7:40:8D:54:15:9A:F9
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B39AE31B5D0D789542EBC23FF9F78B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sOK0BopZxa66z1eZfsdAjVQVmvk.roa
Signing time: Thu 02 Jan 2025 15:47:49 +0000
ROA not before: Thu 02 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44103
IP address blocks: 45.139.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:9a:e3:1b:5d:0d:78:95:42:eb:c2:3f:f9:f7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0e2b4068a59c5aebacf57997ec7408d54159af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:60:42:44:13:97:13:26:82:83:90:36:be:00:
b4:7f:5c:c7:7b:6d:b6:f5:79:59:78:2f:1b:ba:e4:
c0:db:d2:0c:42:85:68:8f:c7:57:5f:9c:49:b4:83:
ce:b4:7b:a0:3c:f9:02:61:5e:2f:32:d6:02:7f:f9:
c8:53:c4:fe:7d:d3:03:f7:0d:a1:6b:28:a0:6c:0d:
66:ce:97:5f:6f:60:90:b4:84:9c:9e:c4:15:58:e4:
60:fb:fe:42:a4:63:ed:40:17:05:b9:01:61:b0:6f:
d2:73:e2:c9:b0:35:27:cd:7b:71:15:09:5e:3e:f0:
b3:67:86:8e:54:2b:e0:20:b6:64:18:19:7b:7b:b4:
82:a0:da:39:2a:82:13:5e:95:27:cf:7b:1b:49:84:
5c:c6:94:76:db:b2:e5:9a:8a:ca:a2:b2:9e:12:9c:
7a:e1:a1:00:5f:01:22:29:30:c3:4a:24:2f:35:33:
f7:2f:f6:cd:8f:9b:0c:c3:d5:88:2f:8e:aa:2a:d4:
ed:81:dd:30:49:08:c2:02:6e:a4:c8:86:9b:b5:fc:
9b:0c:78:20:1a:79:1c:73:8b:2a:4b:56:f0:4a:ce:
9f:d5:58:0a:40:c6:95:a4:cd:7a:32:62:b0:58:e3:
6c:56:7e:c6:7e:85:25:d7:e1:b3:ed:35:33:68:99:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E2:B4:06:8A:59:C5:AE:BA:CF:57:99:7E:C7:40:8D:54:15:9A:F9
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sOK0BopZxa66z1eZfsdAjVQVmvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.163.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:95:7f:a4:c0:fe:04:b5:ea:67:0b:9d:f5:27:6a:fb:55:47:
f3:90:b2:6b:44:39:79:4e:41:01:97:1a:18:b9:d9:ca:1d:1c:
99:5a:1d:e8:e0:62:57:3d:a6:7f:7a:94:e7:30:2d:2c:20:ba:
b9:df:4e:6f:e9:cf:60:76:45:f0:fb:6c:ff:21:ee:2e:62:ec:
ae:b9:56:e2:44:0e:2d:fa:9f:97:fb:bd:f2:2f:d5:b1:de:68:
f9:d2:c4:96:d5:50:2d:ad:56:77:fb:f2:f8:48:96:bd:6b:21:
e8:6f:60:71:72:f8:d8:06:10:b8:6c:0c:24:a6:e8:b0:83:4b:
5b:89:be:1d:cb:8f:81:b5:da:10:f2:45:49:cc:cd:c0:16:85:
c4:a6:7c:1f:c5:fe:4b:4f:0c:f2:14:30:a4:60:c1:f1:10:7a:
4f:09:f0:ed:6e:38:f4:fa:bd:83:f2:93:83:8d:7f:4d:8a:49:
23:8c:93:9b:79:91:aa:7f:6c:14:6e:f9:7f:fe:a7:13:72:b2:
12:e7:77:12:19:33:07:54:fa:1b:7f:ac:2e:2e:ad:98:f0:2d:
af:b9:89:6d:0e:65:2c:81:07:dd:da:10:75:84:98:c9:f0:30:
ec:5c:f6:51:82:72:3d:2a:7e:ee:45:f7:a5:41:14:49:94:c3:
8d:e8:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:42:27 2025 by rpki-client