Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/twQYxeqWRtUgJzlzzOeHP0YZpFE.roa
File: twQYxeqWRtUgJzlzzOeHP0YZpFE.roa (raw, json)
Hash identifier: IAC1Qd6YhHjzt12vFkopO51fjrovOXR1z4y+8/D7Fxo=
Subject key identifier: B7:04:18:C5:EA:96:46:D5:20:27:39:73:CC:E7:87:3F:46:19:A4:51
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B39E369545EBE33C322C61FD1A988A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/twQYxeqWRtUgJzlzzOeHP0YZpFE.roa
Signing time: Thu 02 Jan 2025 15:47:50 +0000
ROA not before: Thu 02 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 45.94.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:9e:36:95:45:eb:e3:3c:32:2c:61:fd:1a:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b70418c5ea9646d520273973cce7873f4619a451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:8d:c8:6d:7e:1e:e1:6e:53:dc:c2:a3:c2:
a9:1f:ae:04:1f:c4:7e:75:86:a0:ab:28:7e:b6:6a:
3c:a2:9c:cc:08:0d:1d:da:90:dd:8c:1d:2b:d6:db:
cd:68:2d:0e:89:96:22:2d:0a:f0:20:18:02:e9:e5:
49:06:a8:0a:38:c7:7d:91:f5:db:88:4f:a3:34:5f:
de:5d:9f:2d:3c:c0:de:de:62:4c:6d:cd:fe:dd:d1:
a9:4d:89:5c:0d:6f:9c:bf:76:d2:e5:6e:14:0d:2c:
93:4d:21:5e:80:0c:24:c8:e9:a0:c4:c4:b2:4a:fc:
77:3c:e0:ef:00:09:0b:58:1c:4d:e1:2f:c6:d2:24:
18:c2:e8:5c:f1:f4:82:47:a1:90:94:5d:90:6b:bd:
74:dd:40:34:18:eb:a7:fa:7c:87:58:9a:bc:13:a7:
26:d5:6f:ec:03:7e:a6:1a:50:9b:c1:59:c6:32:49:
f8:f8:df:0c:5d:be:3a:7d:24:41:4d:0d:ba:7d:1a:
5b:f7:09:07:b1:8b:aa:b9:50:ef:56:c0:80:a6:80:
9e:95:85:0a:34:89:2d:6c:f7:49:1f:e2:37:ed:23:
b2:39:99:13:c0:a2:99:54:d5:5d:a6:92:e0:7f:95:
b7:e1:47:de:0e:11:3b:e7:f4:4b:5e:45:c5:9d:48:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:18:C5:EA:96:46:D5:20:27:39:73:CC:E7:87:3F:46:19:A4:51
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/twQYxeqWRtUgJzlzzOeHP0YZpFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:8a:d7:7d:78:c3:94:06:72:7c:c6:b3:c5:22:d9:6f:d4:d5:
bb:ce:63:a5:6e:07:8d:ae:2e:43:a3:07:e1:1c:e9:2f:c0:ac:
4c:54:63:2b:4e:cd:ef:2c:f7:2f:c1:32:d1:73:ea:f5:06:d0:
96:ad:b0:9c:f6:08:e9:59:7c:17:89:7a:be:88:b9:2c:36:74:
38:c3:6b:45:1e:f2:12:d2:72:e8:dc:50:32:df:5b:91:6e:29:
1f:19:2a:4c:ad:fa:04:59:3e:ce:b4:1f:d1:12:c3:c6:ba:d7:
cf:07:d9:18:05:eb:6d:47:72:80:ac:1b:3b:82:30:31:c5:5c:
f4:bd:39:61:c2:24:23:26:03:2b:f2:2f:7d:3c:39:8d:2e:09:
ae:85:aa:56:30:3d:96:3f:c4:79:81:93:73:f9:5c:29:3f:5e:
bd:2a:be:b2:3b:75:4a:73:11:5e:4b:b5:8a:80:f8:42:d0:6b:
2d:b9:61:ee:d0:6f:14:bd:09:8f:a2:71:d2:03:a6:e9:0a:40:
a9:65:b7:17:81:b2:10:53:ec:6b:77:3e:da:a4:ca:6e:81:f6:
b9:03:2f:4f:7c:3f:d6:e9:3c:02:2d:ca:ee:df:1c:f8:9b:83:
59:ee:ff:59:e2:18:04:a3:1f:0e:bc:48:7a:86:a4:67:a9:ad:
75:89:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:37:51 2025 by rpki-client