Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/BUNDUMts4ESalMK-ljVnP9FAnRQ.roa
File: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (raw, json)
Hash identifier: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=
Subject key identifier: 05:43:43:50:CB:6C:E0:44:9A:94:C2:BE:96:35:67:3F:D1:40:9D:14
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D62B669590A94BFD378C1118A69FA5
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/BUNDUMts4ESalMK-ljVnP9FAnRQ.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204592
IP address blocks: 45.155.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2b:66:95:90:a9:4b:fd:37:8c:11:18:a6:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05434350cb6ce0449a94c2be9635673fd1409d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:75:c7:43:f1:03:6f:e1:fd:c6:bd:60:ad:
ad:da:99:89:42:ee:c3:b9:c2:b7:f7:a6:ff:ea:5a:
9e:d8:d3:6e:86:48:d5:a6:75:d4:72:58:16:29:16:
42:d0:78:7c:7d:69:90:5d:c8:e2:2b:97:09:42:0c:
93:00:0d:7c:81:80:64:b9:b4:39:7a:62:1a:29:e7:
7e:5f:21:2a:3f:a3:f7:27:30:41:b4:54:2e:13:ab:
65:7a:e1:b6:c2:71:9d:a3:f1:b0:0c:66:fb:86:f4:
a2:51:76:11:93:9c:52:56:14:62:5c:d1:53:3e:18:
18:dc:94:ff:b9:f2:fb:e0:94:b3:8a:e8:47:b2:90:
06:9d:e6:95:bf:b1:79:87:c4:c9:79:41:35:8d:d4:
85:7d:cc:d8:64:b5:df:fa:82:13:f2:fd:dc:61:36:
74:c7:23:fc:6e:8e:18:00:e8:9c:98:52:22:e0:4a:
25:d2:19:01:35:a8:3c:9c:d3:84:42:97:95:32:97:
81:0e:1a:72:63:d0:71:9b:2f:9a:e1:f3:47:2d:11:
d0:44:e2:50:c9:c6:a3:36:6a:a4:1f:a7:71:68:d8:
a1:68:30:5c:9d:87:61:52:b8:32:03:25:2e:d6:5e:
de:9e:13:b8:45:ca:ec:a2:12:f9:72:85:cb:6a:2b:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:43:50:CB:6C:E0:44:9A:94:C2:BE:96:35:67:3F:D1:40:9D:14
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/BUNDUMts4ESalMK-ljVnP9FAnRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:1b:dc:58:3e:46:32:92:8c:31:4f:58:cd:0d:88:b9:3f:6f:
c7:25:8a:5c:10:cc:a8:65:5a:f4:ee:00:5b:b9:05:07:27:a7:
5d:99:f4:89:13:99:4d:82:4b:ff:c3:18:9b:cf:20:b5:37:64:
b8:cf:6a:00:ab:68:94:e1:3e:b9:04:3c:46:41:39:93:50:d2:
11:45:e7:fe:14:c0:c3:e6:56:1c:fa:0e:dd:22:10:0c:1f:99:
eb:3b:5e:94:74:5a:b7:11:47:93:09:97:0f:72:4d:fe:28:57:
3f:a1:b0:55:9c:e9:3c:e0:68:17:a4:7d:90:8c:a1:ae:8b:8b:
12:80:00:52:57:b0:4d:85:19:b8:fb:da:89:86:0f:25:7a:a7:
d1:70:6a:03:29:87:e4:55:a8:82:de:d8:a3:e0:f7:01:dc:ce:
a9:ea:11:3e:ff:d7:0e:9e:58:ea:8a:3b:a9:e5:fb:fd:a5:5a:
11:5c:03:c3:1e:e7:1b:b3:cd:02:44:db:d7:a7:e4:be:71:ec:
f1:a8:ec:7d:c4:06:e8:cb:c3:11:e7:f1:75:d4:03:04:b0:67:
54:e8:be:97:03:ed:c1:1a:68:7b:13:b5:1c:ba:8c:5d:9a:0f:
7e:9c:2a:16:6a:96:2e:c3:bf:3f:27:28:c9:77:ff:22:de:fb:
eb:66:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:46:18 2025 by rpki-client