Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/kyyUo6K8PDgAQyp4iZti_acVmX0.roa
File: kyyUo6K8PDgAQyp4iZti_acVmX0.roa (raw, json)
Hash identifier: P5dyK+BgcQrXfvVfNCSYxNqLjNECInMEbMjQNhR6C5A=
Subject key identifier: 93:2C:94:A3:A2:BC:3C:38:00:43:2A:78:89:9B:62:FD:A7:15:99:7D
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019428273FCADCD901D43460677169F94E3E
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/kyyUo6K8PDgAQyp4iZti_acVmX0.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 45.82.40.0/23 maxlen: 23
45.130.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3f:ca:dc:d9:01:d4:34:60:67:71:69:f9:4e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=932c94a3a2bc3c3800432a78899b62fda715997d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:14:58:fb:97:d4:29:6b:bd:0d:dd:55:7d:
ab:bd:4d:fa:5f:be:b2:a3:75:df:cb:21:5b:e5:b7:
bf:d5:03:67:7c:51:cc:a9:be:4d:b0:69:32:e0:7b:
3c:42:d9:4b:e7:8b:31:90:b8:81:15:e2:e0:77:ed:
fa:01:45:c4:cb:39:65:e7:e8:f6:12:68:06:d5:79:
7e:8b:55:d8:31:50:55:47:26:c4:90:ef:c3:ff:a6:
3f:c1:34:d4:b3:28:f2:d5:75:82:c8:08:21:00:e0:
a5:69:e1:80:6e:ae:51:45:cd:ee:c0:74:37:90:a8:
cb:6b:9a:49:db:f8:99:ef:5f:7d:8b:5c:49:cd:f1:
a4:50:a0:dd:63:50:53:e0:98:66:36:a4:72:87:e1:
2b:ba:74:c6:fc:4c:90:31:89:2b:31:22:76:fe:79:
2b:cb:f9:36:08:5e:eb:70:57:34:d4:e5:3a:cc:73:
38:30:0d:21:a3:c3:12:df:a4:79:82:9e:10:2c:9e:
b1:11:a7:3a:91:52:14:cd:ad:73:48:6a:b2:40:fb:
f1:1e:2d:37:9d:4d:9c:e3:9b:54:51:4b:77:d2:fd:
c8:94:0e:54:6a:cf:54:08:c2:3b:23:34:e6:37:70:
ab:d9:2f:87:21:2d:b3:0c:af:a3:d5:44:d2:ed:f9:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:94:A3:A2:BC:3C:38:00:43:2A:78:89:9B:62:FD:A7:15:99:7D
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/kyyUo6K8PDgAQyp4iZti_acVmX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.40.0/23
45.130.66.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:fc:86:27:52:58:66:93:c6:04:4a:c5:8d:bc:ce:fd:15:df:
fe:86:f5:0c:87:25:f1:ec:0a:de:b8:2f:1b:d1:d4:ed:d2:ed:
e8:4c:ea:8a:95:15:e2:b6:39:e6:a1:a2:26:91:88:31:1f:1f:
14:ec:b8:e0:94:e2:8f:40:0a:6d:53:9a:79:48:9d:30:d4:0b:
22:22:99:3f:84:c4:04:00:90:18:73:94:ac:3c:26:0d:33:76:
8d:b3:6c:54:47:72:02:85:7f:23:b2:0a:b7:ea:3f:dc:fe:42:
0f:98:29:93:2f:47:d1:8f:2c:bb:20:8d:e6:44:a0:01:58:fe:
fe:08:90:c5:65:8a:c6:dc:a2:99:90:c3:11:b6:34:fe:e2:37:
0b:59:fa:60:04:98:c2:12:52:f1:e6:9f:8e:04:b3:b2:9e:79:
74:f0:da:27:09:59:f4:bf:27:fb:36:db:10:db:86:69:13:dd:
c3:22:46:ca:65:86:d0:d6:07:ff:c9:7a:20:5f:5b:70:54:5a:
49:1d:7b:7b:3a:d5:27:d1:23:da:b2:8c:86:84:94:c2:40:f5:
21:11:5b:47:5b:ef:01:4c:cf:87:7d:d7:8b:9b:e7:d3:6e:a9:
57:0e:8d:1f:44:cc:3c:49:af:a2:23:e3:5e:22:c1:54:b3:d7:
46:0a:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:28 2025 by rpki-client