Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bloAk3yeA7RnUogV_JT9EWIP-hM.roa
File: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (raw, json)
Hash identifier: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=
Subject key identifier: 6E:5A:00:93:7C:9E:03:B4:67:52:88:15:FC:94:FD:11:62:0F:FA:13
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019422200856B1915C6C38CC76B45B7A1C8A
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bloAk3yeA7RnUogV_JT9EWIP-hM.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 45.13.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:08:56:b1:91:5c:6c:38:cc:76:b4:5b:7a:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e5a00937c9e03b467528815fc94fd11620ffa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:05:ca:df:a5:f4:c5:ed:8b:ed:90:5e:55:
64:42:a8:fb:6b:8d:ee:51:fa:46:d5:43:ff:e7:a8:
65:19:7b:d6:ef:4d:78:19:9a:1f:4e:a3:51:9e:a1:
2b:5c:d9:5a:b3:9f:ba:49:9e:0b:be:e8:a8:14:b2:
db:f2:d6:b8:0d:d0:ab:d2:9e:bf:c9:d9:12:af:fc:
29:7e:94:19:91:8e:bd:ee:6f:e5:f2:c6:e3:f0:a3:
f2:a8:ff:b3:a2:d6:c8:e8:f1:37:5c:cc:d8:1f:8e:
e9:e7:fc:73:39:04:9c:83:cd:f1:df:58:dd:0b:bb:
d1:83:88:b6:f7:d4:e2:f0:5f:5d:43:c7:89:40:87:
50:bb:c3:44:16:2b:00:27:5d:8d:e2:22:e0:04:96:
17:83:bc:51:33:a0:5a:ce:83:b0:9f:30:44:63:88:
2e:93:4b:14:84:3c:93:21:4c:48:b1:68:3f:4f:2d:
de:a5:30:b2:7b:64:46:47:e1:8f:92:06:87:a0:ec:
02:33:b1:84:1c:b0:e6:a4:4f:22:54:bb:cc:d4:62:
e3:bc:d5:23:81:86:ba:86:2e:90:14:e0:5a:ab:70:
74:6d:b2:c6:12:44:b4:fb:00:10:59:4a:f9:da:9b:
04:a7:90:05:72:41:a6:21:0f:2f:93:89:00:73:e5:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5A:00:93:7C:9E:03:B4:67:52:88:15:FC:94:FD:11:62:0F:FA:13
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bloAk3yeA7RnUogV_JT9EWIP-hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.179.0/24
Signature Algorithm: sha256WithRSAEncryption
61:6b:f2:b5:83:7d:5a:e8:f5:e5:6f:f2:f1:38:d9:7e:0f:11:
f7:ce:7a:06:59:b8:b2:d2:d8:87:ca:58:d4:b2:a2:3b:f3:e2:
ab:80:d4:2e:35:d5:3e:d2:67:6f:a6:e0:37:e0:cc:e0:97:f5:
4e:24:72:3c:ba:31:65:9d:69:a9:ed:9a:55:d9:7d:fd:b1:7f:
d1:cc:d8:f5:4c:9d:e9:96:0b:9f:ba:21:47:90:c9:cb:74:bf:
93:f9:98:35:4f:c1:4e:86:e6:d8:0c:fb:33:9a:c5:c1:6c:2f:
d9:24:5c:31:7e:20:54:d6:57:23:19:99:b8:9d:cb:ca:e3:6a:
44:33:ae:3b:cc:04:73:3e:12:c9:8c:a7:48:c3:dd:38:67:14:
50:34:46:34:ac:33:d4:11:25:72:ab:27:f8:83:4a:ae:9a:e8:
10:93:c7:b8:c6:95:13:b1:1a:85:71:d3:02:4e:c1:6c:0b:e0:
34:94:95:5b:36:74:a1:66:59:75:1c:58:7f:30:f4:1d:d3:87:
e4:57:eb:71:63:9d:9f:68:53:bd:85:ed:34:c2:c0:08:13:3f:
c9:37:6d:ab:55:4b:4e:61:92:fc:f3:78:c4:ce:cb:b3:65:3b:
3d:05:61:2a:d4:6a:f8:79:71:f7:d8:00:1d:01:2e:9a:95:e7:
d7:ca:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:03 2025 by rpki-client