Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/k5bIb9MZd-l_B-bxXKNoMlRDovA.roa
File: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (raw, json)
Hash identifier: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=
Subject key identifier: 93:96:C8:6F:D3:19:77:E9:7F:07:E6:F1:5C:A3:68:32:54:43:A2:F0
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019425FC12A9151249E971DBDC20A51E9A36
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/k5bIb9MZd-l_B-bxXKNoMlRDovA.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134351
IP address blocks: 45.147.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:12:a9:15:12:49:e9:71:db:dc:20:a5:1e:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9396c86fd31977e97f07e6f15ca368325443a2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:75:fc:0e:8a:f6:6f:9a:99:26:a1:18:70:
e9:76:5d:f7:80:e0:dc:76:4f:c4:53:fe:f6:ee:56:
ca:c4:f1:5a:36:e7:77:85:27:ed:6d:f6:e4:2c:57:
a7:88:6c:7b:17:b1:ef:91:98:ae:02:d6:46:d0:13:
e2:7d:23:59:c3:00:1f:5f:f1:3b:ae:90:fd:10:43:
f6:f7:6b:a9:80:f6:f3:4a:ee:b3:cc:d1:1e:dc:c2:
fc:88:ac:a2:25:e3:f4:14:1d:56:a1:f1:ce:f1:2a:
5a:65:21:2d:b8:50:9c:b3:bc:b9:be:d3:c9:bf:65:
32:d6:22:7a:29:56:c6:a9:73:74:d7:21:54:53:91:
3f:16:11:c6:ae:c3:46:47:2c:9c:33:be:ae:38:c4:
03:11:c0:51:49:b8:4c:1b:5e:26:c6:b1:b1:fe:f4:
a7:bb:7f:a1:76:02:69:83:11:01:d9:34:12:19:6d:
57:fe:0b:5b:69:9a:c5:81:6b:56:9e:86:2e:61:a1:
90:07:f8:01:d8:26:e9:9c:26:6b:d2:2a:a1:0c:b6:
41:9a:1c:f5:4a:03:57:34:fa:e9:9b:54:ba:32:59:
9f:56:09:52:e2:e1:d1:14:83:01:18:f0:7b:93:05:
6f:00:42:22:48:da:c6:97:34:57:a1:c0:0b:de:de:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:96:C8:6F:D3:19:77:E9:7F:07:E6:F1:5C:A3:68:32:54:43:A2:F0
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/k5bIb9MZd-l_B-bxXKNoMlRDovA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:31:b4:39:7b:c0:a0:24:4d:29:c4:10:ca:9f:73:f6:33:cd:
36:a7:5f:d9:74:59:8f:aa:11:f3:ff:47:cb:42:ed:2c:3a:85:
b2:b5:d5:fa:e9:79:4e:78:18:7e:9e:10:f5:ab:72:93:df:c7:
71:7c:bc:fc:d9:b2:f6:82:3a:d9:6c:66:97:dd:6f:1d:66:d8:
c5:26:e4:16:8e:b9:29:dd:40:cc:75:a3:6c:db:61:6c:27:d0:
3d:10:a3:c2:6b:f5:bd:c0:00:52:ce:6e:b2:31:d6:04:50:48:
59:88:a8:0b:b7:f0:26:a9:61:37:91:56:d4:e9:55:d0:a8:a6:
50:c5:1f:bf:70:7a:a9:bd:01:e9:25:c9:1a:b0:75:b3:f0:b2:
dc:50:4d:af:5c:4a:64:83:77:16:52:2c:1e:17:69:dd:0d:9b:
3b:fa:f0:c9:fe:59:1b:da:a0:88:79:c1:94:bf:88:b9:d9:9e:
84:2b:b3:7b:30:4b:27:8a:a1:c7:65:b1:60:54:8f:de:35:f8:
bc:26:cb:1d:79:8d:b3:9f:96:70:8a:a2:67:26:73:44:10:08:
37:f9:cc:f1:89:5b:9a:1b:42:a7:42:7f:10:0a:2c:97:8a:bf:
1e:4d:75:4c:62:f7:dc:85:db:c3:0a:75:df:a0:1e:d3:9a:c7:
25:cb:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:11:39 2025 by rpki-client