Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/1bT_z3QhDrRtR0bAMfMHm2giTF4.roa
File: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (raw, json)
Hash identifier: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=
Subject key identifier: D5:B4:FF:CF:74:21:0E:B4:6D:47:46:C0:31:F3:07:9B:68:22:4C:5E
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019421B1EC2AB9F1C7A8900B713E48C0C627
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/1bT_z3QhDrRtR0bAMfMHm2giTF4.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 45.91.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ec:2a:b9:f1:c7:a8:90:0b:71:3e:48:c0:c6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b4ffcf74210eb46d4746c031f3079b68224c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:70:45:4f:cd:87:d9:7c:ef:5d:d8:aa:84:
1a:77:ca:77:86:b8:26:0c:7e:42:31:16:81:5c:52:
a6:46:fb:f4:11:23:33:45:57:23:3a:28:25:62:d6:
d0:20:da:94:a2:43:3d:91:49:70:06:7d:a5:ad:67:
a6:ce:11:3f:f1:05:1f:83:36:97:ff:29:3e:76:08:
4f:3c:8a:2f:e6:e2:0d:24:ec:4a:26:c7:5a:14:2f:
73:f1:91:35:b8:ab:f7:15:71:42:3e:2b:dc:34:ed:
aa:8d:76:7b:02:07:4f:ca:f4:e7:f2:3b:fa:76:ee:
96:7c:00:2c:24:65:b6:e1:67:b8:fd:b0:13:4d:aa:
bc:65:c8:01:f4:9d:5e:fb:56:59:be:50:40:64:73:
8e:6a:45:e8:06:4a:c1:67:7d:5e:86:9c:b2:c0:71:
1d:bb:a5:8c:21:11:18:b5:1a:f8:ef:85:e0:3f:bf:
76:df:99:bd:87:27:58:c4:b8:37:0e:21:07:58:8f:
2e:c0:d9:38:8c:ac:45:71:d6:e1:84:da:86:14:57:
84:3f:52:5b:9d:0f:aa:84:b1:ff:6c:27:a4:fb:34:
66:c3:a3:9d:6e:1c:6c:59:0c:55:50:1f:e6:c4:83:
b9:12:9d:c9:c3:ad:06:1e:c4:68:cf:f9:7c:9e:55:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:FF:CF:74:21:0E:B4:6D:47:46:C0:31:F3:07:9B:68:22:4C:5E
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/1bT_z3QhDrRtR0bAMfMHm2giTF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.254.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:35:55:b6:1c:cb:15:12:c9:45:2f:91:8a:b0:66:83:ad:6c:
ea:37:0c:c0:07:2e:db:d1:c4:ee:cd:a9:8b:d3:a9:68:c3:9c:
15:a0:f5:9a:0e:59:e8:88:18:a6:11:91:72:33:eb:5e:67:0d:
57:43:86:c0:8b:91:89:21:5e:3e:60:21:3f:2e:e6:dc:4d:65:
2c:99:0a:3d:f9:3e:3f:62:5e:6f:e3:c9:9f:81:ac:cc:11:d4:
bf:5a:6b:92:97:5f:f1:49:03:e8:67:5d:60:95:5c:98:46:5f:
01:40:17:4b:dd:41:e6:e8:cc:9a:1f:f0:84:7e:94:76:41:aa:
21:47:76:4a:d5:e5:18:98:9b:25:38:95:9e:11:cc:cb:ca:e8:
96:1b:64:f6:61:0d:17:6f:e4:55:5e:62:cd:99:e7:94:ca:bc:
cb:fc:7d:b8:88:33:30:47:4e:a2:77:b8:55:d6:8d:a9:e8:bb:
fb:2e:08:38:e2:d9:d9:08:f0:6f:31:7e:b7:a3:d3:a8:6d:19:
84:0d:eb:fa:ab:63:fa:8f:fb:9c:ca:69:e7:b8:c6:92:0f:36:
74:03:dd:e4:73:08:8a:74:15:8d:10:82:7b:54:74:d8:38:d4:
46:7b:5e:3c:fd:fe:17:f8:2f:3b:75:46:51:27:c2:66:45:79:
08:97:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:07:58 2025 by rpki-client