Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9GtyeVDHDlh2UKbfBd4C7GxpBuM.roa
File: 9GtyeVDHDlh2UKbfBd4C7GxpBuM.roa (raw, json)
Hash identifier: d2bl6G9WKrhivuX09aLV3M0B4YMLjTHoxog0T+Xm9AQ=
Subject key identifier: F4:6B:72:79:50:C7:0E:58:76:50:A6:DF:05:DE:02:EC:6C:69:06:E3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B251C31757894D56098DBAA38C50DD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9GtyeVDHDlh2UKbfBd4C7GxpBuM.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 271993
IP address blocks: 45.8.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:51:c3:17:57:89:4d:56:09:8d:ba:a3:8c:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f46b727950c70e587650a6df05de02ec6c6906e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:fc:64:47:c4:73:4c:48:10:4e:23:23:e7:
f8:84:84:63:10:4d:9e:66:50:6e:4a:b2:5f:d6:d8:
b0:ac:6a:3f:e6:a2:1b:19:4d:89:ed:34:96:b7:58:
d3:79:55:17:10:bd:c7:a6:c7:05:ef:6e:e8:d3:a6:
67:4e:45:a1:f8:10:e9:43:64:6c:d4:df:6a:e8:fb:
36:31:b7:6d:ce:db:bc:e0:94:54:17:01:99:ca:33:
5e:6c:ec:f4:03:50:7c:03:4d:33:a9:36:66:38:7c:
32:3c:af:06:ea:af:d6:1e:17:c7:e4:5e:e0:a4:b3:
ce:9c:3f:af:ba:90:3c:a5:95:86:0a:07:13:31:91:
3a:5e:f2:1c:e0:71:7c:4c:b5:5f:4a:8a:ff:c2:2e:
3d:fb:3a:5a:d8:bd:73:6a:13:fe:db:19:ca:87:95:
8d:c8:ac:4d:75:53:ca:78:1e:1a:ce:64:fe:e4:2b:
01:d6:29:18:5c:fa:0c:96:eb:9f:3d:9a:e5:e9:dd:
15:33:52:d3:85:16:f1:c7:92:17:a9:3c:4b:eb:47:
52:c2:07:f5:50:22:d3:f0:ad:cd:ac:d6:bd:05:7e:
b3:b8:e0:15:8f:d1:f3:03:6f:6e:b2:e7:86:16:db:
58:0b:d3:80:a1:3c:72:0d:2c:0a:6d:02:04:96:32:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:72:79:50:C7:0E:58:76:50:A6:DF:05:DE:02:EC:6C:69:06:E3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9GtyeVDHDlh2UKbfBd4C7GxpBuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4d:ad:92:68:88:07:bc:45:7c:f0:82:ef:4c:b1:23:5d:82:
43:a0:15:ea:03:54:06:f7:0e:0f:b1:02:8d:56:e2:b0:a6:32:
00:cd:56:42:d5:f7:c6:ae:c7:f3:aa:83:82:ea:5d:79:2f:dd:
95:7c:d7:4e:f6:f6:4c:9a:7b:79:d2:8d:9f:82:3e:a4:68:ff:
5c:f2:57:cc:ac:a2:36:ce:2f:5b:88:7f:ae:e8:da:62:1d:cf:
3b:4d:4a:3a:7f:06:86:b1:78:df:3c:8b:88:4b:cb:9a:49:da:
4c:53:8e:cc:a1:5e:f3:f9:bd:2d:3a:8c:fd:72:6d:f1:ee:26:
1e:a2:4a:1c:60:e6:e5:ec:c5:61:18:75:e5:0d:a2:0f:70:73:
ba:2d:bd:f5:57:06:07:79:7c:9e:cb:f7:52:99:0e:2d:79:e9:
6d:42:a7:20:3a:d4:ad:d9:2d:52:6e:21:df:b3:e8:21:9a:49:
40:45:7d:4f:0a:f8:31:6e:a4:19:f5:8b:43:0b:d7:7e:5f:43:
ae:9c:56:29:ad:c0:dd:f9:36:7d:7c:b3:ff:d5:71:f6:ac:81:
1a:86:af:f1:33:dd:37:ba:46:d4:d6:6e:2e:c3:55:31:0f:27:
3d:23:05:09:36:93:6d:38:72:65:aa:8f:8d:dc:9a:c1:91:33:
3d:22:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:59 2025 by rpki-client