Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Kx43u91ottGxgmt7gDhfHxtVV6M.roa
File: Kx43u91ottGxgmt7gDhfHxtVV6M.roa (raw, json)
Hash identifier: oAjaZj07dvWVjkqsm1WzLPiF2cbysKorTZmr79Z4Q6k=
Subject key identifier: 2B:1E:37:BB:DD:68:B6:D1:B1:82:6B:7B:80:38:5F:1F:1B:55:57:A3
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019423699DAB2BBABD8F2882DA9295FF669C
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Kx43u91ottGxgmt7gDhfHxtVV6M.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200514
IP address blocks: 45.87.220.0/24 maxlen: 24
45.87.221.0/24 maxlen: 24
45.87.222.0/24 maxlen: 24
45.87.223.0/24 maxlen: 24
185.192.125.0/24 maxlen: 24
185.192.126.0/24 maxlen: 24
185.192.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9d:ab:2b:ba:bd:8f:28:82:da:92:95:ff:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b1e37bbdd68b6d1b1826b7b80385f1f1b5557a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:67:15:e3:18:5f:02:99:eb:1a:54:62:11:
c8:be:ac:d1:cc:c3:04:08:a7:13:2e:e1:4c:1d:29:
a2:da:a0:f3:ea:25:0b:e7:df:48:8b:19:e8:a6:99:
37:3d:2b:2f:04:5d:55:39:d6:93:44:12:fc:5d:85:
6e:0f:81:c4:bd:82:79:46:ff:39:1f:2c:9e:ff:20:
0b:37:12:d2:48:d8:bb:18:ac:f3:e0:ad:73:da:d1:
f6:2e:35:ab:9b:25:dd:17:6b:65:a4:80:f7:bf:2b:
ff:2b:b1:f3:15:a1:72:39:1c:fa:c1:58:15:d0:e5:
87:5d:09:d4:d5:fb:08:4c:c5:73:51:70:73:df:c2:
a2:8f:b7:a1:e3:d8:56:b5:8a:e2:ce:fd:dc:4d:1c:
60:4e:4a:8f:1d:ed:2d:cb:83:2c:7f:eb:e6:2c:d8:
31:6b:72:9e:a5:c1:51:da:45:56:12:f4:4e:75:9b:
77:fb:bc:20:3e:74:ca:82:ae:40:b8:18:d1:3d:9d:
86:6b:bf:91:7a:1f:33:6f:50:7c:39:46:d0:eb:e5:
2c:7b:16:d6:37:f5:34:5f:24:6c:91:b1:58:85:a4:
1f:7a:12:3d:80:4c:ce:ea:ec:d7:22:da:23:56:3a:
6e:de:e2:29:23:9d:cd:df:56:47:bf:1a:6f:ea:3f:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:37:BB:DD:68:B6:D1:B1:82:6B:7B:80:38:5F:1F:1B:55:57:A3
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Kx43u91ottGxgmt7gDhfHxtVV6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.220.0/22
185.192.125.0-185.192.127.255
Signature Algorithm: sha256WithRSAEncryption
b3:89:fa:54:d2:48:d9:6c:6c:37:6a:64:64:02:29:9f:6d:18:
df:07:1e:d2:76:1e:42:93:04:7c:d6:51:04:f1:bd:9c:00:cc:
50:39:96:0d:7c:d1:b9:73:5d:10:59:12:f8:e2:3f:cb:9b:27:
cc:ef:5f:57:4d:be:0b:0f:71:40:3d:74:48:9e:ee:f1:cf:41:
e3:04:e7:74:88:db:56:10:6e:44:fc:d2:3b:20:4f:4b:cc:6c:
a6:f9:8a:0b:7a:24:30:bf:1e:eb:4f:d8:5f:94:e9:f6:a3:46:
21:0b:f0:36:64:79:9a:7a:01:0f:22:1c:b8:3c:13:98:88:eb:
d3:0f:90:52:aa:c2:39:2e:5f:88:67:63:be:4a:4c:39:6e:79:
7f:a3:ec:51:11:d5:9c:2b:d1:9e:22:d2:3e:c5:06:92:bd:a3:
69:6b:0f:30:c4:1c:45:61:8c:33:7d:36:a9:2e:92:0b:69:13:
fe:0c:72:7f:49:60:8d:28:15:42:fe:1e:cb:e6:8a:95:2b:fc:
8c:06:99:06:7f:1e:55:be:cb:19:6e:c6:e1:ae:3e:4f:7a:b7:
33:7c:f1:36:e5:4d:b2:e6:3b:d2:c9:e6:c7:62:da:51:3e:98:
5c:04:22:8b:6e:29:c6:4d:70:2d:15:3a:98:7b:7c:74:a9:08:
5b:a7:c3:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:30 2025 by rpki-client