Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa
File: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (raw, json)
Hash identifier: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=
Subject key identifier: 90:1A:43:E4:90:00:BB:5A:CD:9F:E6:90:F1:49:45:4B:00:D1:9F:1D
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 01942068217F98BFD850B43F17FBBAA885F3
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35122
IP address blocks: 45.146.140.0/22 maxlen: 22
85.255.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:21:7f:98:bf:d8:50:b4:3f:17:fb:ba:a8:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=901a43e49000bb5acd9fe690f149454b00d19f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:d5:66:76:5d:b9:d2:62:3b:77:9e:fc:a5:
d5:86:b3:eb:ed:05:38:6c:b4:c9:c0:6e:71:41:23:
f7:9f:f0:cf:4b:e2:87:30:ca:43:80:96:87:35:15:
4a:5b:0e:5a:67:8f:c7:4b:ec:da:5e:74:16:c3:a2:
2a:8e:2f:3f:fe:f6:fb:9f:d2:5f:2d:fc:f8:c0:92:
d1:13:a3:e0:0c:6f:47:df:54:f1:d0:1b:84:3e:ee:
1b:70:85:04:9f:5a:46:ce:96:9b:d3:49:93:e4:4e:
bc:f7:b3:b9:1c:99:33:21:de:75:65:9b:4a:d4:cb:
a7:78:08:ca:de:2d:9c:9a:6e:8c:36:25:11:0e:74:
fa:b4:5f:32:42:2e:68:97:09:7f:bc:ff:40:cb:c8:
b3:98:02:59:5b:cc:fa:1f:f6:ec:0b:63:91:f3:8b:
5d:7e:38:8b:bb:76:42:b1:ce:11:4b:d7:63:3d:dc:
53:77:57:d0:d3:33:7e:c2:71:a7:6c:a1:6b:40:dd:
85:f5:85:9f:66:8a:fe:e0:99:c0:ce:ad:44:aa:5e:
fd:3e:ec:38:71:c2:01:6c:ff:38:e5:c4:2a:27:2e:
01:72:54:6a:2d:db:62:d0:45:20:b2:fa:e2:eb:3e:
b9:a2:69:c7:d1:4e:ec:d9:cc:26:9f:4c:4e:30:10:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:43:E4:90:00:BB:5A:CD:9F:E6:90:F1:49:45:4B:00:D1:9F:1D
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.140.0/22
85.255.160.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:3a:dc:83:1c:f4:3f:b3:3a:f4:11:53:f6:43:ed:49:f2:c9:
25:c5:f9:be:e0:11:28:c9:96:f3:9f:f9:49:2c:36:00:62:7a:
2a:7e:71:3d:41:d2:60:96:d5:c0:26:8c:a3:b9:73:9b:5f:85:
31:44:81:bf:fd:da:8e:ce:6a:84:73:7f:e1:e5:a4:77:d4:d5:
ad:fd:c1:97:91:15:a9:ac:d3:d0:e9:8a:7a:b5:bb:5d:41:02:
b2:b2:92:2f:44:d9:32:5f:7b:16:0e:76:86:86:bb:6a:b1:a1:
e0:96:e0:66:65:4d:c6:bb:44:09:6a:4d:eb:c1:b2:03:13:a5:
01:4e:8c:96:1d:54:d3:ca:6d:e8:58:6a:63:34:49:e4:13:96:
0d:de:0e:fa:b7:69:43:d7:e4:a3:b1:ab:0c:4b:ed:1e:92:52:
c5:4c:61:82:19:5b:ea:3b:f2:92:bf:54:7f:ed:f9:06:fc:8a:
8b:98:d0:e6:21:44:1d:63:f9:a4:9b:3d:aa:d3:f7:3f:66:9f:
bc:64:a0:f3:9d:a8:d3:74:77:36:37:47:ae:69:ce:3c:95:cb:
c1:8b:48:04:51:bd:1e:b6:6d:4b:7b:7f:63:00:8f:29:c8:bf:
74:6d:8d:f1:0a:36:18:dd:98:85:7e:ae:b1:3e:b8:19:9a:95:
e2:07:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:09:26 2025 by rpki-client