Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/btFiCRe6ijn7iG7FxViTiaat_Ss.roa
File: btFiCRe6ijn7iG7FxViTiaat_Ss.roa (raw, json)
Hash identifier: LM2pD9aQd87JsY0EO+NGidT06PsoOqy+c+K8ZJnFpLQ=
Subject key identifier: 6E:D1:62:09:17:BA:8A:39:FB:88:6E:C5:C5:58:93:89:A6:AD:FD:2B
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D70E97D925199D3D50CCB02794F120
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/btFiCRe6ijn7iG7FxViTiaat_Ss.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50959
IP address blocks: 46.32.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0e:97:d9:25:19:9d:3d:50:cc:b0:27:94:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ed1620917ba8a39fb886ec5c5589389a6adfd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:b4:da:29:b6:de:7e:9e:0f:4c:dc:6c:53:
06:a9:0d:e8:a6:92:50:6c:42:e2:cc:66:a4:7d:48:
85:76:79:5e:97:d4:86:9b:78:fe:92:56:c3:01:2a:
3e:66:de:08:d5:71:9e:0c:af:14:cf:95:04:b0:15:
bc:70:11:b0:61:cb:d3:c6:8c:10:f2:9a:1d:1b:bb:
f2:9e:98:c6:0f:c3:df:22:2e:08:56:58:3b:64:f9:
4e:43:13:b6:95:ad:c4:56:df:d4:bd:4b:8c:89:4b:
c3:be:ce:71:67:9a:84:23:c6:f0:22:8e:87:ff:7c:
fa:0f:e7:15:d7:6d:ea:f0:09:8b:e2:04:b1:a8:96:
99:38:c1:87:85:dc:7b:54:21:f5:f4:32:85:08:57:
7d:b5:00:d2:ce:58:98:81:b4:51:18:81:75:56:d5:
0e:33:e1:6d:93:0a:0f:c1:26:6d:0a:a5:e3:ec:41:
5d:66:81:36:c0:b3:80:68:94:3d:73:b1:9f:a2:f0:
0b:a3:aa:4d:05:b0:8f:c9:ed:73:da:99:ac:ea:6a:
8d:78:62:75:0e:a7:e0:1e:16:54:57:e3:d6:4f:5a:
3a:eb:39:42:1a:a6:79:22:4b:2f:62:a8:f0:55:01:
37:24:6b:a8:9c:f7:e0:7c:1e:c0:cd:c1:2e:43:4b:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D1:62:09:17:BA:8A:39:FB:88:6E:C5:C5:58:93:89:A6:AD:FD:2B
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/btFiCRe6ijn7iG7FxViTiaat_Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:85:71:15:6e:9d:67:be:2e:fb:47:dc:1d:94:74:66:5b:fc:
73:6d:9d:e6:bb:98:8e:d7:c2:3e:5b:e8:61:ff:d2:ba:5a:be:
fd:87:d0:ea:29:aa:9f:e2:83:68:4d:81:3f:1c:b0:b3:f4:1a:
32:ae:72:8d:f6:11:8f:1d:d5:69:cd:27:5a:50:ca:46:2f:a4:
ff:ae:4f:99:dd:d4:10:a7:09:f8:0d:e8:38:b1:c0:36:d3:40:
d1:ed:fd:39:d8:ef:da:d6:88:55:a0:0f:1b:81:2e:b1:9b:ec:
5e:e4:e4:f9:0c:7a:e3:90:79:a5:a0:1f:bc:bf:53:4c:3f:31:
2d:40:bb:a6:7f:00:2f:f2:31:19:d8:a4:f8:9a:a3:8a:ef:2a:
1b:24:fd:67:db:02:1c:5e:b6:02:db:59:c4:f0:00:da:94:d2:
67:94:af:b7:4d:ec:ba:d3:4f:0b:6d:a2:f7:fa:ab:e2:e0:09:
1b:0d:ce:c1:da:23:bf:15:7a:20:82:f9:8d:a3:69:5e:8f:17:
5f:0a:98:56:1c:34:61:b9:b1:b8:23:7f:45:28:09:1b:1e:70:
e7:68:28:28:47:35:bc:6b:ce:28:75:12:9a:14:25:2f:bc:82:
57:ee:a0:cb:d9:19:7d:f6:39:d7:8d:f8:d4:d0:b8:1a:a1:ae:
22:2e:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:17 2025 by rpki-client