Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/vaL0J_r43BzBTm5r8Bo75j0pTF8.roa
File: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (raw, json)
Hash identifier: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=
Subject key identifier: BD:A2:F4:27:FA:F8:DC:1C:C1:4E:6E:6B:F0:1A:3B:E6:3D:29:4C:5F
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 01942748733576FB4814849F1D56B79D546D
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/vaL0J_r43BzBTm5r8Bo75j0pTF8.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208094
IP address blocks: 45.141.55.0/24 maxlen: 24
2a05:4741:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:73:35:76:fb:48:14:84:9f:1d:56:b7:9d:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda2f427faf8dc1cc14e6e6bf01a3be63d294c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:c4:3b:89:aa:98:3f:e1:e5:57:5d:6b:00:
77:b0:7f:91:1c:40:5e:39:2b:10:ab:8c:b1:c6:d7:
82:cc:6e:10:da:58:d2:e8:34:24:ca:71:8f:b8:db:
22:99:a5:3e:a3:d5:0d:1e:37:6f:5a:00:eb:53:27:
ff:9a:70:9f:f0:7b:ef:4c:ff:8c:4e:f4:db:05:b4:
1c:46:78:3f:e4:07:92:94:a7:d8:1f:82:77:61:a4:
69:f9:d4:4f:22:4f:a1:c0:cb:83:c2:92:82:ee:cb:
21:4b:aa:7a:08:c7:02:f8:5e:10:7b:e3:83:8f:10:
3e:19:c0:71:f5:19:74:33:27:f0:f9:5d:ff:51:66:
da:96:8f:6c:c3:e1:a9:fc:c2:25:60:df:69:93:e1:
96:12:67:8a:b3:72:c8:9c:ac:19:fa:ec:5b:8d:33:
69:f8:be:09:ee:53:f3:84:b2:92:ac:1d:79:d9:97:
46:d2:98:d4:6e:ba:51:83:9b:57:f8:e7:b8:f1:f4:
db:e6:0e:93:0b:fb:db:f7:64:78:f8:55:85:d0:da:
92:a0:a4:9c:fe:b4:5a:48:7e:7f:2c:f2:37:df:13:
1f:05:6d:d8:f7:65:e4:a7:0a:a2:73:3b:5d:53:06:
bd:bd:f6:65:72:6a:a7:bf:8a:4d:3d:b0:2d:1a:62:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:F4:27:FA:F8:DC:1C:C1:4E:6E:6B:F0:1A:3B:E6:3D:29:4C:5F
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/vaL0J_r43BzBTm5r8Bo75j0pTF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.55.0/24
IPv6:
2a05:4741:20::/48
Signature Algorithm: sha256WithRSAEncryption
94:24:1b:f8:ac:ba:76:43:ff:45:c1:bf:6f:65:b5:ad:f7:ee:
2d:99:28:dd:47:25:89:ab:b0:31:53:e5:27:9e:2f:0c:61:02:
e8:3d:2f:c5:f6:d8:3e:2a:38:e9:01:5a:0e:00:26:42:e1:98:
df:c8:28:d4:59:e6:54:df:fb:74:67:92:71:62:6c:7d:2c:e1:
82:ee:43:b3:e8:ee:5e:ae:e4:e1:12:d8:9c:56:04:5c:bc:7c:
84:f4:94:13:52:9d:5a:63:74:60:97:f3:73:6d:1b:47:51:a0:
0c:87:cc:0d:0e:fc:e9:2c:21:7e:76:cb:9f:4b:05:f6:21:b8:
db:04:e2:88:c3:ee:26:97:67:cf:e7:79:2b:de:95:a0:22:df:
7e:58:d5:47:b0:f7:ee:af:79:9d:49:7f:b3:79:8e:b7:aa:18:
0a:f9:22:7b:7a:97:64:8d:dd:d1:f1:00:1d:99:e8:d7:f5:f7:
d9:7c:14:9b:7c:69:26:71:60:ae:89:06:ba:0c:7b:3f:7e:ce:
ee:57:89:00:42:de:5f:d0:68:3b:d2:c9:d7:20:76:7e:b0:53:
59:3b:e8:4d:ed:3d:d0:39:28:8d:9e:76:86:7d:86:84:3d:92:
d0:99:71:b6:22:d7:60:8f:5f:a8:ba:2e:0f:9f:05:18:38:5f:
77:81:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:03 2025 by rpki-client