Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa
File: aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa (raw, json)
Hash identifier: RYvSIhl4EMxqFZiyrQ0zAL7ZWanzg67h6dO8KAffWY0=
Subject key identifier: 68:95:7B:19:B2:C3:AD:DD:82:43:3C:A8:1B:B2:7A:3A:74:CF:E4:36
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 0194258FA8BE46922B729D218214B4FFC808
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62033
IP address blocks: 45.132.34.0/24 maxlen: 24
185.127.129.0/24 maxlen: 24
2a10:5d80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a8:be:46:92:2b:72:9d:21:82:14:b4:ff:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68957b19b2c3addd82433ca81bb27a3a74cfe436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:38:bb:79:e9:bd:e0:71:7c:d9:38:3d:47:
9e:5b:8b:82:ee:a8:28:3b:d1:7a:f5:04:c9:16:c2:
70:83:88:e0:aa:b9:88:1b:7d:f9:f3:fb:e7:1a:ef:
fe:6a:21:42:d1:55:fa:b9:18:99:72:b0:a2:a4:57:
b7:ae:4b:29:32:fd:7c:ee:22:3a:d4:4d:23:98:2e:
a8:44:f0:d0:92:20:76:b8:cc:9d:c3:24:c1:a0:74:
87:89:e6:c4:59:33:2e:a1:71:0d:59:5d:0a:f7:b5:
7e:81:86:2d:44:cd:e8:32:d0:70:df:04:5d:61:f6:
56:75:13:57:e4:b3:c7:22:ef:40:37:29:fe:0b:d3:
e6:59:09:64:bc:57:f3:6a:3a:85:2a:d9:41:63:17:
0c:7e:ce:46:f0:d9:76:49:b5:b5:75:40:9d:74:cb:
35:b8:e0:d5:bd:43:7e:ab:d1:11:91:1a:16:3c:a6:
b9:2f:06:8a:77:88:d7:b5:9f:60:72:87:80:76:19:
53:55:5b:03:eb:f7:e6:89:50:2f:9a:3d:46:90:aa:
f7:78:56:88:6b:09:36:93:a3:c8:ed:69:50:08:9d:
70:6d:a3:53:d7:f4:b2:24:2a:aa:d0:d7:02:ba:71:
aa:89:34:b1:fd:a8:99:1f:40:ea:12:dd:96:b7:29:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:7B:19:B2:C3:AD:DD:82:43:3C:A8:1B:B2:7A:3A:74:CF:E4:36
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.34.0/24
185.127.129.0/24
IPv6:
2a10:5d80:1::/48
Signature Algorithm: sha256WithRSAEncryption
7c:99:77:08:50:69:d0:c4:c2:ee:cc:2b:fb:81:a6:0d:e2:29:
93:9b:79:a3:7d:35:c8:a0:8c:c8:29:30:fb:d4:44:c0:c6:96:
19:49:9e:b7:78:2d:05:17:6c:90:7c:54:54:74:f5:c2:7b:55:
2d:bd:d0:14:d5:ca:98:26:e9:a4:4e:8f:d8:1a:4e:06:93:cf:
bd:ff:e3:f2:4a:fb:3a:04:93:ae:84:97:44:f2:ee:fe:f4:ee:
4e:14:0d:90:7c:0e:5c:1f:be:f3:4e:b4:1e:99:a6:86:f7:c1:
57:9f:62:2a:53:5d:e1:6f:c7:1c:6c:6b:6a:dc:70:42:c4:07:
c5:53:bf:f7:d4:48:f5:d7:5f:17:21:45:b3:b0:8b:da:31:fd:
82:5a:ed:04:2d:29:2d:ad:8e:39:c1:da:19:dd:2d:bc:6f:d6:
9c:4a:f2:38:0b:3c:27:b1:99:07:bf:97:d4:10:f1:5b:59:f9:
d4:fc:58:59:d7:55:5d:4c:36:9e:f4:71:c6:d6:dd:06:2c:48:
d1:b9:86:9b:5a:14:5b:a4:e0:44:9e:48:c0:d2:4d:a3:d8:e0:
39:5c:00:dc:99:37:1f:61:ce:87:a9:3c:b7:63:ba:a2:de:41:
74:de:72:24:42:33:4d:27:3c:e5:ad:e3:78:95:42:24:cf:54:
0c:23:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:25 2025 by rpki-client