Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/49pxkgi7itIv6ImUGF743Hog5ps.roa
File: 49pxkgi7itIv6ImUGF743Hog5ps.roa (raw, json)
Hash identifier: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=
Subject key identifier: E3:DA:71:92:08:BB:8A:D2:2F:E8:89:94:18:5E:F8:DC:7A:20:E6:9B
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 0194228E00B01115651F2631C3F00465F8B6
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/49pxkgi7itIv6ImUGF743Hog5ps.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212635
IP address blocks: 45.159.140.0/22 maxlen: 24
2a10:6e40::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:00:b0:11:15:65:1f:26:31:c3:f0:04:65:f8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3da719208bb8ad22fe88994185ef8dc7a20e69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:b7:a6:e7:fb:72:bc:5b:e6:c8:ae:dd:89:
37:6b:e3:d5:45:64:d2:a2:4e:d3:78:c4:76:5d:22:
22:34:f8:cd:6b:03:08:08:e2:0f:5e:41:ad:b3:72:
85:b2:c2:41:50:17:f2:79:85:9b:83:ac:d7:a9:50:
44:f3:8c:51:77:2b:b2:17:d2:67:c3:6e:ee:82:66:
e1:82:28:f9:c3:75:d7:0e:95:f0:05:c5:d0:f1:5f:
0d:fe:70:3d:0e:b7:1b:13:c4:36:fe:de:9d:15:6b:
6c:0c:e9:e2:95:ed:00:8c:86:d7:be:13:3d:65:3a:
71:41:9c:07:f7:7c:12:24:f2:ab:46:b7:21:09:63:
81:fa:d5:7a:63:d4:b5:a7:64:43:ab:ad:d3:fb:66:
19:60:51:5b:bb:89:80:c9:bc:52:02:57:91:ee:10:
b6:ee:cd:c8:6f:c5:95:10:8b:61:ee:19:bd:8f:3d:
96:f3:cf:00:f6:41:f0:b0:c1:2f:6d:47:ee:d0:46:
ff:79:32:87:aa:48:ad:0d:99:4e:96:5a:ca:57:2c:
dc:bb:2d:13:5e:7d:30:24:48:72:d7:4e:c9:5a:5c:
30:ec:e2:6c:44:3a:46:19:e8:4a:01:ae:e4:f4:98:
57:a4:74:fd:b6:3b:be:a2:12:ca:f7:77:e0:2b:e9:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:71:92:08:BB:8A:D2:2F:E8:89:94:18:5E:F8:DC:7A:20:E6:9B
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/49pxkgi7itIv6ImUGF743Hog5ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.140.0/22
IPv6:
2a10:6e40::/30
Signature Algorithm: sha256WithRSAEncryption
2e:c5:c0:67:6c:ec:e0:7a:ea:fd:35:2a:04:5f:3e:c1:44:98:
e5:60:50:97:89:12:bd:fb:b9:50:cb:a4:a1:ac:c2:8f:3b:31:
dd:94:c1:bc:6e:32:e9:72:36:0a:d7:ad:75:49:c3:64:ca:51:
c6:05:42:d1:40:6b:5b:b5:e7:57:0e:88:36:2d:9f:68:3e:45:
ce:69:4a:68:e9:11:e0:7c:c8:85:9d:8b:e3:e4:37:28:c5:b1:
f2:1b:33:4f:fe:68:bc:88:c2:c8:6b:1b:77:26:cd:2c:a0:43:
ed:6e:df:b4:2a:2d:cf:4b:19:a1:c6:c3:7a:c2:b9:e4:87:31:
f2:41:c9:18:93:1c:bc:75:80:1c:cb:6c:82:7f:ab:5e:11:48:
38:41:53:71:0f:b1:4c:9c:f5:0c:55:f9:dc:31:dd:55:d3:15:
a1:d3:4a:6e:8a:cf:75:0a:81:cd:26:cf:e0:3a:ff:48:5a:04:
8f:cd:99:aa:42:45:dc:a5:02:f6:af:17:df:5e:61:58:00:40:
dc:f9:1f:3f:61:9f:11:14:e7:f4:38:81:42:f1:a6:3c:54:86:
3d:47:e6:cc:8a:c2:fe:5c:60:4c:6f:5e:b3:f1:75:34:cf:29:
8d:18:d0:e3:bc:3e:ba:57:da:f7:db:c0:1e:b4:a7:64:06:3b:
f6:c8:aa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:30 2025 by rpki-client