Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa
File: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (raw, json)
Hash identifier: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=
Subject key identifier: 07:6E:2B:AC:80:13:C8:8E:98:F5:B4:A9:38:8A:41:DC:F4:A3:FF:C4
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CBF8B8AC8B80CC0FF044EC692F5B4
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa
Signing time: Wed 01 Jan 2025 01:48:25 +0000
ROA not before: Wed 01 Jan 2025 01:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205775
IP address blocks: 45.93.56.0/22 maxlen: 22
185.36.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:bf:8b:8a:c8:b8:0c:c0:ff:04:4e:c6:92:f5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076e2bac8013c88e98f5b4a9388a41dcf4a3ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:6f:8a:4a:90:0f:a6:03:d2:70:d7:93:ed:
16:7a:e4:3d:1e:23:62:4d:15:14:23:c4:02:7d:d7:
13:08:70:61:11:ca:44:2b:d0:a5:f3:10:d9:cf:80:
bf:ce:db:6c:8c:55:40:4e:52:b1:50:b6:e7:31:b9:
64:40:ff:48:91:2f:01:c9:87:77:80:94:3c:4a:e9:
e8:73:29:ad:f6:e1:09:0a:9c:c6:e2:9a:ec:9b:1e:
11:29:f0:33:24:a6:b2:d5:58:b3:fa:38:58:54:32:
9d:ee:f5:0f:16:94:e2:de:8e:38:5c:da:31:d1:95:
91:b0:48:ee:24:cc:26:47:21:0d:cc:70:2b:6c:52:
bd:a9:f2:fe:68:6d:25:fb:00:2d:fe:df:cc:32:af:
83:7f:e3:8d:95:ca:ee:51:66:e3:e3:2b:94:72:6a:
44:6e:6b:4d:19:39:18:54:b8:60:a3:f1:37:cd:ff:
bc:73:cc:0f:43:f3:7b:c5:5b:97:c6:e9:f7:2d:4d:
b6:03:5c:91:26:fd:34:4a:73:be:ed:9e:9b:e1:b2:
d6:0d:38:74:d2:5c:57:c5:03:f7:86:27:d8:9d:60:
2b:a5:50:10:a7:97:17:df:43:ec:2d:ab:41:4c:39:
b4:98:ac:a8:e6:20:1e:c5:26:cd:40:8f:f2:b0:65:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6E:2B:AC:80:13:C8:8E:98:F5:B4:A9:38:8A:41:DC:F4:A3:FF:C4
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.56.0/22
185.36.0.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b3:38:90:e2:50:c9:90:a8:d1:a3:98:88:b0:dd:a7:b0:8a:
d6:57:45:f6:44:3b:83:fa:af:4d:a8:1a:a0:83:38:24:e7:34:
5f:a0:41:a2:2d:1d:e3:f4:b3:43:d9:32:92:2d:dc:f8:c7:22:
ca:ff:0a:bc:2f:53:bc:24:ae:7b:96:8a:f0:39:91:62:72:47:
38:4f:52:e2:c8:3a:eb:9d:cc:25:7b:74:88:d5:64:c5:72:7b:
a7:35:2f:7a:ee:78:8b:9e:be:ab:ae:fa:ee:b1:7f:61:60:c1:
b2:56:a8:8f:0a:e1:93:a4:a7:a8:68:0c:3a:c7:b7:4b:45:ce:
96:f0:fb:e7:4e:5a:72:34:7a:96:73:1a:b1:eb:76:4b:b5:6a:
ff:3e:ed:de:93:e2:f5:a5:7a:69:2a:9e:6c:e9:5c:56:07:2e:
0b:50:fd:b5:d7:fd:c1:ff:a3:e7:f1:a9:24:ff:d5:50:1d:09:
9f:ee:06:6e:9d:f4:f0:76:40:3c:68:ef:3f:e6:25:ae:c0:83:
b1:63:93:a9:f7:0c:00:75:ba:d5:3b:df:5e:15:16:83:a5:8d:
1c:85:30:c4:ed:59:7b:b0:c3:12:3a:83:63:24:ae:39:1e:d9:
26:42:20:2f:c2:d2:c4:34:dd:a9:d5:78:bb:71:61:4c:e3:54:
83:71:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:46:21 2025 by rpki-client