Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/9bvrYkBqiqKMnn8_sup9wHDDvAw.roa
File: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (raw, json)
Hash identifier: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=
Subject key identifier: F5:BB:EB:62:40:6A:8A:A2:8C:9E:7F:3F:B2:EA:7D:C0:70:C3:BC:0C
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019426D9D362E17FA1DE4176DF26BEDDCA56
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/9bvrYkBqiqKMnn8_sup9wHDDvAw.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60667
IP address blocks: 45.84.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d3:62:e1:7f:a1:de:41:76:df:26:be:dd:ca:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5bbeb62406a8aa28c9e7f3fb2ea7dc070c3bc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:6e:0c:ef:fa:04:9f:a8:92:70:ce:8c:fd:
93:ef:29:59:49:f1:65:eb:65:3e:10:3c:b5:f5:cc:
63:17:9e:e7:68:19:32:85:f5:49:87:29:e0:65:61:
8b:6d:eb:ae:34:73:a3:5c:45:e3:bf:f0:37:d9:c2:
f3:c2:77:a1:b2:55:e5:58:fb:7a:c8:de:cd:14:66:
5e:d8:bc:de:06:c3:fd:ca:80:28:92:71:96:51:e9:
ec:2c:77:b5:02:83:86:ec:fd:0f:f7:b4:1f:fe:ae:
df:e7:eb:f1:34:c0:c2:86:0b:a5:d0:0a:37:c2:56:
a7:26:77:a9:8d:22:0a:74:40:2f:b0:ca:98:2a:65:
a6:72:41:6c:a8:9f:f7:97:25:a3:e8:39:eb:db:51:
3a:39:82:3d:8e:c3:f8:7c:c4:f3:9e:41:37:28:24:
6a:8a:8a:2e:af:52:aa:2a:3a:4d:44:b6:b8:d0:a1:
5f:e0:87:d8:06:24:38:8f:b6:09:e9:78:ba:51:f0:
0c:b6:f5:59:fb:03:0f:41:96:98:3b:4e:6b:2c:d5:
d8:aa:20:6e:96:13:36:1a:8f:67:7a:f1:3b:71:ab:
83:09:a3:3a:d7:6f:40:f8:39:cb:32:f0:f2:76:bf:
17:34:34:80:46:9a:9e:7a:a2:a9:02:7d:f0:b1:ff:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:EB:62:40:6A:8A:A2:8C:9E:7F:3F:B2:EA:7D:C0:70:C3:BC:0C
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/9bvrYkBqiqKMnn8_sup9wHDDvAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e9:b4:93:ce:5a:af:59:50:0c:ee:a3:b8:08:3d:fd:c8:da:
13:b1:a8:73:ab:4c:b3:59:49:9a:e3:0d:ad:62:f1:8d:ed:8d:
a9:18:ad:52:dc:90:f0:41:fa:00:b7:9d:c6:e8:e1:6c:48:ec:
a9:0b:eb:b6:75:93:47:d9:10:ef:5d:f9:bc:8c:95:3f:5e:f7:
d2:ff:0f:5c:e4:a3:5f:2e:6e:c8:64:be:bb:f8:34:2f:8d:fd:
b1:8d:50:f5:a2:0c:b4:e5:4b:df:36:9d:46:d2:d0:c9:2f:48:
eb:5f:4a:79:4a:50:2a:99:e8:45:0b:9b:c7:27:0f:07:6e:26:
34:60:56:ca:a0:21:4a:4a:68:40:8d:06:7b:78:11:40:d0:2a:
69:87:6f:d2:90:0f:0e:2d:d5:da:bc:32:f2:e2:74:f2:25:56:
9a:86:83:c7:ff:d5:05:00:c7:a4:41:1e:26:08:db:c6:1e:dc:
82:ba:b3:b1:de:db:29:c9:80:f8:a3:c8:31:fe:e4:6f:4f:75:
9b:6c:27:dd:9c:55:39:05:63:a7:b5:9d:37:aa:31:30:70:4c:
7e:c7:be:5d:da:8e:1b:b4:f7:b1:65:73:64:f0:63:a4:6e:3d:
ec:d2:7f:21:52:7e:50:45:47:cf:b9:0b:ae:e9:96:7c:d0:4f:
1a:cd:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:31 2025 by rpki-client