Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sdY5GVhSn41Y1Fk55KD6NvwAYPQ.roa
File: sdY5GVhSn41Y1Fk55KD6NvwAYPQ.roa (raw, json)
Hash identifier: Ym5uOysJBcpDs98+srAHKhtSaDL2ZImuaz0UH/pYN8w=
Subject key identifier: B1:D6:39:19:58:52:9F:8D:58:D4:59:39:E4:A0:FA:36:FC:00:60:F4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422201B0AD5886527B3B77947140844B3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sdY5GVhSn41Y1Fk55KD6NvwAYPQ.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1b:0a:d5:88:65:27:b3:b7:79:47:14:08:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1d6391958529f8d58d45939e4a0fa36fc0060f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:b9:0c:d7:dd:76:ee:56:71:e4:71:68:9f:
a1:e5:f9:88:9f:18:5a:47:06:4a:47:3f:45:19:b2:
35:5c:ca:34:af:76:b5:22:8f:76:27:6f:ff:81:dd:
56:96:04:87:00:17:89:cb:11:53:13:f3:1d:ef:07:
d2:9d:bc:58:2f:cc:cf:14:86:66:e5:e2:a5:b6:9e:
5b:aa:39:dd:1f:ca:8d:b5:0a:70:9d:52:aa:7a:9b:
99:3a:2c:b9:ab:fe:1e:d1:8e:ce:84:ff:18:22:60:
2e:3f:9a:bc:9b:1c:72:d6:bf:04:de:fe:c7:81:d9:
cf:5c:b0:b3:93:00:7f:8f:d5:31:3b:9d:75:14:8d:
dc:96:03:a6:78:38:74:0d:07:c7:6e:87:64:a1:21:
2e:20:c3:e0:62:74:5b:a3:e0:67:46:da:df:28:1d:
99:59:7a:39:27:73:0e:3a:72:b6:32:cc:14:85:03:
23:91:c6:9a:8d:bd:4a:68:fd:c9:d0:13:c2:00:4b:
c7:bd:ae:ba:16:e1:5e:aa:1b:92:58:29:54:cb:86:
ed:6a:2a:ef:16:76:40:98:d3:d4:44:af:88:e5:ae:
78:11:b1:28:59:a2:ce:03:1b:b7:e1:05:09:98:7d:
8a:ce:15:df:06:0d:20:b2:e1:ce:20:89:05:28:ba:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:39:19:58:52:9F:8D:58:D4:59:39:E4:A0:FA:36:FC:00:60:F4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sdY5GVhSn41Y1Fk55KD6NvwAYPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6f:c6:c2:a2:8f:e0:5b:08:ef:dc:fc:2a:6c:60:6c:1d:c9:
57:82:02:56:7e:17:ba:c5:b8:75:70:af:06:22:fd:48:1d:d2:
3f:66:38:0d:d0:ba:eb:a3:49:95:e2:83:c6:c7:29:8f:ea:7c:
e7:52:d2:b2:5e:b4:c0:94:c8:7e:27:30:83:34:6d:29:97:fe:
81:7e:d1:70:dd:ab:b6:56:c6:6b:63:02:74:a6:c6:7d:c0:b8:
fb:d3:e3:78:c1:eb:23:7d:d7:f0:92:0f:a5:3b:51:86:67:7c:
7b:80:7b:18:b9:09:75:18:e4:45:49:1b:fb:95:f1:e8:52:ee:
2e:69:52:7e:b5:ed:65:08:6a:60:9b:56:22:37:ff:65:6f:6b:
17:90:28:a3:08:61:de:60:14:fd:73:e1:15:c8:39:49:4e:ad:
76:94:db:2f:79:72:0f:cd:97:dd:3a:27:e6:a6:9b:40:24:ac:
4b:f4:02:bf:2e:32:c2:d2:41:95:7e:72:c7:ce:6b:60:11:7e:
c9:56:47:b7:75:3f:bc:8e:e3:1d:ea:30:f6:0e:f9:b3:4b:88:
41:df:46:d2:38:73:b8:02:31:ab:78:bf:c8:13:c4:39:62:80:
5a:22:38:25:1a:89:d9:41:20:cb:f8:ab:15:35:d4:82:b3:28:
dd:d5:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:17:19 2025 by rpki-client