Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa
File: bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa (raw, json)
Hash identifier: 6iwUdlESdz7+RkwneMjDQat08j+fPpdTnz5Y4bRYJrE=
Subject key identifier: 6C:A7:7D:9D:19:45:A3:58:04:5E:04:9F:54:A3:27:0B:D8:02:5E:D4
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D77427797BC267B5A85428D3908A11
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212567
IP address blocks: 5.1.66.0/24 maxlen: 32
185.150.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:74:27:79:7b:c2:67:b5:a8:54:28:d3:90:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ca77d9d1945a358045e049f54a3270bd8025ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:85:ab:ef:85:ab:99:e3:15:ef:25:7e:55:
49:04:87:36:e5:51:48:e6:14:8d:3b:b3:29:bd:a7:
c6:09:7b:1b:9e:a5:fb:f5:c7:59:1f:a3:fd:20:bd:
64:f9:43:40:63:bc:e2:b0:39:36:19:bc:57:52:33:
cc:c2:13:75:9f:3a:2c:0c:8f:d8:8c:96:4b:ba:24:
47:ba:19:60:49:e8:88:e0:38:25:b1:14:58:85:e3:
d4:6e:c1:49:c8:af:70:12:73:65:82:67:03:96:54:
4c:63:22:9a:d5:7f:0f:45:2a:f7:a5:2e:ae:a2:3b:
0d:d7:02:79:e0:2d:e9:02:ef:a6:ba:47:cb:77:56:
47:bd:29:3f:12:10:9f:f6:fc:dc:ae:20:42:2c:77:
e0:a1:c1:c5:ac:a4:61:89:3a:67:02:1b:0d:4b:68:
67:ca:33:dc:7d:a6:76:08:a1:73:85:9e:e4:87:fd:
a1:6b:fb:74:33:66:05:23:80:ab:38:b9:c0:95:df:
23:b2:07:23:5a:a5:d5:83:7c:6a:a2:e2:f6:bb:08:
67:dd:37:36:7f:42:a7:4b:c7:c2:83:35:fd:0f:6d:
d0:46:53:80:2a:75:e8:0a:59:03:ab:14:89:12:cb:
cd:52:dd:65:c2:9d:9f:07:2a:74:20:92:4a:ee:d2:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:7D:9D:19:45:A3:58:04:5E:04:9F:54:A3:27:0B:D8:02:5E:D4
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.66.0/24
185.150.99.0/24
Signature Algorithm: sha256WithRSAEncryption
26:25:63:a4:27:5c:8a:86:a6:12:5a:a0:6e:d0:7f:cd:3f:15:
36:a7:ec:34:fc:65:22:56:40:21:40:a6:ed:ca:7e:0a:b5:af:
de:fe:19:6d:19:29:79:61:10:b6:9d:d0:70:9c:66:b2:82:a8:
36:5d:d0:b9:a0:ed:70:e5:3c:85:f5:6c:01:6a:dd:52:c4:58:
dd:e2:05:59:68:b7:7b:70:df:43:59:aa:5e:1b:32:2f:7c:38:
e1:22:8b:ae:ac:8e:65:29:5f:20:62:89:5e:70:90:b4:53:e2:
fc:58:16:1b:8c:33:4c:35:a0:56:38:3d:ae:f6:4f:b2:15:21:
24:85:b8:d2:d2:3d:49:46:c9:30:fd:97:6d:77:26:70:b0:85:
56:e9:ab:12:32:84:12:4d:fb:49:b5:b6:15:2a:be:64:65:a5:
47:39:d2:cd:74:bd:71:fe:81:55:fb:18:4d:45:ef:69:09:1c:
59:f0:90:72:99:ba:1e:a9:20:ce:2a:73:2c:73:d9:c1:6e:29:
ea:cd:d8:8f:ed:e2:49:b9:d6:44:ae:e0:73:65:22:97:d0:af:
45:c8:3d:d9:79:91:4a:d0:f5:1d:d6:5a:ad:b0:27:6c:f1:89:
65:50:3b:2e:f1:34:b4:cc:b9:ab:37:db:81:57:90:e1:0b:6e:
81:b6:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:20 2025 by rpki-client