Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/6rPFWOjVfpn28_M8t16r5KAzkLA.roa
File: 6rPFWOjVfpn28_M8t16r5KAzkLA.roa (raw, json)
Hash identifier: wER3Gq8nSGCzekLgZFtgVD/F8/GF6EezM87XvHZecI4=
Subject key identifier: EA:B3:C5:58:E8:D5:7E:99:F6:F3:F3:3C:B7:5E:AB:E4:A0:33:90:B0
Certificate issuer: /CN=d64065a5415d9942390145f2247901d9364589d7
Certificate serial: 0194258F4705B94470FAD8263A20EFD23517
Authority key identifier: D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/6rPFWOjVfpn28_M8t16r5KAzkLA.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 45.82.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:47:05:b9:44:70:fa:d8:26:3a:20:ef:d2:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64065a5415d9942390145f2247901d9364589d7
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab3c558e8d57e99f6f3f33cb75eabe4a03390b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:75:ed:60:4d:d6:c7:63:ce:88:b6:0e:77:
3b:1d:04:c7:23:a8:60:e1:b4:0b:f1:35:6a:59:79:
75:4b:3e:19:e6:f9:f8:4b:ef:b0:c4:25:5b:c7:09:
44:50:4d:78:59:d9:dd:6d:dc:4a:32:b1:64:e7:f7:
20:f0:d7:22:1b:81:b7:3c:d1:09:d3:6c:93:1e:d4:
7e:dc:81:31:4c:d7:6d:c8:06:76:a3:d8:bf:1f:e1:
aa:47:12:76:4a:ae:3b:b3:6d:13:97:43:0d:45:c7:
8c:d8:3d:4e:01:4e:0d:8e:34:31:f0:12:73:b6:de:
c9:9b:53:4b:c7:ce:74:a1:8e:08:72:12:fd:ca:8e:
c2:2a:a7:80:8c:ad:db:e0:b6:2d:25:a2:4a:a6:ae:
67:95:f7:f0:66:8c:85:2f:56:45:2b:e5:ab:dc:38:
c0:f5:92:6e:0e:5f:cf:5b:c4:3a:3b:ef:2a:82:9d:
50:ca:5d:62:97:89:ab:8e:9f:86:87:82:d4:c6:b0:
4f:80:32:f4:d7:fd:d8:b3:20:14:aa:ce:92:8a:1a:
e2:06:fa:8d:61:0c:dc:e9:7c:1a:0a:0b:80:79:64:
5b:9d:d2:3f:2f:df:94:70:c0:c3:0f:d7:ff:5e:5f:
85:f9:c9:d0:21:19:67:2e:e3:c0:89:43:d6:f4:77:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B3:C5:58:E8:D5:7E:99:F6:F3:F3:3C:B7:5E:AB:E4:A0:33:90:B0
X509v3 Authority Key Identifier:
keyid:D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/6rPFWOjVfpn28_M8t16r5KAzkLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:67:f4:7c:7c:0a:9c:9f:0c:5d:f1:00:ae:17:ee:ac:84:48:
40:12:23:58:6f:10:ad:a3:b2:cb:5d:f0:ee:bc:8a:17:52:72:
66:ee:13:c9:a1:c7:4d:7b:c9:c4:e2:39:69:76:76:a6:74:e7:
e8:c7:74:8f:ce:22:9f:1e:d6:11:27:53:f5:e5:cb:15:a0:f2:
fb:1e:cf:54:f4:43:68:fd:11:99:44:62:ea:d3:79:8b:ff:42:
21:16:ce:c4:61:b8:90:12:d1:d0:4f:3c:b7:32:d9:37:17:8f:
ed:3d:6d:f8:5c:68:7c:2e:7f:0b:5e:aa:a3:9c:7b:aa:e5:2a:
51:87:98:0e:24:17:2d:71:a6:85:f1:d7:e1:c1:a5:b3:18:b2:
4e:ed:68:10:c0:a6:8d:06:a8:44:d8:d6:23:4b:ed:8d:61:7a:
df:6d:84:9b:14:aa:38:ce:c6:4c:26:3a:47:ee:32:74:bd:0b:
cc:bc:e2:f6:b7:c6:90:b1:6e:49:17:a2:e8:15:04:d8:c5:f4:
94:e0:f9:9b:11:1f:e9:6d:c4:43:29:a1:00:ce:ea:dc:dd:ee:
38:e8:e7:c8:49:9f:22:07:36:43:8c:08:09:d7:f6:ab:2c:71:
86:2e:fd:e1:34:10:d4:9c:81:f5:53:27:40:f4:08:49:01:e0:
f6:1e:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:58:50 2025 by rpki-client