Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/BC9YAXepVvBWb0SpmFLnGsiu_0U.roa
File: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (raw, json)
Hash identifier: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=
Subject key identifier: 04:2F:58:01:77:A9:56:F0:56:6F:44:A9:98:52:E7:1A:C8:AE:FF:45
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 0194274856864FDFDB04A0AA5F705D00A0EF
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/BC9YAXepVvBWb0SpmFLnGsiu_0U.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44381
IP address blocks: 45.154.232.0/24 maxlen: 24
45.154.233.0/24 maxlen: 24
45.154.235.0/24 maxlen: 24
92.62.32.0/20 maxlen: 20
95.141.64.0/20 maxlen: 20
217.144.64.0/20 maxlen: 20
2a02:2c8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:56:86:4f:df:db:04:a0:aa:5f:70:5d:00:a0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=042f580177a956f0566f44a99852e71ac8aeff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:af:23:03:36:9b:6b:ae:ea:0f:ea:35:57:
29:28:3a:0a:90:f9:49:5c:1b:f5:db:f9:58:6a:7c:
5f:3e:e3:fb:ad:85:a8:f6:23:6b:aa:30:fe:ce:7a:
c5:ee:64:71:c5:61:34:36:cc:36:34:6c:73:f6:79:
a0:7b:2d:7c:00:e6:2c:a1:5d:8e:57:24:74:33:19:
a5:4f:22:f8:9b:71:9e:b9:7f:52:f9:d8:55:ce:39:
81:af:50:9f:df:d7:31:6e:56:e0:26:c5:23:98:6a:
fc:c9:c9:9b:4d:e6:f7:f9:e7:1e:d3:30:9b:1a:b0:
50:fb:69:27:a4:08:2b:c7:b1:6d:37:87:13:95:23:
57:c1:5d:71:e0:64:2f:9f:94:4c:e9:fa:cc:54:49:
18:d7:e5:1f:db:6e:73:24:78:9a:ab:13:db:d4:0c:
f7:97:bc:7b:88:92:90:7b:98:d0:55:be:ae:72:00:
6b:75:c9:6a:b1:8b:60:f6:c5:07:94:1d:28:b1:8a:
f2:2f:3d:43:5a:1e:b9:11:06:43:8e:fe:3e:e3:86:
b1:05:c1:50:d8:81:96:2d:70:79:f3:ad:be:56:36:
02:a0:a1:44:94:3b:64:e4:fb:ab:7b:3a:23:aa:0e:
ba:9c:8b:2d:c3:d6:b3:29:bd:cd:b0:18:3a:2f:76:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:58:01:77:A9:56:F0:56:6F:44:A9:98:52:E7:1A:C8:AE:FF:45
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/BC9YAXepVvBWb0SpmFLnGsiu_0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.232.0/23
45.154.235.0/24
92.62.32.0/20
95.141.64.0/20
217.144.64.0/20
IPv6:
2a02:2c8::/32
Signature Algorithm: sha256WithRSAEncryption
1e:02:15:ff:07:9d:52:00:d6:6e:14:80:24:11:c1:14:1b:e6:
95:5c:76:36:a1:cc:ff:85:bf:4a:b3:0a:6b:0a:f8:b2:2a:fb:
5a:e3:93:c4:d3:72:d5:14:97:f4:01:02:1b:ba:6e:16:7f:4f:
52:d7:49:d9:c3:ee:d6:ad:af:62:4a:17:52:1f:cd:77:22:68:
f6:e1:f6:1a:95:64:e6:43:87:dd:a4:49:69:56:ef:f9:61:83:
28:9f:a5:e2:06:ca:32:c4:f3:df:f3:88:fe:06:b7:96:68:a1:
99:3c:c9:e6:ae:9f:92:6d:e0:bd:d2:db:36:28:d6:d8:83:86:
d2:3c:ae:35:94:5a:13:5a:62:f7:b0:94:98:3b:9d:76:9a:42:
8a:a5:1b:2f:1f:16:63:05:f4:95:7c:b6:e6:cd:11:98:c6:9e:
d4:3e:09:91:7c:9c:ee:bc:8b:e7:8a:e9:56:df:ee:a9:e1:70:
10:c6:fb:5d:b7:0d:6b:76:1b:4a:40:2f:9b:46:6d:1c:e1:39:
65:c0:46:ee:97:46:62:17:09:7b:9d:b0:68:2b:b0:85:84:d6:
5a:2e:1e:85:c3:03:83:8c:e1:3e:5e:d9:34:72:09:1f:97:a1:
92:86:45:dc:6a:c1:f0:00:80:a6:47:27:91:b0:b9:0b:95:e3:
3a:6c:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:32:41 2025 by rpki-client