Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/k6eyynVladw6I8I9j1dsAe95OA8.roa
File: k6eyynVladw6I8I9j1dsAe95OA8.roa (raw, json)
Hash identifier: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=
Subject key identifier: 93:A7:B2:CA:75:65:69:DC:3A:23:C2:3D:8F:57:6C:01:EF:79:38:0F
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 019420D5CAFCA1B0E5C6A2DCAE38565FAA4A
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/k6eyynVladw6I8I9j1dsAe95OA8.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206485
IP address blocks: 45.129.136.0/22 maxlen: 22
45.129.136.0/24 maxlen: 24
45.129.137.0/24 maxlen: 24
45.129.138.0/24 maxlen: 24
45.129.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:fc:a1:b0:e5:c6:a2:dc:ae:38:56:5f:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a7b2ca756569dc3a23c23d8f576c01ef79380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:da:9a:ed:82:d5:f3:ec:48:62:db:10:1b:
2b:19:59:c4:06:d2:b2:94:c0:d8:01:bb:5f:91:47:
1b:34:17:c6:43:e7:1f:04:dd:52:62:2a:65:e7:07:
a1:be:23:24:85:1c:4f:15:71:d7:14:ce:f8:39:a3:
b3:a1:88:6c:2d:f4:1d:0a:04:de:96:65:ae:7c:6c:
e3:1b:db:61:40:17:e1:0c:e1:c7:37:a0:37:4e:8c:
ed:d1:1a:8f:af:e3:5d:3b:37:f4:aa:f7:76:1f:2c:
5b:60:01:6b:a7:a3:e8:7f:44:6a:08:25:06:5e:62:
69:17:e1:a9:cc:06:e4:d5:f2:fe:56:ed:de:38:c2:
12:d7:f3:c5:9d:30:47:b4:3b:cf:ed:a4:fa:ad:14:
4e:e5:de:f8:2e:b3:f3:54:b3:ba:a8:a0:97:a5:cd:
1f:b9:d4:d9:27:ce:e5:46:dd:42:5c:43:7f:5f:e6:
c9:b5:b3:78:58:ac:5d:70:9e:cd:ea:62:66:7d:ef:
f2:db:b0:4a:f3:84:12:9b:c7:17:60:ea:de:d0:83:
3d:14:68:28:bd:97:08:31:b2:a2:a0:61:3f:6d:18:
d8:5b:b9:d8:20:2e:49:ed:77:85:cf:02:fb:b2:e6:
43:03:ca:37:1f:e7:11:95:7d:17:ad:51:03:93:43:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:B2:CA:75:65:69:DC:3A:23:C2:3D:8F:57:6C:01:EF:79:38:0F
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/k6eyynVladw6I8I9j1dsAe95OA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.136.0/22
Signature Algorithm: sha256WithRSAEncryption
35:46:73:4e:7a:69:ac:0d:f3:64:81:70:80:aa:22:84:98:19:
15:5f:31:81:83:56:80:88:44:ff:7e:da:a0:24:e6:3c:fe:82:
1b:d6:e4:44:9b:76:31:17:f9:8f:49:45:1e:e5:52:5a:83:1d:
81:d6:9f:6a:cb:a2:34:26:6f:ad:09:33:bf:3c:63:ed:0b:70:
65:a7:a8:5c:a1:a4:51:4f:83:72:59:a5:01:b6:99:e7:8e:45:
ec:4a:ec:1a:2e:5d:56:47:fd:4a:73:1e:63:c0:4c:15:69:5f:
bc:8d:45:d4:1c:66:53:f4:42:72:26:88:89:6a:cf:df:2c:94:
21:50:77:7f:8e:e1:16:27:b1:e5:47:78:22:97:25:8e:e5:b8:
35:5c:2e:68:7b:93:55:32:9e:cb:56:7b:2a:a6:16:63:5f:80:
9a:9f:bb:eb:7a:df:77:5d:d2:c8:3d:92:24:cf:69:e6:f6:3c:
a8:a8:9e:3d:0c:96:d8:ff:85:e8:7f:7c:ab:cc:47:e7:4e:23:
ce:96:c9:33:f7:de:ba:79:59:38:df:91:db:e5:91:bb:d1:24:
6c:58:ef:97:c0:fb:87:7a:fe:5b:47:a2:16:3e:83:65:14:4d:
e3:1e:96:d6:2e:be:bb:72:7a:4c:a2:c6:58:17:9c:3c:e0:72:
67:18:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:28:08 2025 by rpki-client