Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/bItIvz4oTSzEDWqrAWUpQQfUMhI.roa
File: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (raw, json)
Hash identifier: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=
Subject key identifier: 6C:8B:48:BF:3E:28:4D:2C:C4:0D:6A:AB:01:65:29:41:07:D4:32:12
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 01942444D7C8A271973CD4A2466C1C54427B
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/bItIvz4oTSzEDWqrAWUpQQfUMhI.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39637
IP address blocks: 45.91.122.0/24 maxlen: 24
2a13:9b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d7:c8:a2:71:97:3c:d4:a2:46:6c:1c:54:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c8b48bf3e284d2cc40d6aab0165294107d43212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:3b:cf:4a:d2:91:53:f9:77:00:f8:cf:52:
bc:0f:38:2f:7e:23:16:9c:79:80:8d:f8:8f:78:1b:
d6:db:ad:c2:d4:4a:6d:e3:8b:e0:10:e4:d5:17:6f:
52:f5:8b:8c:fa:58:e8:dc:38:65:d1:29:1c:0f:19:
77:03:91:a0:7b:32:17:e3:41:9c:48:92:dc:4e:f7:
bc:31:70:da:34:85:c9:59:67:0b:e4:29:b2:8f:58:
cb:d4:31:63:7f:76:1b:5d:5d:d8:88:9c:6a:57:2f:
f0:7f:00:48:91:57:dc:f5:cb:62:62:01:a2:f2:12:
c5:b5:94:39:cf:36:78:72:92:99:0e:f8:c3:06:1b:
56:73:af:bc:4f:90:a7:0e:93:bf:a8:ab:4c:46:bf:
1b:a3:0b:5f:79:c2:be:6e:3f:19:49:de:f7:16:61:
00:3a:bd:c8:ed:ae:ae:f2:0e:06:63:33:75:dc:03:
9a:bb:f2:40:83:3d:a8:a2:ca:1c:8a:a2:a2:0a:cb:
25:d7:30:28:fb:50:22:61:fb:75:e3:53:be:4d:74:
98:b5:09:c5:47:45:26:fc:aa:79:6f:fb:cc:98:93:
5f:7b:2f:28:f1:b7:ad:90:e5:3d:84:e1:f1:78:50:
62:5f:53:82:5c:8a:da:d3:fb:a6:4f:1b:44:93:60:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:48:BF:3E:28:4D:2C:C4:0D:6A:AB:01:65:29:41:07:D4:32:12
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/bItIvz4oTSzEDWqrAWUpQQfUMhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.122.0/24
IPv6:
2a13:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
77:40:43:29:53:7e:13:e1:d8:56:1e:df:39:fe:61:0c:56:af:
78:6e:c1:98:9d:39:01:ae:19:96:1d:57:81:d3:65:a6:d6:29:
4d:f9:39:fd:d5:31:77:4c:5d:f7:53:d1:0d:1f:61:c0:4e:4f:
c7:86:7c:92:07:1e:12:7e:ef:a7:0a:64:7a:d9:e7:86:87:52:
00:09:20:a3:8e:d4:dd:26:31:db:49:3d:96:5e:d1:96:9f:55:
15:af:db:5a:fe:e6:08:9d:5f:e3:41:51:7d:d2:ea:b6:81:86:
68:9b:52:c9:20:38:c2:bf:e4:50:2f:75:ce:9f:8f:d6:8a:f3:
86:1a:a8:41:9d:f3:ca:8c:32:cb:a7:3d:59:3d:e7:ab:88:5e:
e8:02:9a:be:f2:fe:ff:15:66:ad:41:6e:1d:16:2c:15:5c:f8:
af:06:6a:88:44:87:8a:31:b0:36:33:32:7a:1e:ab:fc:f5:18:
83:c0:fd:8d:db:95:77:4e:4e:af:13:b0:61:0b:21:9f:c5:67:
f1:7c:c7:16:40:d2:39:b5:05:19:4d:02:4c:c2:1f:12:5a:3f:
44:e5:f8:21:66:b2:28:bd:fb:c7:6a:7a:a9:9e:c3:c6:d2:96:
6f:04:59:3f:d7:0e:a9:e6:53:a6:27:d2:41:5c:b3:3c:12:c6:
bd:8d:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:50:13 2025 by rpki-client