Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/BvjHm2eLgQsE-EhNaMGys6XuvSA.roa
File: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (raw, json)
Hash identifier: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=
Subject key identifier: 06:F8:C7:9B:67:8B:81:0B:04:F8:48:4D:68:C1:B2:B3:A5:EE:BD:20
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 0194266A1450BD0CB48B80148B694BCB4869
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/BvjHm2eLgQsE-EhNaMGys6XuvSA.roa
Signing time: Thu 02 Jan 2025 09:47:53 +0000
ROA not before: Thu 02 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 45.159.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:14:50:bd:0c:b4:8b:80:14:8b:69:4b:cb:48:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Jan 2 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06f8c79b678b810b04f8484d68c1b2b3a5eebd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:bf:aa:38:9e:36:45:19:62:5f:82:c8:fd:
18:2d:ad:36:52:d4:9c:3e:45:fb:6d:73:c1:48:37:
9b:cc:72:ac:55:06:69:e3:f0:46:97:a8:55:29:8b:
67:2d:49:c8:df:f8:48:50:08:5f:77:78:c9:11:b6:
b9:23:22:2c:b2:df:d7:e1:1c:5d:2f:a3:20:e1:d2:
3c:42:f2:03:8c:b1:b0:3b:83:27:54:bd:4f:b7:f3:
26:90:3e:76:df:63:a3:78:bc:5f:99:2d:e8:9e:3a:
0c:86:8a:e9:ec:80:fb:20:7d:1d:7a:60:8d:bd:ea:
b8:7d:86:ea:7e:86:54:cc:65:1c:46:bd:b4:0a:65:
90:ae:e7:58:e3:98:13:e3:df:6d:be:a8:9d:f6:ec:
f5:7b:1b:3a:a1:b0:86:15:2e:11:63:8a:5e:b7:bc:
f8:e2:10:dd:eb:09:99:b6:ec:da:3a:bf:d3:f9:94:
0e:f7:19:3b:ab:2b:65:b5:b7:77:ca:aa:fa:1d:79:
2a:6e:01:30:25:69:57:17:3b:fe:5b:bf:44:c5:93:
98:4f:df:7d:1d:4a:05:de:7d:2b:4c:95:6c:24:79:
d6:2c:f1:86:49:37:d8:2f:1a:74:95:f1:05:62:0b:
ca:93:a3:a0:20:e9:5f:de:a5:96:19:1a:91:84:d0:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:C7:9B:67:8B:81:0B:04:F8:48:4D:68:C1:B2:B3:A5:EE:BD:20
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/BvjHm2eLgQsE-EhNaMGys6XuvSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.34.0/24
Signature Algorithm: sha256WithRSAEncryption
02:93:9d:27:eb:a8:4e:7a:54:06:9c:f3:02:c3:be:d5:ea:c3:
e5:4f:3b:a3:82:c7:27:fc:f1:0f:b6:6f:f2:83:21:65:12:08:
b8:bf:e4:4d:76:dd:e5:a2:47:00:3c:7a:1b:d9:af:0b:ae:76:
3d:bb:cb:d9:8e:e8:38:6d:48:09:17:13:48:d7:c2:95:21:d4:
fb:d2:f3:c1:e7:92:be:52:d9:ee:41:2b:95:3c:d3:81:78:13:
cf:b9:16:83:1a:63:5d:d0:bb:62:6f:cb:12:13:23:8d:a6:27:
6c:a4:6c:7c:77:36:5c:49:d7:49:0d:ce:69:90:04:a2:f9:cb:
d0:50:fa:ff:2d:48:b9:f1:34:9b:62:70:b3:3a:8f:61:b0:2b:
f7:98:67:94:d6:76:6f:4e:65:21:37:0c:1b:8c:41:24:83:3e:
67:fe:a1:be:87:65:f1:59:6c:c5:18:56:bf:b4:e8:3e:6f:2a:
5c:0c:36:4d:4c:5e:b4:10:27:d1:3f:d6:21:dd:9c:77:13:0d:
59:16:a6:93:2f:3f:ab:53:53:12:b2:dc:55:f7:b2:e8:60:e9:
9f:13:a4:d1:5b:82:f2:86:07:c3:72:8a:b2:24:05:fc:23:8f:
ee:20:67:4a:ae:7c:b2:81:00:f1:d9:1b:d1:a6:6f:f2:ad:2c:
b5:72:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:37 2025 by rpki-client