Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/vQYaMoR9txyndSYv7p8Vy1-ysWo.roa
File: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (raw, json)
Hash identifier: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=
Subject key identifier: BD:06:1A:32:84:7D:B7:1C:A7:75:26:2F:EE:9F:15:CB:5F:B2:B1:6A
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019468DF98ACEEB15E238B461C9314813803
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/vQYaMoR9txyndSYv7p8Vy1-ysWo.roa
Signing time: Wed 15 Jan 2025 07:31:11 +0000
ROA not before: Wed 15 Jan 2025 07:31:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197445
IP address blocks: 45.141.216.0/24 maxlen: 24
2001:3800::/29 maxlen: 48
2001:3800:c::/48 maxlen: 48
2001:3800:ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:df:98:ac:ee:b1:5e:23:8b:46:1c:93:14:81:38:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Jan 15 07:31:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd061a32847db71ca775262fee9f15cb5fb2b16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:4f:db:8a:fc:84:1d:5a:9a:bc:43:e4:f4:
08:5e:49:66:5e:11:e5:cb:f9:fe:6c:c6:91:44:a0:
28:23:b9:55:b8:c1:80:4f:78:65:a7:d0:f0:e0:fa:
9f:6d:19:df:91:f8:80:1f:87:c4:a3:65:8f:ad:a1:
84:0e:b9:76:f3:54:fe:af:d4:db:fd:1d:3b:00:14:
35:ae:c4:2d:8a:b3:62:7b:2e:21:b5:46:9f:25:8f:
24:76:e4:c5:ab:7d:93:69:21:c7:6e:7f:26:b1:f7:
ac:8a:b9:7d:12:54:47:12:60:65:48:f9:4a:90:a9:
51:31:e3:9d:91:e8:3e:0f:9b:ef:b3:83:bf:5e:e0:
2e:56:b8:ca:9d:1a:8d:c8:00:87:4c:7d:c0:e7:ac:
e2:2f:90:56:c1:a8:14:40:0a:45:bb:f2:1a:ec:5c:
4f:cb:b0:1e:9c:cf:28:48:38:e8:89:6b:6b:46:f6:
17:dd:00:ff:d9:6e:17:3f:e3:08:83:d6:99:46:bf:
97:f3:0e:5f:09:b6:b5:29:11:cc:47:e7:a5:81:a3:
30:90:9c:96:93:ce:f4:16:95:68:ba:22:5a:97:91:
d3:c7:2e:27:0a:55:d4:57:1c:42:26:8a:d6:56:6f:
fa:94:5d:e3:c3:be:0c:fa:12:ff:56:ce:06:fa:6c:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:1A:32:84:7D:B7:1C:A7:75:26:2F:EE:9F:15:CB:5F:B2:B1:6A
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/vQYaMoR9txyndSYv7p8Vy1-ysWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.216.0/24
IPv6:
2001:3800::/29
Signature Algorithm: sha256WithRSAEncryption
d0:9c:ff:6c:9f:6d:ee:91:54:2c:55:2b:e2:6d:64:46:d9:90:
b9:69:ee:98:2c:7a:06:d9:6a:70:af:08:1d:60:a4:fe:4d:f0:
d6:e3:d3:ea:ab:16:1d:77:b1:fb:ef:a8:bd:39:65:5a:b4:d3:
7e:eb:b9:14:b4:bb:9e:51:26:dc:35:1a:ff:06:7e:f0:62:55:
75:97:05:24:f4:cf:d8:20:93:fc:cc:19:52:6d:0a:18:fa:32:
6f:88:61:34:80:8f:be:76:18:b2:94:9c:be:ed:50:ee:c8:f0:
25:1f:fa:de:3e:9f:0d:17:1f:ff:f9:aa:c4:7e:47:78:c9:45:
b3:16:f9:ac:92:fc:44:6f:b8:ee:55:c4:83:97:6c:76:ca:66:
95:7f:9a:eb:b0:c4:66:cd:5f:4d:bd:5a:3d:e7:1c:fc:5d:d6:
c4:72:d4:77:d3:cf:b7:27:55:e4:2b:04:f6:d9:e8:13:25:ae:
eb:a1:48:a0:f9:7c:67:4f:a4:3d:a1:95:70:68:32:84:52:ca:
ee:2d:d7:1e:54:0d:90:ec:6e:58:71:05:f2:67:5d:6f:01:37:
56:94:83:fd:e8:43:a6:d6:db:6f:39:35:31:fd:87:3b:b9:8f:
ad:58:a3:4a:22:cf:14:07:d1:ab:37:8a:4b:5c:40:9d:ee:a9:
09:fe:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:44 2025 by rpki-client