Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bHfPn3msgwx5FPQ-Adt7HpQNCIk.roa
File: bHfPn3msgwx5FPQ-Adt7HpQNCIk.roa (raw, json)
Hash identifier: mn8L9NM8fYmycQe3GG9bUyJmLWRnJsF0fPb8aD5LaTM=
Subject key identifier: 6C:77:CF:9F:79:AC:83:0C:79:14:F4:3E:01:DB:7B:1E:94:0D:08:89
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0196A076EC1E16FF53FF977B850854C4896C
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bHfPn3msgwx5FPQ-Adt7HpQNCIk.roa
Signing time: Mon 05 May 2025 12:41:10 +0000
ROA not before: Mon 05 May 2025 12:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202972
IP address blocks: 45.133.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:76:ec:1e:16:ff:53:ff:97:7b:85:08:54:c4:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: May 5 12:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c77cf9f79ac830c7914f43e01db7b1e940d0889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:74:a5:81:13:bb:83:2c:ab:e5:58:32:da:
6d:b8:54:ee:4c:85:cc:99:a8:d9:1a:98:ac:31:33:
dc:e3:06:18:2c:ba:cb:bc:71:38:51:8e:3a:d0:27:
bc:e8:f0:eb:4e:02:52:05:93:2c:16:78:64:c8:4a:
60:68:79:ca:99:5d:98:df:7b:7e:0d:81:ee:77:18:
25:2e:b0:b3:57:52:04:3c:32:2d:75:5e:f9:ba:83:
4a:46:9c:a5:de:bf:6c:43:37:7d:b1:e4:9a:14:d2:
6b:30:e2:a2:36:36:54:e5:34:98:f4:92:ee:f5:32:
b4:b8:cc:a0:ca:37:3c:67:d3:b1:7a:f2:0d:64:97:
ee:fd:20:91:2b:9a:d1:97:f5:6b:db:7b:bf:83:60:
a6:93:e2:d4:f7:63:e1:ae:b8:12:12:c7:d9:c1:2e:
5f:b1:8e:c7:a9:6c:f6:b6:af:4d:e7:1e:e2:77:e2:
6d:7f:5e:c3:e2:c3:0e:b3:c6:13:16:c0:05:c7:87:
37:2b:c8:45:a8:37:4a:f5:a6:6a:41:03:a3:01:ef:
39:16:d9:f3:b0:18:42:f5:77:10:9d:ef:91:17:bb:
46:35:fe:63:cf:3e:00:f9:13:c6:b8:b4:e4:73:f0:
a4:4c:25:6c:5d:69:cd:c8:d5:48:fa:78:07:b2:5a:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:77:CF:9F:79:AC:83:0C:79:14:F4:3E:01:DB:7B:1E:94:0D:08:89
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bHfPn3msgwx5FPQ-Adt7HpQNCIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.38.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c5:6a:f0:5d:2e:0d:e1:e0:82:73:86:85:f8:3d:42:2c:4d:
30:a7:52:de:c0:89:10:29:ce:7d:88:72:37:31:4c:34:2b:cc:
53:d2:5f:8e:76:b7:cb:f6:43:2b:cd:ed:22:26:44:ee:9f:b4:
15:74:7a:ee:1e:33:38:c1:7d:69:8a:ac:56:46:21:15:0f:3b:
37:6c:b1:9e:cb:64:e3:75:3d:cf:37:10:cd:ab:d2:63:18:0c:
63:be:d6:da:7e:1f:03:7d:31:73:3a:0e:eb:4a:72:0f:b7:aa:
aa:7b:a4:59:62:1c:cb:2e:90:a6:c4:64:f3:b6:83:2a:cf:5f:
e2:53:11:07:e2:1d:ed:be:56:73:2d:c9:ea:be:16:3d:60:cc:
4c:5e:1b:5a:69:66:c3:92:b1:fa:b3:f6:ae:d5:c9:a2:81:51:
60:de:9c:6a:3b:10:c5:04:de:c3:15:7d:dc:a1:36:43:7e:b7:
cb:90:d5:45:f7:6b:f2:99:29:91:db:d9:31:68:0f:b5:14:6f:
08:5f:41:03:b0:1c:cb:5f:91:71:57:9b:44:0f:9a:9f:d3:7a:
c7:fe:b9:3f:a0:b4:c0:34:7d:48:03:84:63:a5:3b:77:b8:05:
e6:f7:d2:fc:22:76:f0:7b:d4:90:85:47:d0:a0:f0:62:bf:97:
d2:ee:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:28:30 2025 by rpki-client