Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ieakcGoIiHFkmiV8wxWtgk3UGf4.roa
File: ieakcGoIiHFkmiV8wxWtgk3UGf4.roa (raw, json)
Hash identifier: eU0NDIB3a2rYpJJtub5haewQQHkz0eOOXtRaNtZWpKs=
Subject key identifier: 89:E6:A4:70:6A:08:88:71:64:9A:25:7C:C3:15:AD:82:4D:D4:19:FE
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455CB828FB883DC94B8C89B3A3C435
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ieakcGoIiHFkmiV8wxWtgk3UGf4.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57914
IP address blocks: 46.234.11.0/24 maxlen: 24
46.234.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5c:b8:28:fb:88:3d:c9:4b:8c:89:b3:a3:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89e6a4706a088871649a257cc315ad824dd419fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:9f:d2:15:6f:49:ba:77:ae:72:1f:bd:85:
79:41:17:9a:7d:22:0e:f4:29:0c:95:16:fb:ad:86:
e6:8b:0d:a8:77:47:5c:30:9c:39:41:8a:1b:2b:d5:
f4:a6:c6:6a:16:65:42:f8:d6:6f:2f:8e:18:01:43:
b1:d7:00:46:20:68:22:47:b3:85:7a:a5:28:86:4c:
ce:99:9f:51:20:f8:02:df:26:ef:13:e4:a8:ff:ff:
7c:e6:e0:cb:b6:9e:0d:03:dd:5a:18:b5:59:dd:31:
cf:ad:f4:28:0a:4f:01:e8:b4:a5:54:22:aa:0f:98:
5b:d0:8e:4b:bc:18:7d:f7:1b:76:ab:59:21:ed:6b:
d7:e6:c4:4c:b2:40:79:28:b0:0b:14:13:d5:0c:b3:
14:91:99:72:b9:e1:a4:58:f4:4a:73:e6:a2:47:74:
99:80:c0:58:f1:74:ba:48:1c:fd:7b:ce:bc:14:db:
50:74:e8:b5:95:74:2c:b6:f7:01:c5:06:0d:95:7c:
53:de:74:b5:ec:a9:65:6f:47:eb:bb:80:ce:34:37:
4d:65:94:16:cf:89:47:a6:bc:15:2c:48:eb:3d:e7:
87:a4:02:46:dd:bc:af:b7:94:13:db:b0:fc:fe:a5:
76:d3:87:8b:af:15:bb:ee:98:c3:b5:c0:d5:e6:ac:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:A4:70:6A:08:88:71:64:9A:25:7C:C3:15:AD:82:4D:D4:19:FE
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ieakcGoIiHFkmiV8wxWtgk3UGf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.11.0-46.234.12.255
Signature Algorithm: sha256WithRSAEncryption
6f:34:f2:c3:6e:71:0b:b9:cf:7b:5a:0e:ad:9e:54:9c:3b:e4:
bd:45:e4:ed:fe:b5:a1:99:39:e4:07:60:22:83:12:e4:69:94:
c9:49:53:78:ea:ba:c9:d3:fe:80:47:9f:a7:66:be:20:3e:9a:
d3:ae:12:de:53:f3:6b:02:ee:02:b5:1d:42:2e:22:46:61:a8:
97:35:35:0b:b6:1a:7a:9e:46:e9:fd:a8:8f:59:77:a5:e7:71:
71:38:14:00:b6:50:06:60:2b:ea:dc:90:42:b9:47:c3:39:08:
bc:a5:c2:bf:82:44:27:82:f3:bd:b8:00:e2:3f:0d:e8:ee:9e:
3d:b5:e0:44:f5:18:76:40:d5:51:48:e3:d8:9e:01:62:28:2c:
a0:f1:1b:96:52:c9:54:29:77:21:41:ee:a4:e7:26:66:ab:fa:
75:cc:ba:3b:29:bf:5b:83:e1:0a:8b:a8:bd:e4:70:30:d0:2f:
d1:0a:fb:23:bb:9c:1c:cf:0c:2b:12:ec:ac:1c:1a:c8:57:68:
50:68:f3:f4:3c:52:88:40:9f:2c:d2:64:8e:61:09:74:7f:25:
2d:3f:70:83:05:13:5c:0b:3c:52:ef:27:4a:b4:b7:3b:90:c5:
d8:2e:cc:7b:e5:b6:80:e5:e4:e1:a7:78:f2:87:62:79:e8:61:
8d:a7:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:57 2025 by rpki-client