Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/46TJpMAMKtKtiPKhzv5N3feHRq8.roa
File: 46TJpMAMKtKtiPKhzv5N3feHRq8.roa (raw, json)
Hash identifier: dujtOMCU+2WZqLSqMypgTKImwrRcaOi7kuB75rD2Cb8=
Subject key identifier: E3:A4:C9:A4:C0:0C:2A:D2:AD:88:F2:A1:CE:FE:4D:DD:F7:87:46:AF
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23761896039F6FA9B18E29E4AFD47
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/46TJpMAMKtKtiPKhzv5N3feHRq8.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48481
IP address blocks: 185.32.67.0/24 maxlen: 24
185.50.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:61:89:60:39:f6:fa:9b:18:e2:9e:4a:fd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a4c9a4c00c2ad2ad88f2a1cefe4dddf78746af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:a1:da:7a:0a:31:6e:f4:29:37:68:f5:4f:
ce:26:d9:d0:b4:4c:19:2b:28:ca:e1:94:7f:bf:18:
2c:a6:48:ea:28:a2:94:47:c6:97:67:34:ba:ce:ce:
ea:22:de:d6:8f:ac:30:dd:d7:40:4d:dd:f2:26:32:
28:9f:53:f9:c8:3e:4e:60:b1:b6:01:3c:11:dc:10:
17:75:e0:7c:4d:0a:1a:94:70:76:7a:59:df:2d:18:
73:c9:76:28:d8:6e:bf:3e:85:00:6a:96:be:e6:f1:
a5:5e:77:f2:c7:8a:43:0e:3c:d1:02:90:1c:01:84:
b0:de:dd:ca:fe:c9:bc:a1:4a:6c:78:0a:8b:1f:93:
84:f1:80:39:d5:78:41:14:ff:00:bb:af:9a:6c:5d:
b7:b1:e3:d5:02:4f:c0:47:31:f1:c1:84:7c:14:61:
e2:42:07:21:21:46:ba:c1:ac:e3:3e:e3:99:5f:e3:
5f:fe:d2:66:67:e9:d3:82:ff:d8:be:32:22:23:d7:
c5:d6:e8:34:3b:8c:ae:36:fe:c9:0c:09:e0:5b:dc:
2b:6a:4e:fd:79:93:a3:36:39:f4:96:c1:b4:f5:d0:
36:31:b1:8c:18:3e:e3:7a:60:10:76:70:9e:6e:e4:
58:28:64:bf:ff:40:67:25:09:cc:01:66:7e:37:92:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:C9:A4:C0:0C:2A:D2:AD:88:F2:A1:CE:FE:4D:DD:F7:87:46:AF
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/46TJpMAMKtKtiPKhzv5N3feHRq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.67.0/24
185.50.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f4:aa:c6:8a:62:5e:fb:4b:42:27:8b:c7:95:88:d8:20:f9:
47:38:6a:07:95:ad:58:ff:db:ec:22:70:cf:74:cf:da:7e:ba:
a7:79:6c:68:40:da:5b:2b:0b:9f:58:2d:f8:50:b6:31:ec:a2:
db:62:f2:52:2e:53:c2:79:ff:52:60:9d:dd:5f:44:30:b3:1e:
3f:53:e8:d7:3c:c5:38:a7:2a:f0:3d:36:34:1c:06:2e:7b:03:
09:b2:93:b0:2c:55:00:2a:78:a2:5d:5f:cd:b8:8b:9c:64:b1:
98:fd:99:32:ec:76:00:51:4d:b3:a8:dc:da:67:61:d8:8a:b0:
7b:1b:2c:1d:de:15:b3:1b:11:34:16:22:ec:03:d3:ea:5f:40:
d4:94:2e:2e:32:25:62:07:81:8e:ae:e1:a4:3b:d4:1e:68:c7:
8e:91:aa:1b:f0:1b:d8:bb:36:41:b0:41:2a:ad:2d:02:ec:9e:
11:09:54:00:f5:ef:8d:78:20:51:be:3e:b2:7d:ba:87:d8:13:
48:a9:c2:35:a7:d5:09:2d:4a:24:c4:a6:d3:69:59:af:cf:26:
de:1d:32:9a:86:c7:71:e8:7f:71:80:42:a3:0f:2b:0b:4f:a8:
8b:c8:14:a0:60:9c:55:a4:68:53:45:8f:a5:7f:3a:ec:3f:68:
5c:e1:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:25:25 2025 by rpki-client