Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa
File: 1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa (raw, json)
Hash identifier: QB9LyYahw6voR06UwItPSAyVLMKgN6beiVidIvS+Rxs=
Subject key identifier: F9:57:4E:AF:51:54:3F:B1:CD:C5:FA:9F:84:E1:C1:E0:BC:8E:27:66
Certificate issuer: /CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Certificate serial: 0194236A43FA0E5F2DE1EFF908F838002791
Authority key identifier: 70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52058
IP address blocks: 46.174.56.0/21 maxlen: 24
91.221.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:43:fa:0e:5f:2d:e1:ef:f9:08:f8:38:00:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9574eaf51543fb1cdc5fa9f84e1c1e0bc8e2766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:8c:14:58:b1:d4:2b:87:31:41:13:68:99:
79:1a:03:26:2a:9a:20:7d:b6:7f:69:6e:11:93:87:
24:10:51:7f:29:80:52:26:e6:78:75:ef:06:5a:58:
33:ac:92:f9:aa:f5:ee:22:e8:8a:41:96:1e:79:b8:
d9:4c:a9:5c:2a:a3:e0:57:00:d6:67:81:11:3d:09:
2f:91:4c:b5:ad:77:b7:23:57:93:71:97:d7:d3:8e:
19:c0:ee:ef:93:a6:c7:8a:b7:ac:d1:a2:68:df:32:
b5:bd:25:02:9c:c7:7e:e9:b1:b7:32:54:0c:80:4b:
3f:e1:0d:f4:2a:b5:32:3a:bb:1c:c1:f7:e3:ef:0a:
39:ce:13:4b:9c:95:b6:23:13:52:fc:4b:f6:58:1e:
3b:32:b1:58:ca:72:8f:ff:07:0a:59:00:4b:23:16:
62:9b:b3:6c:42:b7:bc:f0:ec:7e:c4:ae:80:92:af:
ff:77:2d:f9:f5:85:dc:70:52:9e:fa:5d:d4:64:ac:
24:b0:92:f5:f0:8e:ca:31:bc:36:ae:ad:6f:c3:39:
ab:35:0c:37:c2:2d:9f:79:31:a4:3f:b5:fc:5c:66:
10:eb:f9:32:75:ef:9c:46:7e:ef:1a:a9:d0:ae:61:
c1:fc:c0:c7:5e:cd:00:81:7a:b2:7a:79:02:62:23:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:57:4E:AF:51:54:3F:B1:CD:C5:FA:9F:84:E1:C1:E0:BC:8E:27:66
X509v3 Authority Key Identifier:
keyid:70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.56.0/21
91.221.212.0/23
Signature Algorithm: sha256WithRSAEncryption
04:5c:54:83:08:ec:e0:66:17:ce:f5:74:4a:44:7b:9b:10:eb:
5b:70:7c:10:8a:4b:3e:a8:17:93:9f:05:97:92:a5:61:c5:6a:
c2:5c:48:d7:44:18:61:0b:f2:0b:0d:a7:c8:47:40:fd:1b:8f:
a7:70:63:53:e0:30:3a:96:6f:ce:39:96:9c:9f:1a:6e:8d:21:
ae:23:7a:4b:fe:9e:fc:74:7f:22:c5:56:48:0b:dd:ed:d8:03:
3e:08:00:4e:dc:8b:30:07:f2:d0:e3:1d:3f:ed:e8:86:0f:2d:
4b:2d:f5:78:1c:de:d3:08:91:32:3f:99:d5:0d:f9:30:60:30:
04:fc:29:69:53:20:4b:64:bd:5b:84:9f:5e:19:a8:f4:ab:40:
38:0d:74:33:63:19:bc:22:61:6f:9b:47:3a:ab:e4:a7:4a:71:
17:5b:88:af:f8:fb:8d:9e:dd:0f:d6:8f:dc:7f:c2:dd:eb:c2:
df:44:7a:aa:26:a7:64:96:73:05:fb:39:96:33:69:4e:88:2f:
5c:6b:84:9b:bd:95:fd:fd:32:61:0a:8b:22:31:5a:4d:bb:47:
78:31:2b:76:0c:02:54:1a:65:84:da:60:eb:c8:5e:7d:ff:a6:
ef:e0:9e:ec:7a:e5:87:6a:45:41:23:7f:89:a7:f3:d1:41:22:
bb:19:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:58:36 2025 by rpki-client