Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Y0rgYsmTDgdiVrQzjWKu7S23qn4.roa
File: Y0rgYsmTDgdiVrQzjWKu7S23qn4.roa (raw, json)
Hash identifier: i9HSA4RCObTfCBlP8ojZulFjJzkSQzsI4l/kDLSQ1sA=
Subject key identifier: 63:4A:E0:62:C9:93:0E:07:62:56:B4:33:8D:62:AE:ED:2D:B7:AA:7E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FC1D01D8701896A7C88E020112E5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Y0rgYsmTDgdiVrQzjWKu7S23qn4.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41957
IP address blocks: 46.16.37.0/24 maxlen: 24
46.253.128.0/24 maxlen: 24
62.3.48.0/24 maxlen: 24
91.242.254.0/24 maxlen: 24
146.19.178.0/24 maxlen: 24
146.19.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fc:1d:01:d8:70:18:96:a7:c8:8e:02:01:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=634ae062c9930e076256b4338d62aeed2db7aa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:00:1a:87:26:7d:d1:d8:aa:68:f2:b4:0a:
c2:40:75:27:0b:9d:a6:85:b3:b7:58:3c:5c:fc:d8:
c7:8f:75:29:d7:d4:02:04:9e:81:d6:12:ec:a4:c8:
33:2d:8e:6b:e5:51:c3:7a:f0:7d:2d:04:88:7d:75:
8f:5f:47:3a:73:4b:7f:57:6d:f6:3b:68:d5:44:cb:
eb:23:7b:63:c0:08:83:b9:4e:30:df:1b:ab:ec:5a:
95:e8:b5:e1:78:02:02:11:88:a6:d3:b7:29:23:18:
6e:f2:48:5f:ba:b3:ac:ea:a5:c3:f1:7c:17:c7:6b:
46:0f:ff:b4:0f:df:cc:e6:9a:c3:1f:8c:b3:51:43:
08:b8:49:a5:e0:14:15:d5:4a:dd:4a:c0:a2:d0:99:
1d:47:f7:d9:b4:c7:ff:8c:c7:38:ef:0c:b9:e1:10:
97:c3:fc:0a:9c:75:7f:d4:96:a0:93:41:15:44:e1:
2c:63:8b:a8:07:fb:de:a0:22:43:4c:ba:b5:d6:a9:
09:cc:35:32:14:88:fe:35:11:7d:a2:2d:44:18:53:
cd:9f:3d:1a:ce:cb:de:8b:da:46:8a:12:10:c4:dc:
4c:99:3d:95:56:29:ee:93:fb:e8:32:d0:ac:76:bc:
36:a7:a7:c6:7a:26:0c:d8:6a:1c:7a:e7:5e:72:d6:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:E0:62:C9:93:0E:07:62:56:B4:33:8D:62:AE:ED:2D:B7:AA:7E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Y0rgYsmTDgdiVrQzjWKu7S23qn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.37.0/24
46.253.128.0/24
62.3.48.0/24
91.242.254.0/24
146.19.178.0/24
146.19.180.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7a:ba:d1:df:a5:7b:c5:03:65:f6:1f:4b:54:37:22:4c:f8:
81:95:f1:f8:c7:ea:28:0a:dd:4d:87:87:c7:71:7c:d1:47:db:
d3:a4:5f:f8:7b:b0:3b:e8:cb:3c:c0:d6:80:f6:c4:79:5b:d2:
70:0f:a1:b4:df:49:99:35:ff:1b:1a:4c:f0:e7:97:ab:f7:7f:
a3:e7:40:2d:b1:e2:35:56:46:b5:fe:78:b8:e9:93:bf:74:36:
69:e8:fe:eb:81:25:dc:1a:eb:4a:d0:13:37:6a:85:48:ff:7b:
5d:b8:19:4d:74:6f:c1:0d:9f:d0:12:dd:03:48:68:70:f5:97:
5c:0a:11:35:15:5b:66:e7:b3:6e:38:2c:27:e3:58:db:3c:80:
e7:98:c7:0d:d0:ce:6a:5f:b8:ed:dd:06:94:57:c3:9c:73:6f:
1e:72:93:eb:07:bb:e0:9f:b3:ab:57:f3:50:da:ab:77:ef:1b:
4f:e7:fc:86:02:96:9d:77:6d:8b:13:cc:3f:c2:62:e4:e8:41:
ec:19:44:58:77:28:e4:41:51:f9:1b:c7:4c:6d:44:82:5c:54:
74:df:1e:86:64:e1:cc:66:e2:70:02:ff:e9:a8:35:6b:25:73:
a1:8b:1b:4e:66:bf:52:58:e7:38:4a:92:5a:4d:06:95:87:a1:
5f:eb:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:12 2025 by rpki-client