Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/U3XsaJj-IFBktG-dXYEuz5kV62s.roa
File: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (raw, json)
Hash identifier: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=
Subject key identifier: 53:75:EC:68:98:FE:20:50:64:B4:6F:9D:5D:81:2E:CF:99:15:EB:6B
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019422FC00466C5B4D17AA3833824D60B5EE
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/U3XsaJj-IFBktG-dXYEuz5kV62s.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.227.40.0/24 maxlen: 24
46.227.41.0/24 maxlen: 24
46.227.42.0/24 maxlen: 24
46.227.43.0/24 maxlen: 24
46.227.44.0/24 maxlen: 24
46.227.45.0/24 maxlen: 24
46.227.47.0/24 maxlen: 24
185.31.204.0/24 maxlen: 24
185.31.205.0/24 maxlen: 24
185.31.206.0/24 maxlen: 24
185.31.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:00:46:6c:5b:4d:17:aa:38:33:82:4d:60:b5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5375ec6898fe205064b46f9d5d812ecf9915eb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:a6:c3:68:9a:c6:3a:47:83:aa:20:16:de:
86:9e:e8:7b:9d:33:06:d7:8d:33:10:f0:4f:eb:f1:
06:9b:f0:43:97:43:11:e6:78:79:9c:76:95:e5:b3:
33:df:d6:48:b2:93:a2:62:49:34:eb:aa:b4:6d:c5:
7a:1e:1b:12:b5:5a:6b:56:c8:d3:fe:56:c1:18:2f:
6d:bd:27:df:95:ff:22:40:32:0c:cc:10:ef:1e:72:
ce:c4:f3:4f:1b:8e:ef:6c:de:76:4c:fc:92:16:ba:
00:db:eb:f9:bb:5b:46:4b:eb:d8:08:b6:2a:f7:22:
32:66:6e:5b:48:2d:81:4e:1e:f0:23:86:d0:bd:55:
cf:22:42:90:d2:ef:6a:91:61:b6:e1:8f:c0:e7:ed:
8a:8b:c0:10:fe:8e:64:34:c9:32:c6:a3:4f:f2:a1:
e9:c8:46:b3:43:18:19:08:c8:30:cd:34:29:1d:9c:
01:7a:09:a6:2d:bc:a2:bc:d5:5b:54:f0:bc:21:9f:
ab:36:45:30:fe:d2:46:8b:18:27:42:09:3a:4b:e5:
18:ab:58:fa:ad:21:0f:63:5a:cc:81:5d:90:ff:04:
71:0b:96:e4:e7:ce:59:d1:87:09:7e:cf:5e:38:4e:
20:fe:a9:c6:34:46:4c:51:d2:a1:1d:72:1e:85:e3:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:75:EC:68:98:FE:20:50:64:B4:6F:9D:5D:81:2E:CF:99:15:EB:6B
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/U3XsaJj-IFBktG-dXYEuz5kV62s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.40.0-46.227.45.255
46.227.47.0/24
185.31.204.0/22
Signature Algorithm: sha256WithRSAEncryption
46:cc:18:b3:f4:3e:0b:5b:69:11:95:17:c5:15:44:a4:de:d9:
54:b5:80:5c:58:42:46:a2:39:66:ec:6c:07:5d:bd:09:43:e7:
bc:fa:f3:8a:a3:31:2e:0f:e3:f6:e1:38:cf:03:b6:33:48:0c:
ae:21:bd:0e:0a:4f:35:fe:29:81:7b:9b:c3:3e:49:32:90:3b:
fa:55:70:b2:cf:fc:cf:9b:5a:48:4f:93:43:99:ec:c0:8f:a3:
12:13:1d:5d:c1:f5:7f:8c:1b:b6:c2:65:e5:12:a5:e7:39:9f:
b1:e9:eb:e7:1a:f8:0a:48:c7:29:32:b2:f6:19:47:72:99:b3:
40:ed:73:3b:fc:1a:33:9c:43:27:47:3d:1c:52:3c:e0:c4:bf:
9e:aa:47:d8:32:cb:a0:a3:e7:f2:bc:b1:ad:25:e6:21:c4:18:
28:2c:64:50:0b:42:09:81:cb:c3:b3:75:95:b5:5f:24:07:14:
9f:fa:53:21:8c:fb:6b:d5:cf:cf:e2:33:91:e4:38:b2:be:a9:
fe:23:42:c4:e8:4c:f4:ee:4b:f2:99:b7:98:a3:19:3a:24:09:
de:e9:bb:e3:a4:96:2e:cc:23:27:d4:c5:e0:2a:a7:85:50:f1:
ac:bc:1b:04:00:50:c3:6d:24:e6:6f:ba:0e:0d:2a:af:7a:99:
b9:34:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:11 2025 by rpki-client