Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa
File: m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa (raw, json)
Hash identifier: aOHIBtHSW3A5XSJ7tUzd+YLEbCI85PGx7m5TzFvcEu4=
Subject key identifier: 9B:75:96:FA:67:84:D6:F7:C8:C1:2A:CC:6B:11:D3:60:8E:4D:96:4D
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0194228DA072B1BCECF0837B67CA454166D0
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52145
IP address blocks: 46.253.88.0/21 maxlen: 21
46.253.90.0/24 maxlen: 24
46.253.90.0/25 maxlen: 25
46.253.90.128/25 maxlen: 25
46.253.93.0/24 maxlen: 24
46.253.94.0/24 maxlen: 24
46.253.95.0/24 maxlen: 24
2a04:19c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a0:72:b1:bc:ec:f0:83:7b:67:ca:45:41:66:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b7596fa6784d6f7c8c12acc6b11d3608e4d964d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:b6:f1:96:04:3a:16:95:9f:3a:8b:d6:fe:
6c:79:0a:e7:f2:f7:9b:1b:5b:ea:61:9e:e0:c9:e6:
01:48:10:12:a9:2e:47:e5:bb:0d:94:d6:ac:85:cc:
93:b2:8b:d0:a5:14:40:56:98:d1:3a:73:24:08:b8:
68:c1:f9:23:dd:e6:b4:b6:ab:88:76:8d:bb:f0:ae:
e6:97:c9:24:e6:c3:88:64:22:d1:d3:b1:d6:ee:1e:
76:a6:a4:2f:c2:48:0d:55:2a:74:42:ec:5d:27:e1:
dc:27:4e:06:7e:b3:6e:9b:19:46:e1:00:83:10:2b:
1e:44:b0:5c:49:3c:90:fb:1f:a9:2c:ba:87:ac:fb:
84:36:d9:af:aa:74:c0:7f:27:bc:e4:a2:51:c6:e5:
49:7f:94:5b:53:49:84:e5:67:c8:a9:a2:74:58:b2:
d4:dd:2b:6e:99:3c:1f:c9:94:92:b8:26:14:0d:2b:
9b:34:f0:ff:83:99:6c:cc:f7:2a:c7:5f:3b:5a:e4:
54:b4:38:17:f8:c1:9a:4e:45:dd:af:20:af:49:c6:
92:a7:9e:7e:7f:c3:6e:fe:b0:f0:5f:24:98:25:31:
14:ea:23:9b:55:d1:b9:92:b4:d4:c4:9b:09:11:64:
82:cf:fd:94:e1:9a:4f:0b:d1:6e:0e:55:e2:69:20:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:96:FA:67:84:D6:F7:C8:C1:2A:CC:6B:11:D3:60:8E:4D:96:4D
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.88.0/21
IPv6:
2a04:19c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:89:0e:b6:82:93:6a:f0:82:94:e9:fd:c9:aa:49:c8:c6:1a:
88:6e:f4:95:52:92:3e:d7:a9:c2:86:47:cc:82:9b:35:17:17:
b5:16:7e:82:ac:fc:f9:be:08:bd:fb:3f:03:f4:2b:7b:dc:d0:
23:07:2b:38:13:e7:1d:e6:33:2d:b5:7a:2b:2e:b2:a4:4d:52:
32:70:23:b0:67:f1:50:33:bb:3c:3b:86:e6:3b:d2:4a:0b:bc:
ce:e3:06:b2:92:0b:c0:1d:32:46:e1:2b:a7:cb:56:ca:c5:9c:
8b:83:a3:d3:59:f9:dd:c8:f1:db:b7:10:a4:14:4e:4a:4f:46:
9f:2a:9f:df:ab:69:c6:9a:c2:1a:2d:6b:8a:71:3c:2d:1e:fc:
11:3d:6e:4d:a7:f8:12:21:8f:cc:22:c9:93:86:6d:dd:28:0b:
74:dd:ae:17:0e:e2:20:45:35:a4:50:a7:9e:9b:31:9f:20:f9:
84:80:91:b7:0c:af:9a:3e:4a:6f:47:7a:fb:01:d6:8f:19:ce:
5d:7d:ea:b7:01:76:5b:18:a7:69:43:78:fe:f0:4a:54:77:0d:
a7:c3:5b:fb:80:e5:8d:19:c2:90:25:ca:7d:68:43:b9:3f:d2:
87:8e:c9:b5:dd:df:ae:fa:5d:7f:96:83:70:8c:d7:63:5a:1b:
8e:ff:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:07 2025 by rpki-client