Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa
File: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (raw, json)
Hash identifier: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=
Subject key identifier: A3:34:34:07:79:CF:85:6F:72:1A:3E:9E:05:28:F7:6E:FE:7F:8C:A4
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01941FFA9D6E3E4B6C70F4AB73FDD41DF40C
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43581
IP address blocks: 46.29.236.0/24 maxlen: 24
46.29.237.0/24 maxlen: 24
46.29.239.0/24 maxlen: 24
85.159.226.0/24 maxlen: 24
85.159.230.0/24 maxlen: 24
85.159.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:6e:3e:4b:6c:70:f4:ab:73:fd:d4:1d:f4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a334340779cf856f721a3e9e0528f76efe7f8ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:3b:a3:d5:32:ea:b2:1c:3c:47:d0:29:61:
ab:1a:58:98:12:fb:74:11:30:d3:34:90:8f:56:86:
37:7e:5f:f9:16:f1:50:1d:38:35:89:13:5a:ff:c3:
f3:77:04:3b:46:05:56:78:5b:e2:b0:7f:e5:52:c3:
81:3b:7f:85:0d:92:b4:68:20:e5:75:60:82:7f:18:
ba:90:99:1f:8e:f2:dc:ff:0c:7a:03:52:f9:23:54:
4b:cd:8f:0f:f7:26:aa:fc:f8:e8:4d:b0:6c:49:17:
42:bf:8c:60:b6:89:3c:5e:ae:69:8d:54:0b:8b:87:
61:b2:0c:c2:94:bf:ac:7d:40:0a:ac:d1:a6:87:b9:
94:19:c4:ce:8b:dc:a5:62:a8:83:fd:9c:9a:33:38:
08:79:77:ab:d0:4b:bc:34:c0:91:97:33:74:8c:ec:
68:b5:47:ae:d0:c6:55:9b:72:98:5f:9e:b2:c6:1f:
7b:12:ec:d7:ac:95:0b:2b:58:24:9b:4a:05:ba:51:
b4:d5:92:b3:54:ce:45:d4:fd:73:98:c6:55:ec:d6:
7f:9d:98:7f:b0:0d:e0:53:b5:a3:00:d9:00:36:cd:
5c:ad:89:6e:ab:45:32:c3:86:b3:9e:d2:19:06:b2:
ce:17:1f:79:7f:1c:5c:06:92:a5:9f:ad:47:05:7b:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:34:34:07:79:CF:85:6F:72:1A:3E:9E:05:28:F7:6E:FE:7F:8C:A4
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.236.0/23
46.29.239.0/24
85.159.226.0/24
85.159.230.0/23
Signature Algorithm: sha256WithRSAEncryption
86:16:fe:80:8d:e1:7d:40:b0:58:dd:aa:b7:88:6b:ba:0e:9c:
ae:03:2a:de:91:46:aa:9d:bb:bc:63:88:46:bc:d3:98:71:f9:
09:6c:67:f8:73:a9:32:f9:0f:bb:c9:6f:90:ed:c6:52:0d:40:
8b:51:53:c7:4b:02:a2:e7:2f:8a:67:89:2b:ed:58:2b:dc:1e:
da:ab:62:72:17:d0:7e:e4:0e:b9:78:e9:5b:6f:a2:3c:bb:3b:
46:da:29:28:8d:d8:c4:1d:4b:97:e7:7f:37:89:69:20:62:cf:
cc:23:81:62:13:46:eb:1f:46:a5:bf:c7:b7:14:ec:61:e6:2e:
a0:26:07:29:b4:fb:d4:13:23:d8:d2:fe:78:1c:58:fb:d2:a3:
39:0d:b9:75:b9:82:56:69:76:8e:13:9d:60:84:7e:24:40:e1:
5a:cb:24:ce:8e:11:c6:29:61:df:60:19:59:b3:23:80:d1:db:
d9:3e:60:59:95:8e:db:b4:71:a1:9a:3e:52:6a:95:8c:38:7b:
5c:e2:d3:49:ec:7f:af:1f:e5:48:e3:60:f3:ce:93:0f:92:3f:
36:e8:00:6b:38:10:16:4e:81:ba:53:d9:78:52:e1:4c:5e:84:
fd:c4:8e:2f:a5:b4:84:5b:30:ec:eb:57:03:1e:a9:09:95:6e:
ac:ad:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:38:08 2025 by rpki-client