Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ESsRo9MaF3o9GqzJvXZpu73We6Y.roa
File: ESsRo9MaF3o9GqzJvXZpu73We6Y.roa (raw, json)
Hash identifier: UaGHPYsyEVFFkrfNGoMdaOZN1uzCFEON6PTFyG+oUvY=
Subject key identifier: 11:2B:11:A3:D3:1A:17:7A:3D:1A:AC:C9:BD:76:69:BB:BD:D6:7B:A6
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0197FA2799BD470E8EEA1FAB0178AD5FEC3F
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ESsRo9MaF3o9GqzJvXZpu73We6Y.roa
Signing time: Fri 11 Jul 2025 15:43:08 +0000
ROA not before: Fri 11 Jul 2025 15:43:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.233.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:27:99:bd:47:0e:8e:ea:1f:ab:01:78:ad:5f:ec:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jul 11 15:43:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=112b11a3d31a177a3d1aacc9bd7669bbbdd67ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:2b:be:53:bc:d2:8b:d3:7d:a2:72:9b:4f:
c7:78:45:8a:ba:52:37:44:c8:aa:48:f1:75:5e:85:
cf:11:a7:28:18:0a:e1:bd:e5:fa:b8:56:c5:fd:70:
3f:fa:a4:3b:d7:49:68:e2:28:c5:4e:1d:1f:2e:ea:
bd:93:c1:78:c1:c5:a9:2d:16:bd:f6:9b:8d:80:53:
6e:4b:7d:38:97:ee:8a:72:f0:25:00:22:f9:53:b9:
33:75:92:c5:ba:6f:32:ae:e1:3d:dd:62:ef:9f:0f:
ae:41:cb:c8:b6:d5:0e:35:24:ca:1f:e0:48:12:0b:
c8:41:87:f9:d5:f3:1c:13:06:e3:ba:40:ac:2b:8b:
57:d4:d4:eb:12:00:90:f7:5c:c9:a3:95:ad:eb:7d:
36:cf:84:ca:e6:db:e8:56:d7:66:a3:3f:9c:1c:b3:
93:08:3b:f8:8a:73:f0:00:aa:4b:79:21:70:08:ef:
66:43:47:85:00:28:80:ba:38:e0:ff:0c:0b:41:ee:
cb:c6:0e:d0:3b:5c:6f:5f:0a:be:9c:0e:96:61:f6:
48:55:10:93:4a:41:4d:d7:d1:aa:b7:ce:45:a3:57:
d5:c8:4c:93:8a:84:c7:2c:f3:a9:8c:72:2e:b8:10:
af:08:3a:15:5a:e8:e6:2c:87:76:68:50:bd:8c:26:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:11:A3:D3:1A:17:7A:3D:1A:AC:C9:BD:76:69:BB:BD:D6:7B:A6
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ESsRo9MaF3o9GqzJvXZpu73We6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
00:b0:46:b0:55:54:f8:53:25:99:36:07:aa:b3:fa:9f:f1:df:
00:08:76:74:f7:66:a4:a3:4e:b1:67:a5:bd:f9:12:ae:ed:21:
e5:83:c5:16:02:36:fb:9f:72:08:c0:28:2c:83:b7:d8:bd:8b:
84:41:85:e5:74:26:df:9f:4a:95:b6:b5:45:53:8b:ef:a5:4e:
e0:74:a1:b0:41:18:d9:5b:7c:5e:08:9b:d0:24:fd:92:93:7d:
b4:62:49:f9:cf:3c:cb:c0:73:b1:44:28:50:91:59:c4:cc:b9:
5b:00:7b:db:45:90:0c:13:4f:30:cb:f9:63:cf:53:ed:14:06:
39:5c:83:7b:d1:42:82:5b:83:dc:83:49:11:4b:6d:a5:dd:71:
03:52:bb:c5:8e:9e:5d:c7:db:fb:9c:70:bb:4f:b5:39:38:e6:
ab:ef:70:7b:d7:d4:2e:92:5d:9a:44:83:bd:79:b3:71:bc:88:
6f:d8:b0:46:61:56:52:74:a1:e8:b4:4b:86:a7:94:8c:15:1a:
8a:67:fa:01:19:d5:17:6b:b4:a0:fb:17:6f:e2:bc:4b:c8:5d:
10:21:d0:09:aa:86:04:eb:1e:31:8f:ea:a9:2c:d1:22:17:a0:
47:f2:30:ef:6a:6d:47:e0:3a:a7:86:35:71:2f:5c:a3:2b:52:
ed:8b:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:04:13 2025 by rpki-client