Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/G0OFyDkYO0dExIuBRt92QUJaJLk.roa
File: G0OFyDkYO0dExIuBRt92QUJaJLk.roa (raw, json)
Hash identifier: cZuZQnwZ6K0XtVuwD8TwsZbYbNdxxxXVVCl8hs3Ht0U=
Subject key identifier: 1B:43:85:C8:39:18:3B:47:44:C4:8B:81:46:DF:76:41:42:5A:24:B9
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F7F0525DA55A8192C138434EEBBE
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/G0OFyDkYO0dExIuBRt92QUJaJLk.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398083
IP address blocks: 46.3.80.0/21 maxlen: 22
46.3.216.0/21 maxlen: 22
46.3.224.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f7:f0:52:5d:a5:5a:81:92:c1:38:43:4e:eb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b4385c839183b4744c48b8146df7641425a24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9f:fd:05:fd:d6:47:fa:3f:8a:b9:99:62:42:
2c:a6:09:99:a7:18:c1:1f:fd:df:3d:bf:af:bc:40:
53:f8:53:46:43:d5:5d:ad:0a:d6:f3:b4:a2:74:b2:
23:5d:41:8d:b0:cf:11:52:b3:6c:bf:c8:7f:22:0d:
25:1c:df:a2:5a:5a:20:1b:e7:69:24:91:04:12:68:
33:af:e9:9a:fd:d3:01:da:53:7a:26:b9:a1:33:bd:
90:3f:a2:13:6d:7f:90:82:c9:f9:bd:f1:a8:38:62:
28:58:32:97:e1:be:8a:8b:88:eb:ea:b4:7f:c7:b5:
84:20:dc:8b:9d:b4:fd:6e:04:94:d9:0a:0b:dc:18:
89:f1:0d:15:4c:8a:be:5f:b1:b4:52:5a:5d:a9:79:
a6:fd:b3:7f:40:e2:5b:66:32:2c:f9:c4:d4:46:32:
20:83:98:6e:0e:73:e7:9f:3b:a4:3c:89:db:25:22:
79:2c:67:e2:3c:0f:72:15:4a:6e:a5:38:75:a3:89:
ba:cb:13:2b:40:f6:43:d6:83:20:40:d5:8f:3f:4c:
09:21:19:7a:0f:19:cd:85:e0:9c:f0:f7:4f:b7:fe:
77:c4:04:fc:e2:74:79:24:e3:45:28:99:12:e0:ec:
9b:38:54:bc:0f:8b:ad:98:d0:92:a7:66:4b:fe:3a:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:85:C8:39:18:3B:47:44:C4:8B:81:46:DF:76:41:42:5A:24:B9
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/G0OFyDkYO0dExIuBRt92QUJaJLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/21
46.3.216.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
5e:a4:4b:30:58:43:a5:79:65:1c:a8:92:2d:49:99:1a:aa:db:
0c:f7:48:e4:1a:c0:b6:7e:05:76:a3:d2:28:f9:9f:08:8a:65:
f9:ec:ed:e3:99:49:91:ef:4d:d4:27:08:3b:dc:86:ee:ad:0c:
cc:ee:55:5e:48:56:fa:b5:ce:21:a2:72:e8:64:6e:43:36:37:
8c:9f:1b:a4:86:9b:c8:fe:1d:34:f8:e7:fb:a0:eb:4a:27:c1:
d1:df:e0:2c:a1:24:91:08:e2:2d:43:f3:13:43:fe:2a:8b:93:
a9:18:84:17:cd:51:f2:e8:e7:66:e4:cd:d9:fe:34:3f:dd:16:
29:1d:1c:ae:b6:db:63:15:08:00:f4:02:9b:06:91:17:94:88:
65:29:dc:3a:42:55:d8:d0:86:0c:ef:46:11:2b:91:2c:48:38:
f1:59:7b:fe:ae:f7:0a:71:e4:51:ba:3a:09:50:f7:b7:4b:13:
5c:48:f5:6a:5c:6d:82:14:5d:ba:8c:4e:1b:fd:06:4a:32:3a:
fe:26:76:a9:36:8e:64:74:c1:35:af:b5:78:57:3d:9b:2a:14:
f7:1e:4f:d5:b6:74:eb:a9:a8:85:6a:f3:8e:c6:6a:f9:d2:ec:
27:84:be:b0:70:35:28:4a:3e:d9:77:95:54:ee:af:16:5a:8c:
e6:60:71:7d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQjaffwUl2lWoGSwThDTuu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwMTAxMTk0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjQzODVjODM5MTgzYjQ3NDRjNDhiODE0NmRmNzY0MTQyNWEyNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+J/9Bf3WR/o/irmZYkIspgmZpxjB
H/3fPb+vvEBT+FNGQ9VdrQrW87SidLIjXUGNsM8RUrNsv8h/Ig0lHN+iWlogG+dp
JJEEEmgzr+ma/dMB2lN6JrmhM72QP6ITbX+Qgsn5vfGoOGIoWDKX4b6Ki4jr6rR/
x7WEINyLnbT9bgSU2QoL3BiJ8Q0VTIq+X7G0UlpdqXmm/bN/QOJbZjIs+cTURjIg
g5huDnPnnzukPInbJSJ5LGfiPA9yFUpupTh1o4m6yxMrQPZD1oMgQNWPP0wJIRl6
DxnNheCc8PdPt/53xAT84nR5JONFKJkS4OybOFS8D4utmNCSp2ZL/jpAOQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBtDhcg5GDtHRMSLgUbfdkFCWiS5MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvRzBPRnlEa1lPMGRFeEl1QlJ0OTJRVUphSkxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDLgNQMAwD
BAMuA9gDBAMuA+AwDQYJKoZIhvcNAQELBQADggEBAF6kSzBYQ6V5ZRyoki1JmRqq
2wz3SOQawLZ+BXaj0ij5nwiKZfns7eOZSZHvTdQnCDvchu6tDMzuVV5IVvq1ziGi
cuhkbkM2N4yfG6SGm8j+HTT45/ug60onwdHf4CyhJJEI4i1D8xND/iqLk6kYhBfN
UfLo52bkzdn+ND/dFikdHK6222MVCAD0ApsGkReUiGUp3DpCVdjQhgzvRhErkSxI
OPFZe/6u9wpx5FG6OglQ97dLE1xI9WpcbYIUXbqMThv9BkoyOv4mdqk2jmR0wTWv
tXhXPZsqFPceT9W2dOupqIVq847GavnS7CeEvrBwNShKPtl3lVTurxZajOZgcX0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:58 2025 by rpki-client