Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/d1oaRkmyWOlWCj8ZkLwyi3LchLo.roa
File: d1oaRkmyWOlWCj8ZkLwyi3LchLo.roa (raw, json)
Hash identifier: /mJ9dPukwzvnt5C92l35ZFEd+3JvbCWUacWZB+9oE/U=
Subject key identifier: 77:5A:1A:46:49:B2:58:E9:56:0A:3F:19:90:BC:32:8B:72:DC:84:BA
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F590B98558E37EFBAD77374379E7
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/d1oaRkmyWOlWCj8ZkLwyi3LchLo.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207710
IP address blocks: 46.232.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f5:90:b9:85:58:e3:7e:fb:ad:77:37:43:79:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=775a1a4649b258e9560a3f1990bc328b72dc84ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:66:71:4e:47:de:23:c1:08:9a:20:96:0d:
14:7c:eb:5a:a0:0f:87:e8:c0:10:5b:b1:fd:5a:0d:
c2:24:4f:45:fe:c0:91:ea:8f:0e:1f:d4:f9:a6:32:
8e:24:5b:27:6b:c9:2a:0b:7b:00:47:a7:67:c9:0e:
f0:cb:c4:77:82:2d:a8:d5:32:16:4a:3b:ec:05:26:
8e:10:c2:1f:48:ba:66:e4:86:ed:ba:78:cb:6a:d9:
a0:39:97:c8:73:3b:a2:52:c7:8e:1f:85:22:73:47:
b4:cf:91:48:38:b0:22:8d:0f:5e:f7:74:b9:ba:96:
4f:17:19:90:02:fc:cd:03:5d:26:0f:45:88:fc:d5:
8e:33:be:14:fd:09:08:d2:d8:98:11:5d:75:68:7b:
4e:ac:3a:9b:5c:00:a3:27:66:0a:7a:43:67:e3:99:
21:4a:e4:4e:cc:cc:09:55:73:b3:b9:94:a8:71:f2:
de:11:39:41:fd:6f:f8:5a:08:c9:d0:ca:03:af:8b:
22:4c:02:d1:77:7f:1b:80:f6:1c:ce:41:6a:37:1d:
2c:df:dc:cf:d3:09:75:52:d2:f6:df:60:d5:69:a6:
ee:6a:af:5b:f8:2d:d5:c8:79:68:b1:82:8b:bb:0d:
17:61:00:59:f1:3c:d8:a2:ae:4f:8c:07:fd:6e:df:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:1A:46:49:B2:58:E9:56:0A:3F:19:90:BC:32:8B:72:DC:84:BA
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/d1oaRkmyWOlWCj8ZkLwyi3LchLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:ff:28:34:0c:da:35:0f:7a:bc:57:c7:cd:2b:22:f8:1d:09:
16:23:08:2a:e5:15:a8:c2:20:69:57:f1:d5:7e:0b:eb:16:ad:
2b:e8:f8:85:ba:b1:1b:39:78:08:db:37:d8:70:26:34:c8:39:
a2:08:91:47:44:c8:f1:3f:3f:da:ca:67:56:d5:38:8b:dc:53:
39:ba:37:3d:49:c6:82:ec:e5:e2:4c:48:ed:8e:d8:58:97:18:
ec:fc:ed:80:e9:55:29:b1:b8:51:b1:c7:24:12:01:df:c6:ea:
b7:f9:78:7c:97:1b:c5:e4:09:93:44:b3:f8:cf:04:6b:9c:03:
79:a9:e1:b1:b5:21:7d:90:87:68:8b:b9:e6:70:04:9a:2b:b7:
4e:d1:77:0f:cc:e5:97:42:43:0d:c0:1c:50:de:c6:76:f5:85:
22:1a:f2:d3:3f:f7:cf:ae:5c:20:5d:d5:0d:4d:7f:6d:1f:9b:
6b:e3:96:01:ee:ee:0f:82:9d:5a:08:04:bc:e1:b8:f2:95:b4:
57:0e:72:d3:b5:d4:5f:7b:e0:0d:97:8d:8e:9a:54:88:59:41:
a4:d4:67:fc:3c:43:8e:00:4f:48:18:f0:b6:cd:ad:68:d7:ec:
66:c7:89:51:98:4b:54:c0:52:8c:ef:e1:95:d8:7f:a5:5b:08:
cd:bb:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:33 2025 by rpki-client