Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa
File: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (raw, json)
Hash identifier: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=
Subject key identifier: FB:74:61:01:3D:98:3C:1D:2B:D5:E6:E2:5E:41:67:C9:5E:AD:1B:C6
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 01941FFA61F22BDF5A196670F15928D7E86C
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42514
IP address blocks: 46.22.240.0/20 maxlen: 20
89.232.180.0/22 maxlen: 22
94.102.16.0/20 maxlen: 20
95.141.176.0/20 maxlen: 20
128.204.160.0/19 maxlen: 19
178.17.128.0/20 maxlen: 20
185.12.84.0/22 maxlen: 22
213.166.76.0/22 maxlen: 22
2a02:2648::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:61:f2:2b:df:5a:19:66:70:f1:59:28:d7:e8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb7461013d983c1d2bd5e6e25e4167c95ead1bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:13:3a:19:e0:db:51:d6:3c:63:89:18:87:
8f:db:a4:2d:b2:e9:ca:2a:6e:a4:17:f6:44:15:74:
39:b4:34:12:29:52:ba:23:d0:ef:58:d1:3c:87:95:
c0:dc:2e:07:d6:ab:91:71:ac:fa:ed:8b:a1:b5:9e:
36:3f:99:de:cf:30:7c:b9:43:38:58:c3:d4:31:ac:
46:12:27:ec:51:51:80:8b:46:c6:3f:12:85:f0:4c:
38:ef:b3:f6:f1:16:82:2b:62:10:d6:14:6f:65:26:
f2:9d:ed:2f:83:2c:0a:f5:8c:3f:09:0a:4f:9d:68:
4d:2a:41:fb:5a:00:ea:be:71:d8:07:2d:7c:c2:a0:
9b:9a:8a:6a:2f:b2:91:84:63:60:81:eb:e0:b0:8b:
f8:d8:fd:58:4f:29:02:22:ee:47:a1:11:ef:dd:0e:
c9:94:a3:6d:fa:1f:f6:aa:3c:f3:41:ee:ee:22:30:
12:9d:fd:6e:e8:e0:06:d0:09:c2:2b:38:9a:bd:1f:
2b:f2:9a:d0:7f:b9:db:da:d0:66:71:c9:35:b6:5e:
49:35:e1:51:a6:e4:c9:93:61:af:f4:cf:99:ce:ee:
af:4f:e2:08:84:b7:76:de:4a:d3:d3:57:fb:55:35:
53:a7:7a:bc:9a:d3:0e:10:3b:21:bc:4e:24:5e:f3:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:61:01:3D:98:3C:1D:2B:D5:E6:E2:5E:41:67:C9:5E:AD:1B:C6
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.240.0/20
89.232.180.0/22
94.102.16.0/20
95.141.176.0/20
128.204.160.0/19
178.17.128.0/20
185.12.84.0/22
213.166.76.0/22
IPv6:
2a02:2648::/29
Signature Algorithm: sha256WithRSAEncryption
0a:5c:99:34:ec:f2:42:32:8f:ae:98:21:52:6c:74:3d:35:76:
7c:50:be:22:de:03:7a:df:36:70:c4:22:f7:72:05:d1:a2:c5:
2d:a4:24:29:b9:52:ed:16:8b:10:bb:5e:49:db:d5:64:b7:04:
c0:0b:ae:bb:20:ee:8a:55:62:d2:5b:17:f3:1b:91:4f:eb:6a:
d5:a2:39:0c:19:96:b5:a1:49:40:b6:14:4a:10:96:d4:60:ca:
b2:2c:e5:ec:f1:e3:ef:2e:a7:84:ea:0a:13:56:51:3d:93:a4:
75:b7:2e:97:c4:f6:ec:32:ae:0a:db:44:f4:cc:21:b3:34:c0:
ae:79:a1:c9:8d:e9:a8:18:7a:bf:ea:1f:e5:c0:0a:8d:65:db:
b5:a9:b8:76:1c:a5:56:0f:75:62:33:5b:2a:1c:7c:a0:ef:65:
c8:4c:4d:7c:d6:5f:62:a6:c0:33:15:5a:64:30:b1:08:79:43:
04:dc:08:11:0f:a1:51:94:95:1c:2d:98:97:18:d1:68:65:83:
57:a1:9d:60:12:f7:02:43:cc:89:e4:dd:47:89:53:0b:c7:0d:
47:f0:f3:e6:64:cf:a3:39:a3:31:11:9d:89:73:2c:70:27:f8:
e5:15:6d:87:49:00:ca:1a:5a:5b:c9:0a:c8:c9:0b:ad:86:ce:
23:96:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:28:54 2025 by rpki-client