Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/46IkgipDtz-gl4yWGt7SVQgrM2Y.roa
File: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (raw, json)
Hash identifier: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=
Subject key identifier: E3:A2:24:82:2A:43:B7:3F:A0:97:8C:96:1A:DE:D2:55:08:2B:33:66
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 0194221FB03FAC33FE77EB2473C1C3F08277
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/46IkgipDtz-gl4yWGt7SVQgrM2Y.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21277
IP address blocks: 185.37.160.0/22 maxlen: 22
2a00:f7a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b0:3f:ac:33:fe:77:eb:24:73:c1:c3:f0:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a224822a43b73fa0978c961aded255082b3366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:8f:16:aa:b2:2f:1b:a0:86:50:a7:64:f7:
7f:47:61:ae:18:fb:cd:a9:7a:98:dc:3e:e7:5e:83:
c6:e7:ce:cb:de:eb:f5:a2:45:a6:fa:00:f0:6e:10:
5e:5d:70:0c:b5:c3:42:a2:f7:36:8f:79:81:4d:79:
f5:f0:99:88:4c:7c:70:f9:5a:82:cf:83:9b:3f:54:
e4:0f:09:f8:99:df:87:02:4c:d4:48:d9:a9:bc:55:
8b:65:dd:17:0e:cb:c6:5b:9c:17:8c:8d:73:3e:e7:
5d:46:85:05:ab:71:96:d0:d7:67:ca:c1:d6:57:c0:
c6:14:f1:5c:11:0d:e2:bd:8d:71:9c:fe:d6:c6:9e:
46:36:e5:5b:a0:5a:39:4c:57:2d:07:a8:85:74:81:
33:b2:c4:f4:ed:59:6e:80:04:06:85:7b:44:f1:22:
ef:e7:21:f2:e4:3c:86:88:58:60:3b:d8:12:93:42:
3d:de:49:ec:89:af:30:64:d8:19:8e:25:d8:c5:0d:
90:1a:65:de:77:d9:0d:25:0b:ba:6f:51:eb:b4:f6:
93:eb:df:64:85:8a:98:67:cb:9a:af:de:78:a5:53:
36:56:e4:2d:71:9e:44:bb:16:dd:66:88:ae:9e:a2:
06:17:4a:83:e8:52:50:f0:41:c6:a8:bb:67:a3:98:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A2:24:82:2A:43:B7:3F:A0:97:8C:96:1A:DE:D2:55:08:2B:33:66
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/46IkgipDtz-gl4yWGt7SVQgrM2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.160.0/22
IPv6:
2a00:f7a0::/32
Signature Algorithm: sha256WithRSAEncryption
70:34:61:b4:63:ae:e2:f6:32:ee:7b:fe:51:33:c5:c9:08:d0:
f9:b6:89:1d:c8:55:17:fa:ae:5f:74:e8:2d:60:7b:7f:bc:92:
09:2e:fd:12:24:47:90:45:db:3e:67:2f:d3:29:1d:72:d2:88:
bd:d6:f7:4f:ca:d8:8c:a9:61:e1:86:f5:e8:06:e6:90:66:6f:
fc:76:28:a7:41:c3:d5:06:59:b0:a9:8e:0b:0e:2a:01:30:6a:
28:62:15:74:14:19:8f:86:21:2b:ec:12:63:34:0e:63:21:70:
11:28:b6:6a:4d:f5:e7:e7:7a:16:c1:ec:02:6f:ff:ff:8e:b6:
44:42:c8:a3:f9:dc:b9:e1:57:34:34:84:b8:d8:c5:1e:94:a6:
6a:2a:b4:08:86:89:3b:2d:40:97:af:58:23:62:49:1c:de:be:
4c:b4:ea:a4:22:99:72:56:da:39:07:91:48:4b:30:fa:b1:ac:
06:f2:73:b8:85:13:88:aa:92:c1:58:20:0f:b4:7c:c4:1b:b3:
cf:6f:98:4c:d5:71:4c:c3:aa:1a:20:0c:72:08:9a:76:85:ae:
c2:29:3d:6f:c3:8c:1a:c2:a3:47:6f:ad:bc:7f:d8:82:78:16:
c4:f3:49:d2:cf:26:ce:3a:d0:35:60:54:78:00:2b:50:7f:78:
a7:4a:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:32:30 2025 by rpki-client