Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa
File: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (raw, json)
Hash identifier: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=
Subject key identifier: 96:46:6E:02:1F:60:E1:92:02:AE:4F:12:C9:FF:13:9F:A5:97:68:DA
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 0194258FC405CE03138B1CC3D2021B7C238B
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47544
IP address blocks: 46.248.160.0/19 maxlen: 19
46.248.174.0/24 maxlen: 24
46.248.183.0/24 maxlen: 24
86.111.240.0/21 maxlen: 21
185.110.48.0/24 maxlen: 24
185.110.49.0/24 maxlen: 24
185.110.50.0/24 maxlen: 24
185.110.51.0/24 maxlen: 24
193.106.104.0/22 maxlen: 22
2a01:7400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c4:05:ce:03:13:8b:1c:c3:d2:02:1b:7c:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96466e021f60e19202ae4f12c9ff139fa59768da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6d:fe:e9:f7:98:b4:bf:11:35:ba:be:15:e1:
a6:97:e5:fb:f6:66:c1:5f:24:6b:a1:00:d8:23:6d:
dc:fc:e3:6b:af:a7:f8:88:63:4c:57:bf:50:09:3c:
00:03:b4:83:be:a4:14:c6:7a:c3:e1:7c:c7:c4:d3:
2b:a1:4a:75:73:86:35:f2:b8:32:8c:2f:12:55:ec:
d4:d5:66:6a:02:d6:af:6e:21:b5:5d:da:7a:4b:56:
e4:86:6e:7a:60:af:b4:e3:01:f0:5b:c9:6b:46:d3:
2e:c5:b1:5c:d1:d9:85:b5:83:75:bc:9b:8e:58:b1:
8f:29:0c:f0:a3:2e:2e:de:be:11:c9:b1:02:8e:fe:
57:66:41:bf:7f:84:94:e8:f9:05:c1:08:02:2f:c9:
69:47:57:31:36:2b:8f:e0:d5:64:a0:be:d8:56:52:
a2:58:61:41:01:b9:24:e2:c7:71:8e:ac:79:67:21:
7d:8a:79:10:10:5b:ec:be:2d:ac:00:f8:9c:fd:97:
27:77:c3:ac:ea:71:af:80:c7:0b:15:7d:4d:00:1e:
9b:1c:d5:1e:f5:ea:6e:8f:46:5b:f2:8f:5d:1b:ac:
89:d4:5e:dc:91:d7:bb:be:aa:d8:29:cf:67:31:4b:
dd:57:d4:b7:4c:9e:dd:7e:ba:7e:80:c2:df:a4:81:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:6E:02:1F:60:E1:92:02:AE:4F:12:C9:FF:13:9F:A5:97:68:DA
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.160.0/19
86.111.240.0/21
185.110.48.0/22
193.106.104.0/22
IPv6:
2a01:7400::/32
Signature Algorithm: sha256WithRSAEncryption
3c:7d:b5:dc:e7:44:a6:76:b6:fb:c0:5a:10:7f:6a:83:a1:06:
4d:30:92:4f:1b:0c:5a:c1:23:41:dc:e0:a5:02:2d:68:0e:02:
1f:2c:b9:72:17:b2:2f:47:4b:c7:45:05:09:4f:81:dc:35:af:
45:24:94:b1:65:6f:54:71:42:01:5f:5d:70:3a:7e:ca:5a:64:
7b:90:9d:34:a9:36:48:8e:31:1d:73:3e:09:98:1a:bc:59:d1:
48:18:7f:36:79:77:8e:94:26:51:ed:29:69:fb:78:9d:77:57:
01:bb:12:62:86:ef:65:82:d3:8e:ba:4e:5d:f7:d2:38:e5:b8:
0b:18:61:23:68:c9:7f:1c:74:6e:53:b1:97:e9:64:73:39:5c:
ad:2e:8b:63:98:2f:f2:74:e5:b7:be:65:5f:24:a2:59:80:2b:
cc:f6:82:82:0c:cb:3c:24:cc:03:96:04:79:57:ea:fe:6f:08:
a6:78:31:b3:ef:df:d5:b0:67:23:0a:d0:cd:a5:cc:1e:40:b7:
c3:c2:74:02:82:ad:15:0a:20:7a:c1:bd:5b:1c:3f:89:93:38:
aa:2a:04:f6:57:42:bf:46:0c:21:4a:76:51:a1:0d:91:36:9f:
c9:cf:aa:70:76:a1:a7:45:27:e7:d2:ca:16:70:1c:f9:af:7f:
80:a4:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:17 2025 by rpki-client