Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/0BP0JBjQyAsNJNdCrJuyp2pdn8o.roa
File: 0BP0JBjQyAsNJNdCrJuyp2pdn8o.roa (raw, json)
Hash identifier: nDwUy32tfTP9yynktWJuQ54pXroVjvopHBVUgVYTrts=
Subject key identifier: D0:13:F4:24:18:D0:C8:0B:0D:24:D7:42:AC:9B:B2:A7:6A:5D:9F:CA
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019712466D66CEDF67DF1164E0C372364156
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/0BP0JBjQyAsNJNdCrJuyp2pdn8o.roa
Signing time: Tue 27 May 2025 15:04:54 +0000
ROA not before: Tue 27 May 2025 15:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200449
IP address blocks: 46.174.141.0/24 maxlen: 24
2a06:3341::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:46:6d:66:ce:df:67:df:11:64:e0:c3:72:36:41:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: May 27 15:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d013f42418d0c80b0d24d742ac9bb2a76a5d9fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:1b:50:92:49:9a:8c:c5:9e:43:4e:4a:14:
79:b5:ed:59:c1:82:35:6b:0f:01:d8:4a:fb:27:a7:
09:67:05:26:d6:f6:b4:3a:9a:17:08:a0:7c:dc:d2:
c8:05:0e:ae:fe:c7:96:70:3f:be:48:a6:72:a8:96:
65:26:af:7c:cb:8c:55:c5:b6:fd:1d:93:32:ff:22:
d0:3f:62:e9:e7:04:5d:e6:05:94:1b:1c:a5:5b:58:
c1:ec:6d:d3:1d:ab:7f:70:ad:0e:67:ce:4c:28:c5:
e1:02:e1:e5:6f:72:ed:f3:03:2e:1b:42:98:c3:4c:
c5:f2:d0:4d:e1:a8:bd:67:bd:c2:7b:98:07:e4:6a:
91:8a:b9:99:f7:a3:d6:80:38:1f:d9:28:5a:e5:97:
d7:37:9b:bc:51:69:c6:cb:73:37:2d:f3:55:8d:56:
e0:33:7f:94:0d:9a:be:47:23:79:dd:0c:07:51:4c:
9c:04:70:d8:57:a3:3c:e1:d9:a3:dd:99:ca:b6:de:
f0:a1:98:6e:46:f5:25:9b:74:56:0a:53:3b:34:c3:
c1:6b:26:51:e5:eb:df:8d:06:56:6a:de:29:8e:f0:
1a:52:b9:58:af:eb:4e:fa:26:0b:d3:7b:9b:db:f0:
61:5d:6a:1c:c5:2b:2a:ab:8b:db:2d:6f:29:33:70:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:F4:24:18:D0:C8:0B:0D:24:D7:42:AC:9B:B2:A7:6A:5D:9F:CA
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/0BP0JBjQyAsNJNdCrJuyp2pdn8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.141.0/24
IPv6:
2a06:3341::/32
Signature Algorithm: sha256WithRSAEncryption
37:05:e4:ff:d5:d8:76:af:03:24:d1:ef:ad:4c:f0:1f:94:92:
3e:e9:5a:66:cf:4c:82:b8:cf:f6:d6:c0:a1:be:1a:81:4f:de:
c9:65:16:74:9e:8e:29:bd:eb:4b:b4:88:ec:bb:e1:8b:6f:3d:
26:c7:58:8e:5a:c7:d4:c4:48:cc:fe:a0:a5:87:42:99:72:fd:
2c:a6:76:14:e4:c7:63:d4:ba:c5:99:c6:6e:71:86:71:b4:e7:
f2:87:23:8e:f6:30:5c:85:44:09:0f:11:b2:27:59:3a:ca:2d:
58:d6:ac:c4:9c:4c:a3:54:17:f3:c9:cc:aa:0d:ff:2b:47:47:
49:61:de:b8:19:36:ea:3f:d3:af:48:e1:f3:63:f0:66:88:68:
19:37:eb:36:09:fe:af:bd:e6:2e:e2:d9:e0:b9:df:4b:ff:5e:
7b:d5:1c:20:73:b0:e8:f1:68:fd:25:f2:e9:18:0a:06:fe:ce:
be:d4:a5:72:7d:77:2a:75:04:84:76:56:b6:11:cd:95:93:15:
d6:9f:93:98:93:b4:b2:0c:20:21:bd:73:04:75:cc:d2:ef:3a:
93:6d:61:f4:c7:90:ce:f1:25:ef:2b:26:d2:a5:5b:bb:a4:2d:
1f:50:74:cb:b7:6d:e1:cd:aa:65:49:ce:02:66:42:e0:30:de:
3d:e2:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:41 2025 by rpki-client