Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0httGqgqnBD-cyBZkV5zP0LpIO4.roa
File: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (raw, json)
Hash identifier: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=
Subject key identifier: D2:1B:6D:1A:A8:2A:9C:10:FE:73:20:59:91:5E:73:3F:42:E9:20:EE
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9F7E148AC403EAA102005D34588BE
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0httGqgqnBD-cyBZkV5zP0LpIO4.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 46.183.186.0/24 maxlen: 24
89.46.237.0/24 maxlen: 24
2a03:f80:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f7:e1:48:ac:40:3e:aa:10:20:05:d3:45:88:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d21b6d1aa82a9c10fe732059915e733f42e920ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:44:ad:10:82:12:cb:37:36:00:b4:a3:6c:
a9:cf:48:fc:4f:c9:79:cf:f8:3f:2c:87:36:cb:6d:
1f:49:2e:db:4e:43:f9:a9:ba:a6:0e:8e:b4:4f:ce:
cf:8c:27:6d:bd:53:e7:a0:d7:a1:0d:7b:5a:5b:df:
d1:25:df:d1:4e:aa:89:a2:dd:6d:a5:14:32:53:84:
8f:4e:3a:64:0d:53:fc:05:b4:e2:05:75:1b:1d:30:
ea:76:1a:14:33:77:6f:34:84:b2:32:36:d9:1a:39:
2e:5d:af:be:e9:d8:ff:04:7b:9b:af:36:32:74:a9:
bf:d7:9c:37:00:cb:35:24:00:af:36:ff:33:c5:1f:
b7:63:28:7e:15:d4:be:8d:cd:43:b5:31:2f:ab:03:
fa:69:96:99:ac:09:02:05:1d:ad:4e:ff:b5:68:63:
41:98:23:a0:96:0f:28:23:00:0d:f6:23:ea:b3:49:
cd:b1:4b:07:f0:8b:c5:3b:29:5f:73:40:ba:8e:bc:
5c:35:83:33:88:bd:47:23:4b:27:93:51:c5:c7:fa:
e7:ed:8b:73:22:e2:d4:24:80:20:b3:4e:8c:3c:d0:
95:8c:a1:55:89:dc:50:ec:ec:c8:9c:3f:68:b6:5d:
04:5d:f2:13:f8:93:5c:b6:f7:73:70:98:7a:63:09:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:6D:1A:A8:2A:9C:10:FE:73:20:59:91:5E:73:3F:42:E9:20:EE
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0httGqgqnBD-cyBZkV5zP0LpIO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.186.0/24
89.46.237.0/24
IPv6:
2a03:f80:36::/48
Signature Algorithm: sha256WithRSAEncryption
6b:30:30:50:02:a8:97:bf:52:2e:94:3b:61:b0:91:15:ac:94:
74:75:07:64:c6:6c:22:ef:7d:d9:48:c3:92:21:eb:13:61:f3:
45:40:a9:4f:a6:ce:4d:37:32:ae:8a:dd:a7:82:ad:07:99:1e:
56:67:e7:d1:21:42:04:c1:8b:dc:c2:c9:9b:25:ad:23:1d:af:
1e:11:9b:a9:fe:7d:0c:98:1e:f5:15:dc:62:9b:21:64:2e:32:
63:ba:63:10:7d:f4:6f:8d:2e:1f:c4:60:ed:a8:40:0b:73:c7:
32:9f:a2:1e:ea:0c:64:8b:10:08:35:0b:6f:33:9c:eb:e7:55:
4d:fa:51:84:6f:86:d2:07:33:f8:0a:d8:0a:ad:01:ed:24:04:
ae:5f:d1:47:d8:a4:85:45:1f:ef:b9:42:f5:33:41:10:2a:e0:
2a:69:f2:b2:d6:7f:2d:43:3f:7a:77:2c:39:00:46:e7:5b:70:
17:b3:e5:55:aa:54:e6:21:82:dd:f5:0c:bd:09:21:c8:af:62:
0c:ec:44:1a:33:51:4c:32:bd:3d:20:ed:83:ed:73:16:2b:bc:
7a:e1:ac:fd:2a:4a:2f:bc:c8:7c:ab:14:a7:3c:e2:ba:b8:c0:
be:d7:fd:5c:89:18:ea:b5:b1:99:4d:a7:62:30:10:70:d7:24:
55:c5:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:16:30 2025 by rpki-client