Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa
File: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (raw, json)
Hash identifier: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=
Subject key identifier: 0A:4D:C9:BF:2E:62:8E:DE:7E:FC:D1:46:62:8F:8E:95:8A:9F:DC:9A
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019420D639CD89EC0D4E34ABC2133A09A89D
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53856
IP address blocks: 46.173.64.0/22 maxlen: 22
46.173.68.0/22 maxlen: 22
46.173.72.0/22 maxlen: 22
46.173.76.0/22 maxlen: 22
46.173.80.0/22 maxlen: 22
46.173.84.0/22 maxlen: 22
46.173.88.0/22 maxlen: 22
46.173.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:39:cd:89:ec:0d:4e:34:ab:c2:13:3a:09:a8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a4dc9bf2e628ede7efcd146628f8e958a9fdc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:fa:22:38:64:1f:1f:eb:8c:29:42:ef:ce:
f7:d6:e6:08:e2:27:b6:28:19:f1:93:8d:d1:e3:7a:
1d:aa:a2:31:ec:f6:2e:bf:8e:f6:6b:39:c0:31:85:
f2:6c:97:98:78:bf:2b:7d:4c:b3:e8:af:f5:7b:e7:
a6:4c:9e:98:29:fa:96:ea:9a:e0:3c:d9:d0:0f:41:
54:2f:6f:d8:39:52:01:e6:89:93:fe:43:cc:7c:96:
25:c0:df:ad:b9:ee:85:00:c9:63:0a:61:ef:38:7c:
62:ac:f6:f1:9d:ab:5a:97:9b:89:86:88:0c:71:05:
ba:04:53:5b:3f:90:f0:1c:59:a3:7c:1c:52:3b:8c:
a5:e2:a7:f4:83:9a:ae:ab:a8:9f:39:d8:24:83:f7:
fa:5c:ad:30:0d:8b:1d:83:49:1d:fd:46:24:2c:a7:
03:5e:2c:14:f4:59:62:e2:4c:73:8f:bf:87:e4:61:
c2:38:64:0b:9e:03:16:58:37:55:9c:da:76:e0:d5:
c0:56:1c:ee:fe:9c:09:96:24:91:da:3e:bf:6d:25:
95:f7:ea:32:17:c4:c1:8e:64:55:48:21:61:56:72:
8f:18:14:52:64:59:d9:94:8b:27:f2:40:b1:28:f3:
65:6e:db:f3:61:e1:05:87:84:54:de:18:43:c1:02:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:C9:BF:2E:62:8E:DE:7E:FC:D1:46:62:8F:8E:95:8A:9F:DC:9A
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.64.0/19
Signature Algorithm: sha256WithRSAEncryption
65:bc:b2:09:04:69:89:95:8f:01:21:5d:48:2a:9e:06:cd:d8:
6c:d7:44:b3:07:a2:12:35:ef:b4:38:d3:1c:38:cf:bc:e5:07:
d7:2a:25:30:80:a6:33:23:e3:2c:ee:2b:da:40:35:78:fc:30:
f5:e9:2d:38:ef:70:15:1d:1f:f1:83:fd:89:38:2d:08:21:92:
1e:df:ea:e5:53:c7:16:b8:78:a1:ea:59:bb:e3:f1:4f:0b:8f:
e9:84:98:a5:2e:5c:6f:b1:c9:f3:05:5f:45:2a:31:1f:b4:bc:
11:e0:dc:51:3b:d1:2e:55:f3:b7:a6:07:0a:15:20:27:3c:74:
21:4f:8d:a1:00:11:af:67:69:8b:e9:18:ea:d6:27:94:7b:ea:
4c:51:1c:98:1a:a0:cd:a3:ab:95:7f:4e:75:d2:52:b9:56:9a:
4c:66:60:b6:45:e5:bd:52:87:a8:72:f3:e5:df:73:9f:c6:57:
ee:bb:12:84:9b:d5:b7:6b:03:c3:58:b4:ce:bf:10:fe:b1:6c:
af:75:ad:4e:3d:99:16:2f:cf:be:ad:73:00:a1:f4:12:e3:78:
67:f1:e4:63:a0:d9:6c:80:94:89:0a:95:c0:2a:38:9a:d8:0d:
cb:ee:bf:bd:5f:17:ae:e4:fb:c7:99:9f:ca:db:af:2c:50:26:
91:e5:06:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jnNiewNTjSrwhM6CaidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3
ZTgxZTAwHhcNMjUwMTAxMDc0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTRkYzliZjJlNjI4ZWRlN2VmY2QxNDY2MjhmOGU5NThhOWZkYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOD6IjhkHx/rjClC78731uYI4ie2
KBnxk43R43odqqIx7PYuv472aznAMYXybJeYeL8rfUyz6K/1e+emTJ6YKfqW6prg
PNnQD0FUL2/YOVIB5omT/kPMfJYlwN+tue6FAMljCmHvOHxirPbxnatal5uJhogM
cQW6BFNbP5DwHFmjfBxSO4yl4qf0g5quq6ifOdgkg/f6XK0wDYsdg0kd/UYkLKcD
XiwU9Fli4kxzj7+H5GHCOGQLngMWWDdVnNp24NXAVhzu/pwJliSR2j6/bSWV9+oy
F8TBjmRVSCFhVnKPGBRSZFnZlIsn8kCxKPNlbtvzYeEFh4RU3hhDwQIM7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApNyb8uYo7efvzRRmKPjpWKn9yaMB8GA1UdIwQY
MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt
MjUwYmFmNzhlMzBlLzEvQ2szSnZ5NWlqdDUtX05GR1lvLU9sWXFmM0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl
LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLq1AMA0G
CSqGSIb3DQEBCwUAA4IBAQBlvLIJBGmJlY8BIV1IKp4Gzdhs10SzB6ISNe+0ONMc
OM+85QfXKiUwgKYzI+Ms7ivaQDV4/DD16S0473AVHR/xg/2JOC0IIZIe3+rlU8cW
uHih6lm74/FPC4/phJilLlxvscnzBV9FKjEftLwR4NxRO9EuVfO3pgcKFSAnPHQh
T42hABGvZ2mL6Rjq1ieUe+pMURyYGqDNo6uVf0510lK5VppMZmC2ReW9UoeocvPl
33OfxlfuuxKEm9W3awPDWLTOvxD+sWyvda1OPZkWL8++rXMAofQS43hn8eRjoNls
gJSJCpXAKjia2A3L7r+9Xxeu5PvHmZ/K268sUCaR5QaY
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:51:44 2025 by rpki-client