Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yDnun20BsU1v1f7XzWlEoAkSOZ4.roa
File: yDnun20BsU1v1f7XzWlEoAkSOZ4.roa (raw, json)
Hash identifier: AVFoHKhRVoTbvIfS/uuS8lIeeZ/kMvA13imei2TVwN0=
Subject key identifier: C8:39:EE:9F:6D:01:B1:4D:6F:D5:FE:D7:CD:69:44:A0:09:12:39:9E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5B4D3E5D750387E813D2396585429
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yDnun20BsU1v1f7XzWlEoAkSOZ4.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212128
IP address blocks: 46.161.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b4:d3:e5:d7:50:38:7e:81:3d:23:96:58:54:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c839ee9f6d01b14d6fd5fed7cd6944a00912399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:05:1c:05:e1:7b:1c:b9:7a:42:ea:e7:2a:
42:83:d1:45:fd:d2:2a:08:57:b4:b4:60:5c:31:41:
5c:94:92:0b:28:e0:c5:69:5d:36:44:4a:c8:1b:eb:
a6:2a:b2:0a:45:24:01:01:8b:2f:e5:d3:97:d5:71:
de:0a:3d:6d:15:a3:f6:3e:34:47:52:3d:4c:63:c0:
fa:8f:98:03:c7:3d:7a:f0:91:e6:0c:24:0e:81:cc:
ed:21:da:54:d3:aa:f9:4e:a5:8e:9e:94:36:1d:2a:
c3:56:5c:cc:37:aa:6f:6c:39:d1:97:36:41:9d:dc:
45:cc:58:66:34:f8:8e:ae:a7:ea:00:81:0d:c1:62:
49:c2:51:e5:df:02:41:b1:4c:90:e0:f7:37:18:25:
f4:f6:f9:d9:bf:e2:3a:ef:1c:8d:56:ec:f4:39:47:
6d:4a:5a:89:ee:71:41:e4:39:da:40:ab:da:4a:be:
14:36:c0:45:23:37:b4:07:91:2a:fe:59:b6:e0:6c:
80:55:94:fa:88:9d:0d:fc:a2:1c:79:e8:f5:c0:26:
d8:16:0f:d0:b9:e0:d6:58:fe:47:1d:4e:98:d0:7a:
5f:2b:e5:83:0c:bf:4c:66:e7:49:98:f2:9c:43:c3:
f8:be:bb:3a:63:85:8a:db:1c:7e:2b:12:16:2d:3c:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:39:EE:9F:6D:01:B1:4D:6F:D5:FE:D7:CD:69:44:A0:09:12:39:9E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yDnun20BsU1v1f7XzWlEoAkSOZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.4.0/22
Signature Algorithm: sha256WithRSAEncryption
02:db:49:8c:b4:74:d8:62:f7:48:46:f5:b0:3e:07:de:b9:60:
c7:ac:95:0b:41:23:4b:f3:33:b2:98:39:63:7c:54:07:0e:24:
cc:4a:5e:51:79:f2:78:7b:ba:6a:ca:4f:df:a7:3e:b0:85:79:
4a:26:2f:6f:89:6b:f1:c2:ac:3c:32:33:b9:c7:93:19:97:0f:
eb:b2:01:7e:d7:9b:86:4c:e5:60:6e:1f:b3:24:41:02:15:16:
73:6a:32:a0:9b:34:9d:da:81:e4:45:07:af:f8:d0:14:40:51:
86:2c:3d:01:f8:ad:f2:b1:64:de:5e:09:b7:53:df:18:ef:99:
88:9c:66:90:45:0a:e7:5e:4a:41:fe:65:e7:de:32:3f:52:3a:
2d:cd:6a:b9:99:c4:23:b6:5f:bf:57:50:28:bc:7b:d9:b3:04:
36:76:e0:41:38:99:67:2f:9c:14:95:b9:5a:0f:94:56:60:24:
3d:de:7b:f5:2a:d8:55:6e:d1:7a:30:10:06:9b:c1:56:06:e9:
c5:54:09:d0:c4:96:5b:a5:e8:8d:42:ab:a2:07:01:1f:37:66:
4d:f7:74:f8:44:e0:8e:75:49:e7:66:e3:a3:7f:bf:df:01:ad:
31:2e:e8:60:d6:76:97:ac:6d:13:de:3e:75:c9:69:29:b4:eb:
30:ad:6c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:03 2025 by rpki-client