Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/dDW5gmxlZIdnNaZCmbfyMICM7BA.roa
File: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (raw, json)
Hash identifier: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=
Subject key identifier: 74:35:B9:82:6C:65:64:87:67:35:A6:42:99:B7:F2:30:80:8C:EC:10
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 0194274739CD627E9B39685AEC7F8B72E569
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/dDW5gmxlZIdnNaZCmbfyMICM7BA.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57740
IP address blocks: 46.235.0.0/24 maxlen: 24
46.235.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:39:cd:62:7e:9b:39:68:5a:ec:7f:8b:72:e5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7435b9826c6564876735a64299b7f230808cec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:db:6b:dd:d7:c6:0e:21:bd:f7:62:4b:2e:
b4:ac:f4:f2:5b:f0:38:1d:f7:5c:e1:0c:ee:b2:d1:
84:67:48:67:9a:ae:a2:44:c5:c8:ce:fb:75:2d:c1:
be:e5:1f:84:ef:ff:66:bf:93:17:a5:fb:f3:34:02:
ff:04:a2:5a:77:49:c2:b4:c3:b6:46:4e:87:25:c8:
4d:c6:b2:a9:7c:86:93:e0:a2:49:49:34:5c:bb:94:
17:8d:06:10:cc:98:01:64:f7:c9:06:3d:4a:11:15:
a1:20:c2:a1:25:5a:bd:b9:69:ad:f3:bf:f5:b1:c8:
a3:e6:7b:f0:15:92:c0:66:d7:50:d4:f2:1d:1b:b5:
6d:14:1b:d1:b6:a4:8f:7f:1a:2f:16:f4:8e:5a:ca:
23:e7:c6:fd:52:b3:46:69:9e:ee:f1:68:6e:c9:88:
91:91:16:38:0d:7f:70:1c:e2:ea:d3:67:8a:fd:db:
b0:99:1c:21:58:45:e4:19:3a:ee:8f:f3:b4:e8:11:
cd:49:12:e0:78:88:3e:dd:11:b5:ef:f8:b3:77:9a:
1b:a2:2c:b7:fd:de:4c:79:59:b2:96:56:70:d9:04:
85:bc:c0:8f:60:94:a5:24:f9:33:42:df:0e:b9:a3:
25:98:14:47:21:46:5b:19:05:2f:f1:a5:0a:cf:07:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:B9:82:6C:65:64:87:67:35:A6:42:99:B7:F2:30:80:8C:EC:10
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/dDW5gmxlZIdnNaZCmbfyMICM7BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.0.0/24
46.235.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:42:5b:09:ce:09:93:40:4a:56:b0:51:a3:b1:11:d6:1a:21:
2a:5e:f8:1a:ec:0b:f0:7c:f5:cb:53:1e:b5:26:11:27:ee:99:
9a:b3:e3:dc:2a:22:fb:3d:4a:5d:a1:e1:6c:03:c1:ef:45:c9:
b9:12:70:85:b0:a4:e2:38:8d:49:e9:90:b1:78:9a:13:05:11:
22:5c:45:3f:50:fb:e6:51:15:61:60:f1:86:a6:19:8d:2b:a3:
d7:ca:5e:65:dc:80:c7:d4:83:c4:92:8b:2e:9e:26:f6:b8:aa:
97:74:00:f0:1a:bd:7b:8c:b0:7d:29:78:bd:75:0d:51:aa:8e:
1c:aa:5e:ea:5d:0c:6d:f5:c9:82:0c:41:a8:0a:0e:f4:de:2b:
69:b0:c3:d3:0e:dc:b3:7d:b5:36:65:ba:ef:17:fb:cf:1a:b7:
bc:41:d0:8d:18:00:d5:d4:33:93:d1:10:da:90:0c:f2:e3:0e:
6d:f5:09:d2:72:18:75:7a:41:2d:46:a3:01:78:18:50:a7:1e:
02:61:c2:df:0b:0c:54:4c:2e:24:9b:2b:03:23:6b:7f:98:90:
73:be:eb:06:40:2e:dc:cc:c7:63:75:17:fc:4a:95:88:90:1d:
00:79:45:6d:da:d5:fb:16:8e:b0:77:b7:eb:73:a4:d0:6f:5e:
6f:7f:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:10 2025 by rpki-client