Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/bZJxdCs0gWqYryxwQS8EGlLZ93c.roa
File: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (raw, json)
Hash identifier: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=
Subject key identifier: 6D:92:71:74:2B:34:81:6A:98:AF:2C:70:41:2F:04:1A:52:D9:F7:77
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019421439A5A24103CF8FE65C41F0C626658
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/bZJxdCs0gWqYryxwQS8EGlLZ93c.roa
Signing time: Wed 01 Jan 2025 09:47:46 +0000
ROA not before: Wed 01 Jan 2025 09:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9119
IP address blocks: 46.54.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9a:5a:24:10:3c:f8:fe:65:c4:1f:0c:62:66:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jan 1 09:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d9271742b34816a98af2c70412f041a52d9f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:12:a3:23:13:77:44:78:29:21:d2:39:a5:
de:ff:fa:ba:e6:4c:4b:a3:2b:24:f7:0f:62:82:dd:
12:90:bd:dd:e5:dd:cb:1a:16:67:2f:ae:a5:39:b7:
88:d4:20:18:13:a6:f6:89:e2:4d:3b:f7:3e:59:aa:
21:3d:c7:9c:a0:25:95:eb:8b:b9:c2:11:10:11:5e:
4c:f1:4b:b4:68:c7:23:51:f6:c6:af:f9:28:31:0c:
1e:b6:36:10:81:7a:bc:52:ee:c3:c7:82:04:1d:4f:
4e:b6:67:da:64:3a:76:f2:7f:3e:ba:df:64:28:b4:
a8:72:51:79:73:85:d8:91:94:0f:0b:f1:02:f8:19:
2f:6a:65:f1:15:a3:b7:ff:cb:b6:5d:55:12:d3:58:
cb:fe:26:98:18:20:b3:19:9d:cf:c8:75:50:c7:41:
62:a2:5f:b9:95:ff:e8:d9:b3:0a:2c:98:bd:53:dd:
fc:b7:3c:79:08:25:95:a9:a7:ea:71:1e:fa:a0:44:
c6:09:67:8c:7c:5b:a6:ad:b6:a2:e4:c2:9e:94:19:
8b:22:61:24:2b:d1:2a:29:6b:83:b2:4f:f1:5b:4b:
cf:15:96:94:07:90:6d:7a:77:8e:f4:5e:81:92:71:
95:c5:54:65:63:7b:72:38:70:00:a9:09:bc:55:33:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:92:71:74:2B:34:81:6A:98:AF:2C:70:41:2F:04:1A:52:D9:F7:77
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/bZJxdCs0gWqYryxwQS8EGlLZ93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.54.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:41:54:0e:0f:87:fd:b7:c0:f5:e7:36:27:64:8e:f8:81:62:
de:87:8c:bf:27:8e:66:b7:d0:7a:4d:1d:c3:80:c5:a1:99:53:
01:43:9e:59:79:d6:83:15:48:b1:81:cb:3b:78:50:42:4b:ec:
ce:66:1c:fe:6d:78:da:24:48:f9:82:c1:42:be:c6:c0:65:46:
96:54:ff:8e:a5:9c:18:67:27:1b:bc:b0:ff:81:e0:26:b8:b7:
fa:7f:26:1e:33:e6:d7:9e:c2:c7:29:98:3f:4d:20:f0:ea:6d:
f4:e2:d8:42:99:de:8c:0c:aa:ed:0f:69:b3:ed:d2:e7:75:e6:
46:36:89:cf:7a:54:04:ec:7d:d4:a3:bf:84:18:e6:09:57:3d:
5b:cb:39:4e:de:37:34:86:d2:1f:74:a3:17:0b:a2:1e:57:c9:
e9:a3:74:99:b9:65:51:82:ac:8c:e3:05:dd:ac:2a:4a:c1:9b:
fc:9e:05:d9:20:72:2e:65:80:58:2e:87:d9:11:a6:e4:e7:06:
a9:f7:e1:19:bb:4a:92:d0:66:c0:4c:c8:9d:44:3d:b8:23:79:
6e:a7:56:0f:cb:b4:ee:45:da:33:99:2c:9a:54:ae:ef:ea:3b:
85:32:76:92:c1:c3:7e:b2:b8:f0:c6:3e:e2:5d:15:14:cf:ff:
d8:cc:04:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ5paJBA8+P5lxB8MYmZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjUwMTAxMDk0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDkyNzE3NDJiMzQ4MTZhOThhZjJjNzA0MTJmMDQxYTUyZDlmNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugsSoyMTd0R4KSHSOaXe//q65kxL
oysk9w9igt0SkL3d5d3LGhZnL66lObeI1CAYE6b2ieJNO/c+WaohPcecoCWV64u5
whEQEV5M8Uu0aMcjUfbGr/koMQwetjYQgXq8Uu7Dx4IEHU9OtmfaZDp28n8+ut9k
KLSoclF5c4XYkZQPC/EC+BkvamXxFaO3/8u2XVUS01jL/iaYGCCzGZ3PyHVQx0Fi
ol+5lf/o2bMKLJi9U938tzx5CCWVqafqcR76oETGCWeMfFumrbai5MKelBmLImEk
K9EqKWuDsk/xW0vPFZaUB5BteneO9F6BknGVxVRlY3tyOHAAqQm8VTORKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG2ScXQrNIFqmK8scEEvBBpS2fd3MB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvYlpKeGRDczBnV3FZcnl4d1FTOEVHbExaOTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELjbwMA0G
CSqGSIb3DQEBCwUAA4IBAQAaQVQOD4f9t8D15zYnZI74gWLeh4y/J45mt9B6TR3D
gMWhmVMBQ55ZedaDFUixgcs7eFBCS+zOZhz+bXjaJEj5gsFCvsbAZUaWVP+OpZwY
ZycbvLD/geAmuLf6fyYeM+bXnsLHKZg/TSDw6m304thCmd6MDKrtD2mz7dLndeZG
NonPelQE7H3Uo7+EGOYJVz1byzlO3jc0htIfdKMXC6IeV8npo3SZuWVRgqyM4wXd
rCpKwZv8ngXZIHIuZYBYLofZEabk5wap9+EZu0qS0GbATMidRD24I3lup1YPy7Tu
RdozmSyaVK7v6juFMnaSwcN+srjwxj7iXRUUz//YzARQ
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:47:23 2025 by rpki-client