Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/4-TMvOUidZ71CQ76gnKNOvLTQ9U.roa
File: 4-TMvOUidZ71CQ76gnKNOvLTQ9U.roa (raw, json)
Hash identifier: 0vbbhqiaDzTWpQRb4sXPCgzHyTU0SowfH7j/iajcMvI=
Subject key identifier: E3:E4:CC:BC:E5:22:75:9E:F5:09:0E:FA:82:72:8D:3A:F2:D3:43:D5
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 0197439F3992C26AF173B66F5CA36E443624
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/4-TMvOUidZ71CQ76gnKNOvLTQ9U.roa
Signing time: Fri 06 Jun 2025 05:03:17 +0000
ROA not before: Fri 06 Jun 2025 05:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 46.70.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9f:39:92:c2:6a:f1:73:b6:6f:5c:a3:6e:44:36:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jun 6 05:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3e4ccbce522759ef5090efa82728d3af2d343d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:e2:ae:eb:0f:a8:bf:c0:2b:5d:98:0e:a4:
23:2e:57:0e:78:52:a3:27:10:d3:44:9b:23:c5:75:
c8:c2:4b:c0:56:fd:29:13:91:c2:85:b9:19:fd:57:
d9:06:5f:42:0f:e2:83:a0:ca:a3:ed:49:d3:e4:ad:
d1:11:98:f9:c3:8b:15:bf:97:a9:22:28:35:06:36:
14:15:45:39:8c:b7:6e:4a:d7:b0:c0:92:4b:26:c9:
c0:20:3b:18:43:96:ef:81:a7:9a:2e:ef:0a:ef:5b:
1b:fa:69:36:64:d0:28:17:03:32:c6:10:77:ee:43:
af:3f:ce:1d:16:7f:a5:af:a6:3d:de:e5:0d:b5:0e:
e1:39:14:65:7b:b2:94:94:e3:65:14:a6:b1:25:50:
ef:3f:48:fd:36:57:94:e1:64:5b:73:ac:2d:3e:09:
fd:47:d5:72:21:cf:65:a2:ed:90:58:45:17:4a:0e:
34:dc:56:cf:89:53:41:d6:c3:ca:22:73:94:86:6d:
76:10:62:b0:c9:ae:24:c8:93:f2:74:5d:80:54:b9:
b7:ec:09:ea:af:81:6c:97:32:bd:55:9d:cf:15:80:
e3:2d:46:51:fd:ff:0b:c2:25:61:20:a6:3b:2a:a6:
69:ef:17:05:b3:e7:c2:9e:7c:4a:e2:0d:93:ba:86:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:CC:BC:E5:22:75:9E:F5:09:0E:FA:82:72:8D:3A:F2:D3:43:D5
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/4-TMvOUidZ71CQ76gnKNOvLTQ9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:8a:96:62:9b:92:62:ab:45:05:5b:6b:31:73:34:44:3c:78:
b0:8b:b0:5e:95:8b:37:0e:73:91:ee:04:c4:70:db:c2:e9:30:
89:5c:bc:ae:88:d2:ca:e7:ef:71:33:a9:31:cb:46:61:c2:7f:
35:10:1f:b2:42:be:17:e6:3f:44:a3:22:9c:17:26:23:95:1b:
c7:fd:94:5b:37:b5:46:ed:a5:5d:e6:25:f2:fe:72:52:d8:cd:
2c:70:61:9a:1c:80:f0:1d:4e:48:55:c3:92:76:ee:4a:4d:29:
34:df:fc:78:6b:d5:89:7b:db:a3:b9:33:28:83:95:c5:80:d8:
96:f0:0d:a5:b1:72:a5:1c:a7:a7:d7:b6:27:cb:52:39:3b:e4:
cd:7b:fd:68:a4:8e:10:18:95:62:5c:21:91:a9:c9:92:70:ed:
ef:87:63:30:24:18:ea:f6:aa:72:a5:1d:c2:ab:7f:29:45:dd:
44:45:37:cd:ce:0e:79:0e:e4:43:a3:a0:9e:61:b5:8b:d2:91:
28:5e:93:d6:b1:41:9e:67:76:10:a6:a2:ce:1f:dc:12:66:c2:
a4:c6:c7:17:64:44:5f:d0:9a:7d:3a:f8:16:39:74:a3:b0:4a:
6b:b7:c8:67:93:5e:57:3e:6b:d5:26:24:07:08:16:cd:47:79:
e9:b7:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:28:27 2025 by rpki-client