Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/S2lHpdEWr4mirz1oSpkE0KC76y0.roa
File: S2lHpdEWr4mirz1oSpkE0KC76y0.roa (raw, json)
Hash identifier: h+wh+SL+iqQ3ZKWEdMW2CTCbGb/KIvrGbFf1yDqP0jU=
Subject key identifier: 4B:69:47:A5:D1:16:AF:89:A2:AF:3D:68:4A:99:04:D0:A0:BB:EB:2D
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 0197439D88B47706DB2668DC0E5F7655311C
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/S2lHpdEWr4mirz1oSpkE0KC76y0.roa
Signing time: Fri 06 Jun 2025 05:01:26 +0000
ROA not before: Fri 06 Jun 2025 05:01:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 46.70.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9d:88:b4:77:06:db:26:68:dc:0e:5f:76:55:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jun 6 05:01:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b6947a5d116af89a2af3d684a9904d0a0bbeb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:99:d4:e3:c2:21:e5:0e:ca:b2:a2:30:a0:
22:0f:2e:f2:58:88:ae:48:a4:4a:dd:c5:57:a9:bf:
91:e5:9f:60:f5:33:db:eb:30:ef:0c:0b:d1:e0:33:
47:b8:be:f6:cf:fa:40:30:a3:37:4b:3c:3e:81:e1:
42:08:e1:a4:17:5a:d9:8a:6b:15:72:08:5c:a9:c1:
fb:f7:da:f6:5a:c6:61:eb:02:ae:fc:68:9f:fe:f6:
00:4b:fd:5f:bd:62:a5:9c:8d:4c:02:8e:6a:2b:82:
71:f5:53:2e:10:a9:a7:d6:4b:e6:2c:cd:ce:4c:3d:
6f:53:63:ca:cf:98:1e:d9:20:1f:74:d7:46:75:47:
06:3d:14:e4:5c:14:94:2c:8d:54:75:01:ef:c2:a9:
62:71:0d:01:8a:7b:78:8f:54:f2:1e:56:77:2d:d5:
96:a6:be:08:ad:9e:6d:7a:9a:93:2c:c6:97:f2:5b:
91:a2:81:66:9a:7e:71:2f:ff:94:49:f4:f9:c2:03:
30:a4:7a:5b:35:31:cc:47:1c:93:fc:03:f5:46:5a:
96:ad:62:be:04:f4:12:a1:25:91:97:7e:1a:b1:1e:
4f:13:83:1e:61:97:32:bb:5c:bd:7e:76:83:83:96:
9c:35:85:90:88:1e:0c:5e:75:8e:40:13:5c:9e:d0:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:47:A5:D1:16:AF:89:A2:AF:3D:68:4A:99:04:D0:A0:BB:EB:2D
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/S2lHpdEWr4mirz1oSpkE0KC76y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.192.0/19
Signature Algorithm: sha256WithRSAEncryption
45:c7:39:9f:32:94:eb:03:58:8a:40:87:b4:df:4c:38:fb:3c:
e4:dc:fe:ed:63:5a:bb:e6:69:71:4d:f0:73:c7:89:c7:de:c3:
94:3a:46:8c:c1:f5:ce:67:02:06:dc:15:a2:31:e0:5f:c0:12:
10:59:5a:3c:b4:92:a3:04:8f:ca:9e:e2:e8:1f:95:33:11:05:
46:28:1c:7b:60:6c:cd:8a:c2:1a:f1:29:89:60:a4:d5:c7:75:
30:5b:64:51:3a:f5:57:48:56:28:ad:d5:9c:0f:62:a6:82:0c:
31:d0:93:d1:d7:8d:0b:a6:42:47:79:f7:3b:4b:00:b7:89:79:
b6:91:24:cb:4f:b1:22:c0:fd:bd:0f:e3:7f:b6:58:44:3d:9a:
dc:b0:bc:53:3d:4e:60:21:13:ce:04:95:ae:c9:42:4d:27:1e:
32:57:bc:76:1f:87:c1:23:eb:d0:86:29:94:fb:cb:a0:a2:cb:
5e:c2:f2:5b:e2:e9:ae:fe:e3:10:03:de:23:c3:ed:80:9a:fc:
d9:dc:fc:02:f5:4d:a2:60:65:3d:3a:40:6c:9a:77:3a:48:1a:
36:65:eb:00:4f:00:7f:fe:51:90:aa:3a:6e:d9:5c:74:08:f4:
0b:89:5d:53:31:ab:a9:b6:4b:08:f2:8f:05:96:e0:05:54:82:
1b:80:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:42 2025 by rpki-client