Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa
File: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (raw, json)
Hash identifier: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=
Subject key identifier: AA:5D:C8:F2:5E:9C:2E:1D:42:9D:DF:90:46:BB:99:9A:10:7C:A9:8E
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019420D65390BA719E54DF0BBC0FE64B9248
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 46.246.1.0/24 maxlen: 24
178.73.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:90:ba:71:9e:54:df:0b:bc:0f:e6:4b:92:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa5dc8f25e9c2e1d429ddf9046bb999a107ca98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:d2:c2:25:f9:6e:d5:3b:6a:5b:2d:bf:7a:
00:78:e6:6e:fa:f1:b3:f8:4f:2d:4d:e7:a7:d6:30:
ff:a0:7e:f6:41:d0:a1:12:b2:d2:14:6f:4c:a1:05:
5d:a6:09:9d:34:e8:56:e4:34:06:4c:e0:3b:8a:35:
ad:33:de:85:9c:c9:4e:20:b3:84:96:60:2c:b6:f4:
64:e3:18:c4:f7:1a:bb:55:73:64:a2:51:c4:52:ab:
38:f3:d0:e1:69:fd:8e:9c:86:3e:3d:18:23:96:e1:
fe:2d:85:7c:94:84:1e:12:ed:6d:02:5e:19:4a:83:
b0:4c:34:ed:9a:40:db:44:60:ae:09:bf:e7:88:4a:
8b:35:85:c4:0a:29:bd:2e:b0:87:e8:66:85:0a:34:
c6:1c:44:0b:78:73:58:81:13:16:08:06:21:2b:8d:
ee:e8:48:36:83:ae:94:e8:70:26:21:f9:83:68:7b:
ae:55:c8:b8:33:c6:51:d2:cd:28:c2:c9:8d:3d:d9:
b0:33:5f:a8:2e:4a:dd:8b:ca:16:e1:c5:f2:d0:d2:
d8:8e:9c:c3:fc:67:0a:99:89:e6:16:79:20:55:59:
31:af:e3:dc:81:7a:22:ae:1a:98:07:57:ff:bd:c3:
61:20:e3:5e:44:33:3c:b6:ce:31:a7:a2:42:13:77:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:C8:F2:5E:9C:2E:1D:42:9D:DF:90:46:BB:99:9A:10:7C:A9:8E
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.246.1.0/24
178.73.220.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f7:1f:b6:d5:2a:62:c5:1f:fe:37:fb:a6:d4:f7:59:b5:59:
84:39:38:e6:88:ca:cd:35:05:84:25:c4:1f:db:02:0a:5b:8e:
b2:6a:69:17:2f:de:7e:fc:87:d0:48:ef:aa:19:3c:4a:85:88:
85:f9:c4:93:3c:e1:0c:bd:ac:80:14:2d:57:2d:ba:e5:0d:3d:
be:18:b3:33:c1:7e:2e:4b:0f:c6:07:99:7d:35:c6:be:18:e0:
12:3d:dd:a7:29:a1:3c:6a:05:9f:38:e3:72:43:35:ec:6d:16:
1e:04:2d:69:e6:9f:7d:79:38:6e:3c:63:3d:06:31:b5:d1:8f:
6f:82:62:43:c9:a1:ed:19:94:11:85:b5:fb:1f:7f:d6:d9:a7:
8d:12:88:e5:8d:c1:89:65:57:8b:16:18:bb:31:f2:be:5f:3e:
8e:b7:7d:2e:2d:7c:d2:a0:b6:2b:d0:b9:3b:ff:c1:c4:ed:b9:
1d:df:29:93:20:78:35:f5:ae:a7:a5:ba:ba:a9:9d:20:55:11:
ff:52:ea:d3:64:e6:2d:7a:b2:4e:97:05:f2:35:67:b1:b4:12:
25:42:0f:9f:d9:70:e4:6a:f9:84:61:0b:9f:a3:75:7b:06:02:
4e:fe:36:4f:3a:25:a4:72:2c:e0:89:26:a0:d4:d8:cd:4a:90:
85:73:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:26 2025 by rpki-client