Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/RhPTeugmZDfkfUBJoLhRret8XmI.roa
File: RhPTeugmZDfkfUBJoLhRret8XmI.roa (raw, json)
Hash identifier: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=
Subject key identifier: 46:13:D3:7A:E8:26:64:37:E4:7D:40:49:A0:B8:51:AD:EB:7C:5E:62
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019422FB089FB646285E45717C5E87F0A04B
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/RhPTeugmZDfkfUBJoLhRret8XmI.roa
Signing time: Wed 01 Jan 2025 17:47:44 +0000
ROA not before: Wed 01 Jan 2025 17:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34661
IP address blocks: 46.250.0.0/19 maxlen: 19
109.200.224.0/19 maxlen: 19
185.6.184.0/22 maxlen: 22
194.143.136.0/23 maxlen: 23
213.231.0.0/18 maxlen: 18
2a00:1e20::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:08:9f:b6:46:28:5e:45:71:7c:5e:87:f0:a0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4613d37ae8266437e47d4049a0b851adeb7c5e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:63:61:2e:a4:ca:ab:c9:e4:f5:e8:ff:f9:
41:f2:3d:f5:dd:c5:49:32:f6:41:9d:47:38:aa:35:
a7:82:1b:2c:58:fb:2d:c9:0d:f9:a6:a1:7f:97:a1:
f2:df:a9:d3:15:6d:fb:4e:b3:78:30:db:13:8a:38:
fd:33:1d:9b:d8:27:b6:84:51:d4:86:20:cc:c6:05:
a6:39:ad:2e:b5:87:dd:bb:27:8f:d1:e8:50:42:a4:
71:b8:2f:22:10:5d:39:55:da:ed:e6:7d:d6:b8:de:
95:5b:be:67:ae:64:d1:0e:48:97:89:ca:23:51:fc:
4c:6e:76:18:de:15:e9:96:70:f3:a3:f6:3f:46:83:
60:d5:b3:3a:9c:0b:fb:95:fd:6a:40:e1:b7:87:00:
85:15:97:3e:58:b3:57:00:52:ae:89:ee:ec:b4:68:
f2:b5:5e:a7:b8:59:83:41:6c:ca:ab:ae:b2:a1:05:
88:05:14:7c:64:5a:e7:ac:0f:e5:18:cc:c7:9a:ff:
a3:1f:11:6a:c4:2c:62:dc:3c:54:3b:05:17:a1:c1:
a3:f7:b3:8e:13:a8:a0:b9:89:51:a2:fc:b8:23:66:
1f:f0:3b:43:d5:d6:36:d5:65:da:46:3a:e4:e8:e3:
c1:d9:99:a3:c9:8a:e8:b2:56:65:3f:0a:4f:66:68:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:D3:7A:E8:26:64:37:E4:7D:40:49:A0:B8:51:AD:EB:7C:5E:62
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/RhPTeugmZDfkfUBJoLhRret8XmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.0.0/19
109.200.224.0/19
185.6.184.0/22
194.143.136.0/23
213.231.0.0/18
IPv6:
2a00:1e20::/29
Signature Algorithm: sha256WithRSAEncryption
cf:27:85:0e:6b:22:a3:5e:72:9a:0b:a7:5f:00:37:ee:a9:e5:
97:39:69:15:13:ca:4d:ab:67:41:aa:fd:57:b7:07:4b:97:99:
42:c7:94:c5:db:ab:28:1b:cf:75:f7:a5:57:d7:91:29:2f:15:
b0:8c:f1:e0:49:9a:7b:c0:df:41:48:0c:e1:a0:b9:ed:52:4c:
dc:8e:76:40:00:98:2e:6b:ad:1f:93:d3:f2:64:2e:f8:0c:aa:
15:cb:59:eb:59:c5:c9:ed:0f:f3:f9:22:8d:62:6f:e0:fd:2e:
69:4d:cd:e0:77:87:69:a2:7b:4c:be:d7:33:9d:65:11:67:b3:
ff:8c:38:86:3f:fc:79:0f:2f:f3:2d:31:17:b3:cf:6c:19:1e:
e6:a1:f6:f6:40:fe:e4:09:21:59:58:78:13:bb:be:ff:75:e6:
11:bb:cf:36:5d:33:5e:80:42:3e:d2:ad:9a:df:99:60:47:c5:
89:b0:4c:87:9f:dd:52:67:4b:d2:aa:3e:04:5a:40:cc:d4:36:
7e:0e:0f:05:6d:16:0e:cc:da:5f:4d:56:0c:ee:7f:89:e9:a0:
c2:46:e4:41:3f:1e:66:9e:05:8a:ad:9b:33:2c:c5:04:2a:2f:
91:2f:8e:36:06:34:41:60:8d:c4:8e:a2:56:d0:74:04:2c:59:
99:30:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:56 2025 by rpki-client