Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/DIDvdbb3GKHM4R0fThp87ONTKIg.roa
File: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (raw, json)
Hash identifier: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=
Subject key identifier: 0C:80:EF:75:B6:F7:18:A1:CC:E1:1D:1F:4E:1A:7C:EC:E3:53:28:88
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 01942521764D763864FE2066C4BB835BAD63
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/DIDvdbb3GKHM4R0fThp87ONTKIg.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31593
IP address blocks: 46.33.32.0/21 maxlen: 21
46.33.40.0/22 maxlen: 22
46.33.56.0/22 maxlen: 22
2a03:1240:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:76:4d:76:38:64:fe:20:66:c4:bb:83:5b:ad:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c80ef75b6f718a1cce11d1f4e1a7cece3532888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:74:63:37:31:43:58:7d:39:38:fc:4c:e9:
e3:42:93:2f:41:dd:39:71:6a:1b:64:4a:ec:be:17:
d8:a9:eb:20:fc:ba:2a:b4:cf:fd:35:3e:7b:37:a7:
9e:f6:13:c0:8d:08:83:03:cc:39:e0:e1:c8:e4:6d:
86:2f:f0:84:e0:10:ee:a3:bb:aa:17:a8:e4:ed:4a:
f3:3d:13:e2:12:ae:9b:3d:63:aa:70:8d:78:c3:22:
6a:e9:c2:18:ee:c3:55:b8:0f:95:1c:20:81:81:22:
84:f9:ea:f0:22:6f:53:25:90:13:19:5d:15:68:9d:
5a:28:a7:ab:b5:6e:7e:74:a3:81:63:67:5a:a8:fe:
4d:61:95:31:2e:89:e5:b1:a2:8b:0f:f7:1e:87:1c:
55:55:c3:6e:c7:ad:60:e9:50:62:94:cc:37:95:f4:
36:d4:42:ae:8c:54:03:0e:26:21:49:9f:9d:73:b9:
b3:d3:b1:ee:88:c3:b0:94:68:25:eb:c2:21:dd:99:
7f:d0:ae:af:ad:c9:49:bd:e2:d1:47:1b:b8:6d:40:
60:50:1f:dc:f6:cc:a3:58:20:07:59:ce:84:5f:59:
e8:5c:19:3f:0c:de:6c:d6:ce:06:66:f5:cb:13:76:
d5:c8:82:9b:03:de:23:17:c9:a3:e3:1d:3b:79:56:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:EF:75:B6:F7:18:A1:CC:E1:1D:1F:4E:1A:7C:EC:E3:53:28:88
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/DIDvdbb3GKHM4R0fThp87ONTKIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.32.0-46.33.43.255
46.33.56.0/22
IPv6:
2a03:1240:2::/48
Signature Algorithm: sha256WithRSAEncryption
b4:ee:df:23:ae:b9:2d:bf:5b:88:58:62:38:02:22:72:47:38:
f3:12:67:8f:32:72:f0:fa:c4:f0:3f:75:3c:d7:c4:c0:db:a8:
1a:74:a1:96:84:b9:33:b6:06:1e:22:07:f9:4b:12:a9:f7:fd:
6f:75:0e:a8:f5:f2:2a:95:44:2c:2d:7f:a5:cb:29:d4:78:4e:
92:9e:c6:68:52:d7:e9:f5:9b:0b:fb:ae:64:8e:5a:8a:a9:89:
72:69:15:d6:23:7c:5e:38:b9:7f:a1:1e:14:8e:cd:db:ce:52:
f8:50:be:68:96:62:11:ef:3f:2a:fd:23:e1:2f:4f:51:88:e6:
0b:d4:89:9d:47:00:7e:9c:c2:33:32:fc:08:07:0f:48:c3:7e:
be:19:48:39:02:4e:77:69:bb:a4:04:35:f1:36:bb:ad:e6:13:
b1:fe:97:d9:c6:7d:9f:7d:3b:52:4f:a8:47:e6:5c:20:02:32:
02:49:a8:2b:2c:5f:29:dc:91:c9:2f:f7:7f:c3:e1:5f:43:2f:
13:93:e9:3e:a9:87:9f:d9:cc:8b:42:c0:96:3e:e3:7a:00:a8:
62:94:12:6e:7a:8a:4e:eb:35:f6:9a:f4:82:9c:20:66:a1:bc:
02:b6:1a:c7:c5:02:4d:6f:fe:e0:52:71:52:98:3e:44:60:c2:
57:57:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:50 2025 by rpki-client