Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/UwTNWro9evVq9A2tmjUi9EC7e1U.roa
File: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (raw, json)
Hash identifier: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=
Subject key identifier: 53:04:CD:5A:BA:3D:7A:F5:6A:F4:0D:AD:9A:35:22:F4:40:BB:7B:55
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 01942521778AC3A1B542906C606983F15653
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/UwTNWro9evVq9A2tmjUi9EC7e1U.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35588
IP address blocks: 46.33.48.0/21 maxlen: 24
46.33.48.0/22 maxlen: 22
46.33.52.0/22 maxlen: 24
46.33.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:77:8a:c3:a1:b5:42:90:6c:60:69:83:f1:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5304cd5aba3d7af56af40dad9a3522f440bb7b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:ad:ab:bf:71:b4:0d:cc:ee:4c:45:4c:d8:
d9:c4:1a:a1:7a:31:3e:cc:4d:3f:28:81:f0:43:47:
b4:f2:4a:18:7c:a5:ea:39:d7:85:24:f5:b0:f0:d5:
c9:74:e9:4c:b3:11:4c:4b:5a:5e:d9:aa:86:fe:80:
e3:50:f1:03:aa:37:cc:57:81:88:a6:78:52:c0:14:
ad:ae:b9:e7:c2:58:17:b1:0e:30:72:3a:b3:f2:b9:
ff:2d:f5:44:7a:7b:96:89:10:43:0c:0b:2d:01:93:
a4:64:59:8d:c3:96:53:55:72:32:d8:8a:1c:ff:99:
74:15:65:f5:12:1a:34:39:9a:fa:53:67:bc:60:dc:
3c:80:50:27:d4:4c:43:e4:e4:ae:ee:52:2b:43:de:
7a:ad:50:4c:d3:3a:2d:fb:1b:31:91:85:4a:70:d5:
48:45:4d:18:ed:5d:5a:f1:55:9b:2a:23:bc:26:48:
ce:53:bb:01:bd:ee:10:90:a6:86:35:2d:f5:0a:cd:
0c:88:67:87:94:ee:dc:ce:34:c8:c7:9f:26:61:2e:
a5:9e:f9:ee:86:96:d4:bd:98:ff:d0:46:aa:83:d7:
b0:0f:52:6b:c0:28:a1:10:c3:95:ce:73:35:49:98:
b4:ca:6e:81:71:a1:f0:16:8c:f6:83:f4:ca:70:2e:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:04:CD:5A:BA:3D:7A:F5:6A:F4:0D:AD:9A:35:22:F4:40:BB:7B:55
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/UwTNWro9evVq9A2tmjUi9EC7e1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.48.0/21
Signature Algorithm: sha256WithRSAEncryption
48:92:c5:08:f3:22:bf:5f:cc:f8:66:a3:7b:5c:62:80:09:4b:
cd:cc:c0:7e:77:d7:e2:96:c3:f2:23:67:74:85:23:60:55:db:
c0:e0:db:ca:57:1d:d5:78:c3:87:ec:06:47:4e:86:a0:c6:8b:
72:69:e2:ab:3b:75:15:ef:ce:0a:1a:d0:ea:21:9e:51:4d:1f:
36:b1:70:8a:c7:4f:bc:aa:34:17:be:30:c8:02:8c:5a:73:1b:
94:05:15:ed:00:32:0b:fb:6f:e2:58:f5:3b:1b:d5:52:be:92:
58:81:f7:b5:5b:c4:52:ca:0f:47:d5:89:c9:1b:1c:ca:1a:05:
53:03:e2:d2:25:df:ae:a3:72:aa:9d:0f:e4:89:6a:f1:95:6f:
3e:e6:1b:1d:e3:05:34:c8:82:9c:ca:a3:01:0d:b7:90:a3:7d:
95:f8:50:3a:14:4b:30:14:e6:33:01:c2:ee:90:55:5b:9c:cb:
e1:c7:22:b1:13:60:2f:a8:cb:19:67:87:85:e7:99:aa:b2:52:
c8:95:7d:41:4a:01:2a:2c:bd:cb:ff:8e:8c:86:30:1e:ed:fa:
ba:34:16:29:97:53:93:7d:ff:09:35:07:6a:44:ea:52:82:3b:
bf:7d:c4:a2:54:5c:04:37:70:d0:c3:e2:54:7d:73:23:53:d3:
08:a3:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:35:22 2025 by rpki-client