Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/afEdQgqnbCftaot9zEVr5N_KEik.roa
File: afEdQgqnbCftaot9zEVr5N_KEik.roa (raw, json)
Hash identifier: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=
Subject key identifier: 69:F1:1D:42:0A:A7:6C:27:ED:6A:8B:7D:CC:45:6B:E4:DF:CA:12:29
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019425FDCB6FEBB671A4BFB9FB462E386537
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/afEdQgqnbCftaot9zEVr5N_KEik.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65989
IP address blocks: 46.221.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cb:6f:eb:b6:71:a4:bf:b9:fb:46:2e:38:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f11d420aa76c27ed6a8b7dcc456be4dfca1229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:77:f4:fb:ec:f8:0d:04:04:a1:35:6c:40:
f5:55:26:ae:0b:32:4d:fb:90:f7:5d:54:c6:9d:d7:
3c:3c:36:9b:7b:96:d6:0a:9e:20:4f:b2:b5:7b:04:
f8:26:f9:84:04:c0:c6:cb:84:64:39:ce:e7:84:ae:
da:89:e3:07:f2:5e:db:b3:08:49:71:45:5a:00:96:
f5:ab:ae:0d:86:d5:4a:92:1b:d1:d7:17:a1:3a:2b:
a9:45:7b:0b:83:5e:19:dc:e4:e7:e0:d3:46:7d:1a:
1b:8d:d9:4a:f5:8a:bb:d8:85:e3:8f:5c:ab:f5:99:
78:c8:2b:9b:55:b5:bb:3b:96:01:8a:ea:3e:59:44:
8c:23:96:02:72:dd:2e:87:14:4a:3c:05:69:55:0e:
72:f7:84:d3:b2:1c:9c:a9:bb:d7:02:1d:60:ca:11:
4b:70:96:5c:42:b2:19:ec:f1:ae:e0:47:0d:ca:f6:
f8:a0:ef:0d:aa:df:86:b8:2d:c9:5f:5c:6a:58:b5:
77:42:07:91:d8:83:d4:eb:69:01:ec:fb:c8:06:eb:
93:c8:b6:48:64:2e:3d:16:ee:ea:7e:18:2f:35:c4:
91:17:b0:cb:62:bd:e3:f6:c9:cc:d8:78:8a:c4:81:
5f:90:67:75:65:a8:0d:e0:e9:99:b2:19:43:7b:f2:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:1D:42:0A:A7:6C:27:ED:6A:8B:7D:CC:45:6B:E4:DF:CA:12:29
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/afEdQgqnbCftaot9zEVr5N_KEik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.221.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:08:dd:6a:25:4e:da:d9:9c:12:16:63:7b:da:76:8e:28:06:
4c:14:a6:56:8e:3e:3b:85:a0:50:a4:98:9e:35:79:c2:49:d2:
89:1c:7e:df:b4:ee:72:a2:d1:e1:96:85:b3:01:72:a5:ed:52:
9c:3e:3c:a1:15:4d:d5:c7:e3:25:f6:ba:a4:f6:0b:39:73:1d:
02:d7:d7:41:b9:e4:60:a8:cd:c8:58:75:d8:96:28:a2:17:59:
5c:62:23:d6:57:1b:b1:fc:0d:0c:cb:cc:b6:d6:9c:35:04:53:
59:8d:44:fd:03:51:c7:29:4f:3b:ef:3b:72:2e:c4:a0:9c:b2:
78:a9:da:0b:a7:d3:ea:81:24:d2:ce:7b:df:25:8c:d9:1b:51:
da:14:b0:8a:78:1a:08:3e:74:41:09:d3:30:e9:6e:a2:ce:0e:
50:17:6c:6a:6d:4a:3f:a1:61:2d:8c:2e:e2:0f:e6:13:64:b8:
8d:79:be:16:46:d6:bd:b2:b2:b3:c1:07:58:f0:3b:c7:d0:8b:
20:ae:46:31:fa:48:8b:7e:d7:b4:e8:b3:8d:66:95:77:f0:df:
6a:17:8c:17:fe:06:5b:b1:f8:cd:b0:64:ca:8c:57:26:1d:c0:
06:77:43:9c:c5:4c:6b:36:5a:41:4d:ca:7e:2a:70:ab:fd:e5:
e0:5d:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:46 2025 by rpki-client