Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa
File: U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa (raw, json)
Hash identifier: xYdDt5sefA9c3Do+dzsPZm4stlI6uY172Lao1mLLokc=
Subject key identifier: 53:C0:E8:10:E6:19:C2:2D:E1:17:10:E1:23:F6:5E:C8:4C:C0:29:68
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0196E7599737A638138E71998335B8A0876F
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa
Signing time: Mon 19 May 2025 07:02:10 +0000
ROA not before: Mon 19 May 2025 07:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 46.236.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:59:97:37:a6:38:13:8e:71:99:83:35:b8:a0:87:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: May 19 07:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53c0e810e619c22de11710e123f65ec84cc02968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:05:39:11:db:00:b3:07:b6:ae:46:d3:9c:
cd:8c:a6:9d:8c:3e:3f:b0:37:21:69:1a:4a:6d:ec:
78:31:c5:8e:bc:a6:a2:8c:8f:e5:81:bc:81:84:b8:
7a:bf:6c:06:25:73:c4:27:46:05:9a:66:62:4f:9e:
44:d6:9d:b1:9c:52:d7:52:b5:76:f8:f0:11:e9:ad:
51:ce:fd:eb:c0:73:8c:00:0a:65:f4:83:f6:ab:49:
66:84:ed:67:3c:b5:2b:cf:9e:4b:7a:f0:f2:aa:66:
35:27:05:1f:94:a7:d8:c8:4f:b0:fa:d3:f5:a7:6f:
c3:b8:0c:6d:c7:79:07:52:f6:8e:c6:83:04:db:48:
4c:5a:2a:63:a2:ef:3a:7f:fa:ec:c7:11:11:11:a2:
a6:0c:12:fe:27:e8:5d:40:df:8f:9d:31:33:4d:77:
52:3b:35:6c:99:f1:d9:d5:4c:9f:83:f6:2e:80:0c:
ab:4f:0e:fd:09:f5:ca:06:3b:1c:73:7c:6a:1e:65:
97:1f:ae:37:9f:ea:44:1a:e3:dc:c7:fe:e7:da:f6:
28:f4:53:f3:db:29:18:71:8c:e0:f8:1e:a6:e5:43:
b0:c1:83:79:56:d1:1f:a1:34:d3:7c:92:88:58:c3:
4c:58:9d:75:1c:c1:45:8b:6e:01:33:69:57:51:6d:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C0:E8:10:E6:19:C2:2D:E1:17:10:E1:23:F6:5E:C8:4C:C0:29:68
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.202.0/24
Signature Algorithm: sha256WithRSAEncryption
92:18:f7:92:66:1b:2c:86:03:c7:14:ab:68:ce:0b:95:cd:fd:
50:16:f8:2e:eb:0a:e3:d0:1a:40:22:ad:80:52:9a:c4:71:5d:
20:dc:1a:2a:e8:32:1c:91:f8:73:f4:58:fa:6d:ba:77:6b:23:
c4:7a:94:ce:f1:01:bb:c6:ab:74:f8:93:48:8f:94:a7:32:21:
da:e3:1e:b3:55:60:f8:cc:db:0d:58:91:77:3e:66:6c:0d:31:
bd:e8:f4:c9:e7:1b:49:04:3a:4a:0d:42:ad:cc:00:a0:21:54:
66:e2:0e:c1:ca:f8:7c:95:1f:83:f4:53:84:38:e7:67:b1:13:
ad:5b:07:c9:c7:49:aa:f2:45:72:9b:e9:f4:77:2c:fc:6c:fa:
28:c4:54:cb:2a:d5:c9:0f:94:de:6c:7a:f2:55:88:54:3e:92:
76:41:92:6c:14:b2:fa:90:8f:d2:8a:59:a7:6b:90:8b:4a:68:
7d:48:89:90:a4:4e:60:7a:3d:e1:f5:91:44:e0:ca:9a:c2:7a:
0f:2b:b6:50:8e:b9:06:88:a7:9b:bb:de:84:b9:53:9b:69:29:
12:be:79:63:24:71:e0:a4:ec:04:7d:76:bf:8b:86:27:30:06:
0d:7d:29:98:55:55:2f:65:e5:36:0e:2a:22:cc:57:8c:97:74:
22:3a:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:13:18 2025 by rpki-client