Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa
File: w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa (raw, json)
Hash identifier: wDr5pC8ALwDb+JSgX5rgKPXkUmbOaUgv+fsaXxbR3wA=
Subject key identifier: C3:46:A4:BE:17:57:79:56:13:B8:09:59:6F:47:9B:85:82:10:F9:F7
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019427B60BB153934B8B4C6EE66ED61BD7A8
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41942
IP address blocks: 46.31.0.0/21 maxlen: 21
46.31.4.0/24 maxlen: 24
46.31.5.0/24 maxlen: 24
46.31.6.0/24 maxlen: 24
91.102.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0b:b1:53:93:4b:8b:4c:6e:e6:6e:d6:1b:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c346a4be1757795613b809596f479b858210f9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:d0:61:7c:87:51:b9:4a:c4:04:e0:3a:bc:
f4:2b:20:6e:c9:68:ff:86:5c:3a:51:39:67:31:fe:
6a:a1:28:35:bb:46:5c:57:8a:a6:62:96:54:74:d1:
79:6f:ef:70:8f:3e:de:ce:23:33:62:5b:9e:f8:fc:
e4:9a:48:7b:e4:67:46:6a:4c:80:b9:1d:1b:7f:1c:
04:d7:37:b2:bb:70:bc:79:98:d0:f4:92:f3:23:31:
7b:6f:96:fb:12:f9:18:95:8c:9b:f4:6e:47:57:56:
a9:02:5c:d1:ad:ca:95:fd:aa:33:d7:3b:b4:cc:f2:
f3:b4:ff:13:2d:8a:e8:66:5e:c6:5e:55:e7:92:f1:
ab:bc:f3:fe:6a:3d:da:b1:01:7d:e7:71:e2:9d:bb:
95:d4:89:3c:02:db:e8:c6:fb:73:fe:7b:bf:63:93:
41:7f:f5:8e:fa:85:87:5d:cf:4c:46:85:ec:9a:58:
e8:04:7b:93:23:9e:34:6a:6b:0e:2d:e3:f7:8e:70:
cd:e9:92:f8:8e:74:5e:f3:37:45:b7:6f:c4:05:87:
1d:1a:34:f3:49:5b:ab:2d:ec:3e:19:04:c7:51:cf:
33:39:48:71:ff:45:fb:06:9f:d2:ab:2b:a7:49:ed:
43:e5:11:d0:25:bf:47:c4:72:cc:aa:1d:ce:24:bb:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:A4:BE:17:57:79:56:13:B8:09:59:6F:47:9B:85:82:10:F9:F7
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.0.0/21
91.102.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:90:f9:ce:b9:95:35:d5:c1:bf:c2:83:52:16:51:61:3c:72:
cb:9a:d8:3c:c2:a7:5e:7a:ad:e8:e2:4f:2f:36:88:d3:c5:f9:
94:c5:9f:ce:de:ef:43:37:14:52:d1:ce:54:7a:a0:cc:b5:2d:
cd:53:f7:d0:76:68:ff:41:ec:3d:8f:c8:bf:39:72:4e:ee:49:
f9:dc:51:9f:c2:ff:00:80:ab:eb:ed:9c:f9:24:4a:fe:0b:02:
e2:92:19:e9:be:09:e7:74:02:a7:a0:84:cd:b8:09:9a:45:e6:
b3:41:2a:b6:cb:18:d3:f2:50:ff:38:70:f7:47:7a:cb:c9:ec:
de:b2:07:1a:35:51:5e:6a:5a:10:be:f4:0b:28:24:92:9b:d1:
45:61:6c:9c:64:01:2f:b8:39:32:22:33:1b:df:02:ec:6a:95:
e8:fe:ba:57:10:71:bb:3c:84:71:ad:43:e0:a0:22:09:e3:ce:
4d:92:2a:d0:83:c1:6d:56:e9:3d:ea:90:cf:9e:9d:7c:01:9a:
d1:95:22:35:ca:09:e0:72:db:5b:b0:b7:13:44:c1:8a:f5:a1:
00:ea:25:2a:8e:2e:c0:b7:86:1d:5b:46:96:b7:6d:ac:6c:8c:
59:9a:ca:fb:30:6b:4d:72:94:ad:7d:ca:d8:6c:22:0c:88:00:
fc:76:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:05:29 2025 by rpki-client