Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/li9wgS4CzymH0Pk4gTdAaGRdlAo.roa
File: li9wgS4CzymH0Pk4gTdAaGRdlAo.roa (raw, json)
Hash identifier: kP4uhWCvNqfaCH4owPFsoej6RgMi05GSx/V0iC7WmCA=
Subject key identifier: 96:2F:70:81:2E:02:CF:29:87:D0:F9:38:81:37:40:68:64:5D:94:0A
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 0195F5436651606149823F92E67ED13B5699
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/li9wgS4CzymH0Pk4gTdAaGRdlAo.roa
Signing time: Wed 02 Apr 2025 06:49:49 +0000
ROA not before: Wed 02 Apr 2025 06:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43541
IP address blocks: 46.243.48.0/21 maxlen: 21
46.243.48.0/24 maxlen: 24
46.243.49.0/24 maxlen: 24
46.243.50.0/24 maxlen: 24
46.243.53.0/24 maxlen: 24
46.243.55.0/24 maxlen: 24
78.24.8.0/21 maxlen: 21
93.185.96.0/20 maxlen: 20
178.251.184.0/21 maxlen: 21
185.14.252.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
185.64.216.0/22 maxlen: 22
185.115.1.0/24 maxlen: 24
185.115.2.0/24 maxlen: 24
217.16.176.0/20 maxlen: 20
2a00:1ed0::/32 maxlen: 32
2a00:1ed1::/32 maxlen: 32
2a00:1ed2::/32 maxlen: 32
2a02:5420:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:43:66:51:60:61:49:82:3f:92:e6:7e:d1:3b:56:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Apr 2 06:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962f70812e02cf2987d0f93881374068645d940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:35:9e:bf:ab:bf:17:bd:49:02:75:e1:f5:
7d:8a:e7:9a:58:35:5b:cf:6c:bc:79:84:5e:8b:56:
cb:37:cc:8a:3d:84:2d:c7:e3:bf:1e:72:ed:4e:54:
03:d4:e3:2b:74:45:23:67:ac:a7:ea:2f:dd:fd:70:
92:fe:2e:51:36:f9:1b:3b:6f:72:1c:08:00:9c:49:
e3:78:ea:49:49:94:54:03:e0:1a:c2:d0:31:87:cf:
be:d3:45:7d:cc:8a:26:99:86:fd:92:3c:f0:c3:b1:
2a:67:b4:3d:ff:92:ad:31:ec:53:76:26:31:4d:09:
16:b7:28:68:e6:3c:2e:20:b5:c7:72:56:e6:83:70:
fb:89:f7:13:82:c2:52:e1:6e:d9:4a:1f:c5:13:d4:
bc:99:9a:69:56:fc:36:2b:7f:05:a5:29:a0:c2:2e:
9a:5e:7f:0b:3e:61:c9:af:89:e8:b9:c0:2e:7c:b6:
7a:71:34:6f:48:b4:5a:80:9d:ac:bb:00:41:12:b7:
fd:76:3b:9a:22:87:28:cd:92:eb:8b:d7:39:1e:25:
27:d5:3e:4e:33:8b:9f:4c:4a:dc:79:ed:14:c8:c6:
e3:f2:65:77:28:a1:44:d9:93:9d:34:45:6d:9e:e9:
6e:0c:e9:d0:51:d6:ef:72:13:50:92:45:19:03:c7:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:70:81:2E:02:CF:29:87:D0:F9:38:81:37:40:68:64:5D:94:0A
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/li9wgS4CzymH0Pk4gTdAaGRdlAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0/21
78.24.8.0/21
93.185.96.0/20
178.251.184.0/21
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::-2a00:1ed2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:5420:11::/48
Signature Algorithm: sha256WithRSAEncryption
30:83:17:70:81:85:64:51:fe:4a:49:d1:76:52:e1:d2:4f:79:
7e:8f:8f:42:8f:de:f2:2f:15:bd:95:e2:2f:a3:81:a3:08:f2:
49:16:ed:cd:b4:fb:44:a2:49:65:06:80:79:1e:27:c8:9f:30:
7e:6b:25:eb:b9:e3:15:8e:24:a2:56:99:eb:47:11:e0:0e:bc:
72:93:f5:be:9e:44:2c:be:b4:a8:4f:b5:ab:f5:43:3d:dc:b2:
c7:c8:40:4d:d0:17:c7:a2:b6:e8:70:5c:c7:99:e7:ee:53:99:
68:dd:ed:3c:07:a6:c8:35:57:9e:42:cf:1d:ef:59:c3:44:8b:
af:d2:d4:68:f9:08:af:da:46:87:50:ff:ee:e1:fb:c3:49:4e:
e4:6f:06:88:6a:70:54:b7:a5:3a:fa:70:f5:52:2b:13:12:e3:
c8:8a:57:c2:0e:55:d8:ec:59:48:1c:d4:b5:15:02:ea:68:6e:
72:15:cc:0f:77:29:83:62:45:18:3d:c8:44:20:2f:dc:19:d2:
37:02:3b:5a:a8:a4:7c:4d:6c:52:c8:ac:f5:c3:4f:05:e0:b8:
ac:a8:0c:49:7a:24:01:7d:83:b8:a5:dc:34:3f:59:0d:e7:62:
61:b9:b8:2b:97:ca:a0:60:d8:4b:0f:a7:79:b2:68:e5:93:ad:
d9:78:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:04:22 2025 by rpki-client