Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/AOl46xQ60-QCOAEt4Y7U_AeVWdg.roa
File: AOl46xQ60-QCOAEt4Y7U_AeVWdg.roa (raw, json)
Hash identifier: JjD74+whnpwh7/CCzOGd30L1sGSD0wPAHrCX3Jyi2FI=
Subject key identifier: 00:E9:78:EB:14:3A:D3:E4:02:38:01:2D:E1:8E:D4:FC:07:95:59:D8
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 0194221F9FE397031F10BA6CA990FF0D9DA7
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/AOl46xQ60-QCOAEt4Y7U_AeVWdg.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51514
IP address blocks: 46.31.48.0/21 maxlen: 24
185.79.82.0/23 maxlen: 24
2a02:23e8::/32 maxlen: 48
2a02:23ea::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9f:e3:97:03:1f:10:ba:6c:a9:90:ff:0d:9d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e978eb143ad3e40238012de18ed4fc079559d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:ee:fa:c3:b6:af:51:74:7c:6e:48:2c:19:
d2:e7:79:fa:11:bb:3a:89:d4:e2:16:a7:c0:64:f5:
82:ab:64:c5:c3:29:64:65:88:e2:7e:aa:2f:d0:32:
ff:67:c6:78:c4:38:53:f0:7d:67:85:55:40:d8:4c:
d5:7a:aa:ed:b7:dc:a7:2b:e1:e5:52:89:27:a0:5f:
b4:48:97:2f:85:8b:c5:56:6b:5b:6a:ac:dd:7a:ca:
67:03:4f:e2:a2:cb:52:62:8f:41:4b:49:0d:8a:92:
df:78:32:39:b3:aa:b5:e4:e3:d3:94:ff:5a:66:22:
55:1d:a3:1d:b4:7a:66:41:f3:ea:8b:dc:aa:10:d5:
06:8e:0f:33:18:6c:7a:63:be:6f:19:c2:f8:3d:ef:
07:58:45:c1:64:8c:bf:cc:11:5a:48:84:06:68:44:
68:c1:9d:d0:55:b2:e9:ae:61:70:0b:9f:dc:bb:4b:
e0:34:64:b1:69:ce:55:85:3f:3b:cc:b8:e0:85:b8:
9b:0f:7e:41:94:8e:05:61:e2:29:63:9b:c5:36:e8:
eb:22:7a:3a:f6:18:3b:eb:6e:e5:7e:81:3a:40:d5:
39:3b:69:e3:9a:10:8c:e8:4d:72:66:d1:c2:73:07:
27:be:5c:c9:8b:aa:1d:34:95:d5:d9:cc:41:df:53:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:78:EB:14:3A:D3:E4:02:38:01:2D:E1:8E:D4:FC:07:95:59:D8
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/AOl46xQ60-QCOAEt4Y7U_AeVWdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.48.0/21
185.79.82.0/23
IPv6:
2a02:23e8::/32
2a02:23ea::/32
Signature Algorithm: sha256WithRSAEncryption
07:9e:cf:87:fd:79:9c:f2:19:d0:ef:61:fe:70:5b:df:c1:1c:
f1:a8:c9:52:fe:e0:24:e4:3e:33:c2:50:d3:03:81:11:fd:9e:
a0:da:f7:04:b0:4e:25:3a:e6:e8:5f:18:15:f4:f7:7c:99:e1:
cf:1a:af:3c:73:7c:9d:a3:be:02:c4:44:8a:ce:f2:9f:d1:83:
c1:3d:83:fb:a7:77:99:ed:23:ea:f5:27:31:e5:8a:96:88:f1:
07:1f:80:dc:5f:bc:f2:79:83:14:ba:20:e1:0d:5c:86:4f:51:
2b:7f:16:b9:95:2a:20:61:08:35:5c:29:58:78:e0:e2:32:53:
fa:2a:3f:c2:96:b8:d8:cf:f5:6c:85:ef:de:b9:87:6d:a9:0c:
bb:15:fb:ec:c3:6e:32:f8:ca:8b:b3:54:54:50:4a:68:ca:6c:
e4:bd:65:ae:c8:12:6e:b1:5c:22:b1:43:2e:15:ff:47:b5:f7:
fc:6a:54:0e:33:7c:2d:c6:d2:f1:ea:b7:43:cd:65:42:dc:73:
10:c2:27:bf:38:ad:d2:0a:20:92:1b:00:48:5a:8e:29:19:cd:
c8:94:9a:b1:8c:60:0f:75:39:78:3c:22:40:77:75:8e:44:34:
40:1d:00:2b:b6:0c:34:f4:62:4a:a4:81:35:81:e4:7f:b9:5b:
12:a9:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:40:47 2025 by rpki-client