Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/HtsTG6s-kcm9WojEK08774k0rJc.roa
File: HtsTG6s-kcm9WojEK08774k0rJc.roa (raw, json)
Hash identifier: /wQlqHI/CmQ5Pya/uTc2dYg4WEQ4lzOuNWS6NcGcmr0=
Subject key identifier: 1E:DB:13:1B:AB:3E:91:C9:BD:5A:88:C4:2B:4F:3B:EF:89:34:AC:97
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 0194221FA079CEB1B785F993404D5DBE1389
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/HtsTG6s-kcm9WojEK08774k0rJc.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209983
IP address blocks: 46.31.48.0/21 maxlen: 24
2a02:23ea::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a0:79:ce:b1:b7:85:f9:93:40:4d:5d:be:13:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1edb131bab3e91c9bd5a88c42b4f3bef8934ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:87:4b:0d:28:be:0b:f6:94:9e:16:37:79:
73:fd:1d:c2:fc:ce:99:8b:6f:07:db:c3:13:b5:b9:
d6:57:0f:6e:86:c4:4e:87:37:8d:b2:d1:78:9e:96:
63:fe:ee:d9:f7:c3:86:5a:dc:10:9c:49:98:fc:ca:
d0:ee:32:47:0f:f9:72:44:4d:f8:cd:82:ec:7b:17:
97:b4:cf:a5:3e:0d:3f:29:95:9e:65:10:d8:73:0d:
5a:10:1e:2c:9d:60:2b:68:cb:09:c7:c0:54:ab:96:
7e:06:4a:e7:ab:bc:24:6d:44:e1:51:39:ab:38:f1:
20:c2:3e:28:64:26:af:f3:39:d8:58:b7:49:d8:df:
2f:1a:dd:00:b3:47:67:86:20:9f:47:2e:c4:76:06:
2e:48:2b:a7:29:1f:b3:42:65:48:3c:83:f9:a0:c9:
da:15:ba:d8:8f:32:f6:9f:20:56:1e:a5:87:e2:05:
36:f0:10:0a:25:09:89:30:db:ad:41:d6:46:17:ae:
b4:03:a9:c1:de:1f:c2:4c:a5:95:a2:63:30:10:c1:
bd:77:cf:53:bd:71:db:00:4e:f2:7d:43:85:af:0b:
9d:58:fd:74:ad:60:c5:17:2e:e9:c8:54:e9:83:dc:
7e:5b:31:7a:a3:bd:15:06:1e:ed:bf:95:b7:d8:8a:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:13:1B:AB:3E:91:C9:BD:5A:88:C4:2B:4F:3B:EF:89:34:AC:97
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/HtsTG6s-kcm9WojEK08774k0rJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.48.0/21
IPv6:
2a02:23ea::/32
Signature Algorithm: sha256WithRSAEncryption
56:7c:a9:a4:6e:ed:92:af:6d:be:22:de:11:46:19:fb:53:bf:
d4:3d:ae:c8:4c:d8:d9:39:94:46:2c:6f:38:f9:1e:d2:e6:8a:
fa:5a:1f:24:40:69:52:2d:17:9d:2a:b3:a0:bb:9d:a5:00:06:
65:03:f7:31:c3:82:24:bc:51:4e:93:45:65:8c:48:5a:96:af:
8a:f3:de:72:13:58:72:1f:6b:a7:cf:48:82:cc:46:07:6f:81:
d9:ed:bd:48:12:3d:ff:5b:ed:b3:38:a5:fa:60:d9:bc:0f:a6:
51:48:30:e4:f9:3c:3b:50:6c:d7:61:56:ce:b4:b5:de:6d:47:
76:41:0c:27:5c:b1:9f:e5:2c:ca:e0:82:cc:46:63:cf:36:c8:
83:0a:3c:84:1d:f5:44:f5:19:fb:f1:40:0a:38:dc:2f:2c:b9:
2d:cf:e6:35:d7:ed:05:85:26:98:10:01:31:a1:92:23:fd:39:
2d:ce:55:06:90:39:a3:a0:1e:00:19:d0:0f:27:18:ae:85:79:
b4:6f:ff:65:e2:36:ea:17:8b:8e:a2:ed:6f:98:93:b2:2d:2d:
dd:5f:d5:f8:40:a1:7a:94:bb:87:26:dc:c3:ca:71:0c:44:48:
ac:c1:25:f9:8c:b4:60:f8:37:91:61:77:e8:05:05:84:21:c9:
b4:f0:60:5e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH6B5zrG3hfmTQE1dvhOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjQ3YTMxMTcyZmI1NDljNjk2MTMyODgwYzY4MjRmYjA3
NzdiNTUwHhcNMjUwMTAxMTM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWRiMTMxYmFiM2U5MWM5YmQ1YTg4YzQyYjRmM2JlZjg5MzRhYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCHSw0ovgv2lJ4WN3lz/R3C/M6Z
i28H28MTtbnWVw9uhsROhzeNstF4npZj/u7Z98OGWtwQnEmY/MrQ7jJHD/lyRE34
zYLsexeXtM+lPg0/KZWeZRDYcw1aEB4snWAraMsJx8BUq5Z+Bkrnq7wkbUThUTmr
OPEgwj4oZCav8znYWLdJ2N8vGt0As0dnhiCfRy7EdgYuSCunKR+zQmVIPIP5oMna
FbrYjzL2nyBWHqWH4gU28BAKJQmJMNutQdZGF660A6nB3h/CTKWVomMwEMG9d89T
vXHbAE7yfUOFrwudWP10rWDFFy7pyFTpg9x+WzF6o70VBh7tv5W32Io8uQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB7bExurPpHJvVqIxCtPO++JNKyXMB8GA1UdIwQY
MBaAFEj0ejEXL7VJxpYTKIDGgk+wd3tVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BSNk1SY3Z0VW5HbGhNb2dNYUNUN0IzZTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wOTA2MzgtOGE5OS00MDYzLTkzYTAt
NmU5OTM4OTcyNzA4LzEvSHRzVEc2cy1rY205V29qRUswODc3NGswckpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wOTA2MzgtOGE5OS00MDYzLTkzYTAtNmU5OTM4OTcyNzA4
LzEvU1BSNk1SY3Z0VW5HbGhNb2dNYUNUN0IzZTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLh8wMA0E
AgACMAcDBQAqAiPqMA0GCSqGSIb3DQEBCwUAA4IBAQBWfKmkbu2Sr22+It4RRhn7
U7/UPa7ITNjZOZRGLG84+R7S5or6Wh8kQGlSLRedKrOgu52lAAZlA/cxw4IkvFFO
k0VljEhalq+K895yE1hyH2unz0iCzEYHb4HZ7b1IEj3/W+2zOKX6YNm8D6ZRSDDk
+Tw7UGzXYVbOtLXebUd2QQwnXLGf5SzK4ILMRmPPNsiDCjyEHfVE9Rn78UAKONwv
LLktz+Y11+0FhSaYEAExoZIj/TktzlUGkDmjoB4AGdAPJxiuhXm0b/9l4jbqF4uO
ou1vmJOyLS3dX9X4QKF6lLuHJtzDynEMREiswSX5jLRg+DeRYXfoBQWEIcm08GBe
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:56:47 2025 by rpki-client