Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/lWp2pNz_835GJJ7O_kZ3ggU57jI.roa
File: lWp2pNz_835GJJ7O_kZ3ggU57jI.roa (raw, json)
Hash identifier: X3vMszfClu3G8XSh8MSgP9m7KkxSRkxy0B7sIqti9o0=
Subject key identifier: 95:6A:76:A4:DC:FF:F3:7E:46:24:9E:CE:FE:46:77:82:05:39:EE:32
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 01941F8C285E2BA0473C6BA095F63AB2A50E
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/lWp2pNz_835GJJ7O_kZ3ggU57jI.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42525
IP address blocks: 46.32.128.0/20 maxlen: 20
46.32.128.0/24 maxlen: 24
46.32.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:28:5e:2b:a0:47:3c:6b:a0:95:f6:3a:b2:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956a76a4dcfff37e46249ecefe4677820539ee32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:9c:a1:d8:e2:6f:40:87:2f:ff:36:f6:6b:
db:2f:25:47:3c:23:9b:3c:4e:20:4b:80:e8:63:c7:
a0:af:3c:a7:b2:3c:75:3e:2f:78:50:ac:9d:53:e7:
94:60:1b:be:d8:4b:6b:76:f5:15:22:1b:9b:29:21:
56:e4:2a:be:2e:77:6e:ce:19:65:4f:29:75:8d:e9:
03:d8:7d:62:16:05:68:44:a2:0a:d5:2f:58:ad:e8:
7b:39:51:bb:ce:2a:02:ec:b8:23:26:d8:c3:37:48:
74:3d:76:51:aa:74:7a:7e:36:45:17:f4:96:72:39:
63:9f:8a:a8:14:bf:8c:19:54:39:6d:ad:0f:8f:82:
cc:54:31:2c:41:13:e2:a9:17:f5:a6:f8:14:2f:d1:
86:37:f7:f5:d4:07:1a:f1:ac:19:09:05:11:71:ab:
0c:f0:24:04:6e:1a:5d:6d:6d:84:bd:cd:63:32:cb:
41:02:57:0a:8a:71:29:7a:79:ba:28:bf:7f:da:50:
e8:ab:ff:30:ba:62:27:91:a8:1c:fe:8c:8c:54:0f:
fa:fe:f2:f7:8d:46:c5:92:af:4c:8a:d0:ab:98:31:
0d:f6:a4:94:c0:c8:e2:0e:56:39:da:f1:f4:a2:61:
94:f6:97:95:d4:e2:24:51:c0:dc:fc:88:03:d2:83:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6A:76:A4:DC:FF:F3:7E:46:24:9E:CE:FE:46:77:82:05:39:EE:32
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/lWp2pNz_835GJJ7O_kZ3ggU57jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.128.0/20
Signature Algorithm: sha256WithRSAEncryption
57:00:3d:6f:9f:64:b4:4b:19:5d:33:89:b8:a1:e2:44:09:c4:
61:0d:72:4c:0e:74:cf:71:de:25:c6:7d:39:b5:10:17:b8:4b:
b3:ac:b9:e8:db:d9:ab:a7:56:f3:e6:ef:74:56:6c:04:fc:ec:
eb:ad:22:3c:57:c1:71:8f:18:50:ea:cc:4b:18:1a:06:b9:00:
3f:85:66:04:fc:a7:89:c6:41:24:cc:8a:c5:5a:6e:e0:08:53:
c8:b1:ff:c9:6b:73:c9:e5:a6:0f:ed:5f:e9:81:a7:bb:77:6d:
86:e1:c7:8f:6b:ca:35:12:34:1d:81:79:83:8f:5b:d9:5d:f3:
2f:23:65:f5:8e:03:f1:4b:ac:ad:10:78:f4:59:98:87:9c:45:
d7:ad:79:82:dd:63:06:15:fa:38:b6:b1:29:91:09:20:48:23:
bb:a2:b8:70:88:92:bf:c2:15:ad:4a:c9:c7:14:0b:82:cd:26:
6b:6e:87:d6:13:af:34:35:07:ab:07:62:67:32:71:05:54:31:
61:05:e4:ca:0c:fd:23:e0:e7:b7:ab:b4:14:c1:ae:fd:c4:11:
83:a1:7d:c3:d7:1e:ad:8f:aa:cf:72:9f:6c:ef:c6:d9:93:95:
96:aa:24:6d:c9:54:e8:e0:a3:39:63:61:e4:07:01:d3:b5:da:
50:5b:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:35 2025 by rpki-client