Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa
File: E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa (raw, json)
Hash identifier: YbPt+4+0edt07crfTPCARczh/UjImehgu5s1r3RYYLE=
Subject key identifier: 13:45:6A:79:AD:1A:5A:F2:FC:06:F5:D9:0A:2C:56:5B:8C:75:5D:FF
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 0194BBF6E11E6E94D590051975099A27464D
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa
Signing time: Fri 31 Jan 2025 10:45:06 +0000
ROA not before: Fri 31 Jan 2025 10:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214875
IP address blocks: 5.152.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:f6:e1:1e:6e:94:d5:90:05:19:75:09:9a:27:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Jan 31 10:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13456a79ad1a5af2fc06f5d90a2c565b8c755dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:d6:a8:87:56:2d:07:ca:62:fd:7b:3f:97:
0d:a5:98:89:9e:94:aa:b2:01:8b:e4:f9:ba:0c:e2:
25:fe:c3:9d:26:d6:31:d1:82:10:71:1a:34:ce:07:
23:6a:ac:83:6c:24:f4:28:e7:2f:39:c0:b9:b5:be:
45:f3:44:da:56:35:1d:99:4d:24:cd:83:2d:3f:91:
90:53:8b:16:ac:c1:ed:6f:b0:13:1c:2f:04:d2:53:
51:c2:75:9d:da:f5:43:85:49:2c:fd:f8:ea:d1:95:
3f:7a:05:b5:00:6c:7b:35:cf:0d:d8:86:c5:bc:89:
1b:af:51:78:ea:cb:89:8e:2f:36:f7:9b:86:e9:14:
63:d3:28:bb:3b:b9:b1:4e:eb:0b:00:47:dc:e2:9f:
d1:3b:9b:27:de:31:40:2c:fa:47:4f:dc:07:97:51:
26:ae:63:97:bf:ef:79:ea:91:6f:1f:da:e9:e5:f5:
4b:f2:d9:0f:bc:43:4b:ce:a1:8c:d7:82:60:b4:7d:
ee:8e:7a:ce:38:41:82:ba:22:14:64:a2:5a:ea:c7:
ec:ac:14:d0:de:e9:f7:71:96:6d:f2:2a:fb:6e:41:
ce:aa:f3:24:b5:f2:ad:33:67:aa:3c:c3:aa:07:05:
c6:74:06:1e:9f:98:af:bf:a8:ab:31:32:7b:72:92:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:6A:79:AD:1A:5A:F2:FC:06:F5:D9:0A:2C:56:5B:8C:75:5D:FF
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.136.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:9c:a9:b8:76:60:5a:36:5f:f9:32:00:7a:39:52:7f:2b:03:
90:2f:04:a0:cf:71:24:bc:c0:10:f5:5b:30:38:4a:68:5e:fe:
04:5e:dd:9d:99:cc:40:6e:8e:cf:fe:82:b7:83:fa:e7:ba:31:
7a:95:aa:ef:2d:df:c2:68:36:d6:7a:ee:0f:36:64:17:2b:6c:
26:9a:03:47:ab:64:89:96:e7:2e:b1:63:9a:52:3a:3a:27:6e:
b7:57:16:69:df:67:2f:4d:53:e6:33:ef:57:1b:15:79:6e:fb:
25:57:3d:29:c8:dc:15:7d:1b:e7:0a:1b:eb:ac:34:a5:6a:5f:
8c:a9:2f:a4:93:c8:3b:26:fb:27:2f:8c:99:9d:3f:38:0c:ad:
9f:f1:41:6e:5b:52:7d:c2:63:4c:f7:dc:ba:ef:67:9d:90:d9:
05:db:f7:d6:a5:c0:63:8e:72:6e:32:3d:ff:8e:c8:69:0b:a4:
9e:67:f7:0e:da:d8:92:05:c6:2c:75:66:d5:fb:f9:38:45:5b:
ad:c9:30:d0:dc:5b:0f:e7:7f:7b:6b:71:04:49:94:05:50:ac:
a2:e8:d9:24:5d:f4:e7:e0:4d:75:8f:92:7d:e3:2f:40:0e:8d:
3f:f8:fb:61:21:60:90:86:d6:d9:6a:fd:c9:55:1e:93:8f:61:
5a:d1:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:25 2025 by rpki-client