Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/TLEdQvZiEPlpX35O8B6oknJfuyE.roa
File: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (raw, json)
Hash identifier: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=
Subject key identifier: 4C:B1:1D:42:F6:62:10:F9:69:5F:7E:4E:F0:1E:A8:92:72:5F:BB:21
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01968BB0A02646C8FA563D583C465C807017
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/TLEdQvZiEPlpX35O8B6oknJfuyE.roa
Signing time: Thu 01 May 2025 11:52:10 +0000
ROA not before: Thu 01 May 2025 11:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 46.240.122.0/24 maxlen: 24
46.240.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b0:a0:26:46:c8:fa:56:3d:58:3c:46:5c:80:70:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: May 1 11:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb11d42f66210f9695f7e4ef01ea892725fbb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:c5:65:ba:75:0e:b4:9c:c4:a9:11:2a:c0:
74:38:bc:76:50:d2:cf:4c:0d:82:ea:71:19:5b:54:
8b:19:8b:11:35:a5:57:c8:5d:1a:0a:65:64:85:f8:
38:80:10:20:27:5a:0f:dd:03:df:97:26:f6:f8:f6:
b6:90:34:42:4f:14:f8:21:9f:40:88:54:33:8a:5c:
04:69:51:f0:bd:15:8d:5b:07:79:46:cd:75:bb:7c:
b1:24:cf:69:d2:b4:00:15:33:4c:76:a1:44:99:7b:
e1:28:c0:26:9b:8e:8d:c4:4d:5d:75:88:99:2b:6c:
69:39:75:b9:c0:d1:f6:c7:24:64:65:98:3f:d6:09:
0a:6e:74:61:75:91:d9:a9:cf:af:99:19:31:b5:3a:
61:ad:9d:a9:45:fe:35:35:d3:99:e5:e4:6c:90:c2:
28:44:9e:d7:8c:45:c0:44:d5:2c:6c:5d:4b:f0:15:
c7:93:28:d6:eb:98:57:c3:90:ed:6b:7f:c5:0a:fd:
32:ba:5b:e2:fd:fd:c7:47:96:cb:fb:29:ba:f3:bc:
39:1f:35:fc:f7:f7:71:68:11:d4:b8:c4:e9:f1:88:
d8:6c:03:f3:e2:97:13:c8:8d:8f:4b:5d:5b:f1:9f:
8d:00:94:05:c3:7a:d6:0e:8a:54:4a:96:c4:54:bb:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:1D:42:F6:62:10:F9:69:5F:7E:4E:F0:1E:A8:92:72:5F:BB:21
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/TLEdQvZiEPlpX35O8B6oknJfuyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.240.122.0/24
46.240.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d4:8c:64:ed:72:93:20:fd:a1:b5:6d:ac:b1:25:a1:fd:b8:
b7:0a:a0:d6:ae:6d:f8:8a:15:eb:74:c5:8f:f8:44:cd:af:bd:
44:10:5f:19:93:15:9a:c9:20:f4:b1:25:f7:98:2f:b6:1a:0f:
66:16:0c:41:bf:12:53:ea:09:9c:fd:22:6a:d3:62:f5:82:89:
0f:1d:57:e5:6e:c4:be:8e:1a:81:48:2c:4f:9f:44:38:6c:c3:
18:84:81:90:20:c4:71:65:e5:3b:5b:a7:57:c4:fc:6d:82:76:
7b:a8:aa:25:52:6a:21:78:1a:66:b3:e9:8f:85:17:16:2f:53:
c7:c2:a0:ec:79:b8:b0:62:90:e2:bb:28:7c:5c:6e:e7:d6:ce:
4d:2d:fb:31:78:28:02:40:1e:9b:08:d5:69:e0:88:2c:7f:94:
15:09:1d:6a:d6:d9:e7:fe:ba:52:be:c5:2a:9e:3f:72:13:00:
1a:24:69:fd:88:1d:ae:cc:d8:2c:3a:52:96:99:03:87:78:a1:
18:9a:ea:6c:45:0a:19:3f:ea:89:da:45:3f:b4:3f:1c:5f:72:
9c:3b:52:e8:47:6b:42:93:9c:52:15:c8:90:d6:65:42:b5:03:
c3:f8:bd:a6:4c:69:5f:39:d8:d0:aa:14:18:b1:09:8c:ac:6c:
30:9e:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:32 2025 by rpki-client