Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/l8L6M193NRwOqknRUwjUMCL_3js.roa
File: l8L6M193NRwOqknRUwjUMCL_3js.roa (raw, json)
Hash identifier: ZJE5lHxeiMDM24dTZ0outFe8poOxQlVnbOZwmTZc8Kw=
Subject key identifier: 97:C2:FA:33:5F:77:35:1C:0E:AA:49:D1:53:08:D4:30:22:FF:DE:3B
Certificate issuer: /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial: 019424B31A5DB3AE94FCD76C05927132E2F4
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/l8L6M193NRwOqknRUwjUMCL_3js.roa
Signing time: Thu 02 Jan 2025 01:48:24 +0000
ROA not before: Thu 02 Jan 2025 01:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 46.102.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:1a:5d:b3:ae:94:fc:d7:6c:05:92:71:32:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92253353ba649debee927998ba02c8614399f961
Validity
Not Before: Jan 2 01:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c2fa335f77351c0eaa49d15308d43022ffde3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:f0:0a:71:36:3f:a2:4d:0c:3f:3c:bb:6f:
62:db:3a:ec:f0:03:7c:5f:a4:cb:05:20:e5:e1:73:
14:0b:6e:55:5e:f7:f0:ab:db:3c:1d:6a:d3:0d:17:
d2:93:b2:6d:11:c2:4f:0c:21:88:1c:f4:51:fa:b8:
98:9d:7d:63:aa:45:7b:0b:d8:e1:96:a4:b1:58:2f:
75:d1:84:9a:00:0d:fe:32:6f:5e:b8:34:2d:38:d7:
b9:83:4d:2b:6d:1d:70:bc:e5:4b:a3:fa:7f:a4:c5:
73:93:a2:22:a6:16:b6:17:ff:c6:27:ea:46:bb:64:
63:43:e4:91:0e:4a:75:22:47:d5:c4:ab:ad:c7:d8:
56:2e:d6:bb:3d:2f:03:63:af:9e:1f:38:8b:c8:bd:
4f:84:4b:43:b5:3c:28:78:ce:fb:81:06:96:1e:96:
b1:ec:bd:cb:20:f2:17:33:5a:53:bc:13:36:d9:fb:
66:af:bc:44:ab:e1:b9:ca:12:7d:f0:3f:5e:27:23:
16:e6:20:42:8e:f1:5e:aa:96:5f:d1:f8:02:dc:43:
24:c6:71:2e:b9:97:5b:a8:6c:27:34:ca:2e:e8:71:
96:b8:14:db:68:bc:73:a3:5d:7c:fa:c9:9e:c6:a7:
7f:86:a3:e9:9c:7c:a2:e8:48:0a:06:27:9f:85:75:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:FA:33:5F:77:35:1C:0E:AA:49:D1:53:08:D4:30:22:FF:DE:3B
X509v3 Authority Key Identifier:
keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/l8L6M193NRwOqknRUwjUMCL_3js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2b:78:29:2e:99:d2:da:aa:0f:e4:3b:25:9b:6b:6b:cb:ba:
20:da:16:72:fb:26:65:eb:ed:9c:4a:cb:2a:cd:2e:a5:c8:4a:
a2:e5:1b:07:6a:f9:c0:40:6e:b9:bb:fd:92:1d:69:6b:8c:d1:
0f:c5:ca:44:d6:3e:1b:7f:fe:eb:b3:db:9b:54:96:6a:6d:8f:
c4:cb:fa:ec:92:f9:06:e4:0f:cd:71:d5:f0:f7:b7:e9:23:e0:
a5:57:e8:f6:04:b9:8f:54:8a:0d:35:9c:f2:e5:52:1b:d8:77:
1b:e8:c9:cc:5e:68:37:d9:0f:69:66:94:eb:7f:7f:bc:af:83:
2e:e5:dd:36:e2:b2:a7:ad:a0:85:8d:69:a4:a0:23:b9:bd:e6:
f0:e0:35:71:3e:3b:61:63:7c:42:38:b5:48:c4:30:91:6e:bf:
df:df:2f:8f:a2:42:89:a8:4c:29:40:f7:ec:01:a0:f4:75:c9:
35:dc:f6:db:05:9d:09:5b:a9:c0:67:01:db:de:6b:9a:35:c2:
b3:c2:24:fe:c0:f1:3a:8b:bb:b1:07:2a:e3:85:98:8b:24:d5:
08:3c:c7:3e:71:09:2c:75:67:de:0e:19:b4:78:fa:09:b8:1f:
d3:79:52:17:6c:d9:c6:3b:7e:ca:5d:13:e6:86:a2:c7:aa:94:
81:43:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:38 2025 by rpki-client