Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/uH8W7wZaxW_HHCHl_MLip0UA6Og.roa
File: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (raw, json)
Hash identifier: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=
Subject key identifier: B8:7F:16:EF:06:5A:C5:6F:C7:1C:21:E5:FC:C2:E2:A7:45:00:E8:E8
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019421B1EFA84BC122C0A9649414EADF586E
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/uH8W7wZaxW_HHCHl_MLip0UA6Og.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208498
IP address blocks: 46.253.119.0/24 maxlen: 24
46.253.125.0/24 maxlen: 24
82.149.231.0/24 maxlen: 24
82.149.236.0/24 maxlen: 24
83.141.30.0/24 maxlen: 24
83.141.41.0/24 maxlen: 24
83.141.58.0/24 maxlen: 24
109.71.30.0/24 maxlen: 24
178.19.68.0/24 maxlen: 24
178.19.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ef:a8:4b:c1:22:c0:a9:64:94:14:ea:df:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b87f16ef065ac56fc71c21e5fcc2e2a74500e8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:85:65:3e:d6:96:ac:33:cb:fb:76:73:4c:b0:
c5:fe:bf:1f:a8:4e:fe:09:f9:8d:30:67:e9:cf:36:
f2:76:1c:44:cb:16:c5:ad:55:ad:20:77:4c:17:01:
8c:dc:40:c7:38:37:ad:03:e8:5b:f1:c7:42:cd:e7:
52:31:e2:b1:d7:87:e1:4d:e3:fa:9c:6d:50:f4:46:
a8:64:1c:fd:99:93:81:0d:48:63:ef:95:ca:dd:36:
3f:e7:d1:c8:b8:6b:bc:a5:5c:bb:64:ba:b6:66:81:
13:b4:85:7c:41:27:cb:52:5f:5b:9d:71:bc:05:23:
7d:de:e1:e4:8a:fe:ee:3d:ea:8c:c0:d4:41:f8:81:
c2:39:87:ce:6b:8c:2b:bd:4a:27:7f:ea:55:8c:13:
1a:54:d9:83:b1:59:bc:26:02:d4:e2:c7:79:22:19:
e8:ed:33:a4:7c:a0:af:ac:f0:27:20:bf:fe:bb:67:
47:fc:09:4e:33:04:23:89:7c:2d:ba:18:2c:7b:73:
06:dd:46:24:b4:6d:0b:38:48:4f:56:fa:ca:76:ce:
20:84:42:6a:b8:a5:22:d9:f1:f0:9a:be:93:77:3d:
e5:ff:e4:fa:12:bd:fd:61:79:98:09:86:f7:ad:9c:
c0:b0:a6:74:1a:e2:19:fe:a9:c7:de:f1:1c:fa:96:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:16:EF:06:5A:C5:6F:C7:1C:21:E5:FC:C2:E2:A7:45:00:E8:E8
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/uH8W7wZaxW_HHCHl_MLip0UA6Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.119.0/24
46.253.125.0/24
82.149.231.0/24
82.149.236.0/24
83.141.30.0/24
83.141.41.0/24
83.141.58.0/24
109.71.30.0/24
178.19.68.0/24
178.19.76.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7c:54:d3:c4:00:78:44:42:d4:5e:98:60:a6:4a:3f:fa:7d:
02:48:4f:d0:47:5b:b3:28:51:a8:bc:e1:9d:07:1f:0b:26:e4:
dc:f6:85:14:1d:74:84:3f:95:15:4c:c7:b9:59:41:22:f6:b0:
c8:5f:b7:2f:c4:2f:f0:b4:a5:6c:c0:a5:4d:64:74:68:8a:57:
29:dc:f2:1f:7e:16:d7:39:a2:70:74:c3:86:4f:c6:46:70:d6:
71:1c:8b:39:e6:df:12:30:cd:e6:83:aa:b2:42:b4:af:36:42:
e6:9d:60:d5:b0:c2:25:f7:29:f6:4f:e0:55:20:4f:e9:d2:bd:
95:6b:75:0d:49:58:6b:14:ae:cb:62:36:21:76:5c:8b:d8:fd:
43:55:fd:80:1d:65:cd:a0:61:94:ff:96:a0:81:24:61:3c:5e:
3a:df:aa:b3:a8:85:0b:93:31:9a:c6:39:5f:fa:ab:5e:57:1d:
7a:c9:dc:aa:be:9a:df:9b:1d:bb:e5:60:e2:4e:48:67:ba:94:
1a:95:14:e1:93:5d:fb:2b:d6:6c:52:8d:27:5e:7d:8c:76:a4:
0a:90:07:b6:32:df:a9:34:57:11:52:e8:24:c7:27:9f:42:7c:
a4:b0:fe:42:d2:5d:5a:4f:cb:ee:c2:a0:e2:7b:38:20:bf:3c:
c8:23:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:38:38 2025 by rpki-client