Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/5fWADeIk4d10ZbIqGhJnIwZyHH8.roa
File: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (raw, json)
Hash identifier: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=
Subject key identifier: E5:F5:80:0D:E2:24:E1:DD:74:65:B2:2A:1A:12:67:23:06:72:1C:7F
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0194266BF865ED75F4B1C43E0467E7AAFC86
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/5fWADeIk4d10ZbIqGhJnIwZyHH8.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.176.0/21 maxlen: 21
46.174.176.0/24 maxlen: 24
46.174.177.0/24 maxlen: 24
46.174.178.0/24 maxlen: 24
46.174.179.0/24 maxlen: 24
46.174.180.0/24 maxlen: 24
46.174.181.0/24 maxlen: 24
46.174.182.0/24 maxlen: 24
46.174.183.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
185.16.144.0/22 maxlen: 22
185.16.144.0/24 maxlen: 24
185.16.145.0/24 maxlen: 24
185.16.146.0/24 maxlen: 24
185.16.147.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f8:65:ed:75:f4:b1:c4:3e:04:67:e7:aa:fc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5f5800de224e1dd7465b22a1a12672306721c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:10:d3:84:eb:35:cd:b6:1d:1d:62:40:57:
84:ef:09:4f:2b:b9:d4:fc:b6:a7:cc:cc:bf:c2:fd:
53:09:c3:de:8f:81:d2:df:cd:d3:4c:0f:7b:3e:6f:
1d:52:20:59:cc:fa:36:8c:98:e3:94:0f:63:f6:55:
2e:35:6c:a2:9c:4d:ba:ea:6c:81:32:d1:72:db:a5:
3a:13:41:5a:79:ce:dd:b2:d6:1f:16:3f:48:1e:fe:
d4:5e:84:a2:3a:b7:79:2d:7b:a7:f4:c5:6a:79:f6:
0c:ff:2a:5c:5f:6f:94:a4:da:ca:c5:72:dd:b4:fa:
77:2d:1e:1a:9a:88:df:ec:f7:af:9f:83:f6:84:18:
69:db:1d:f3:14:f8:52:fe:2e:ea:b2:95:18:cb:7a:
05:a6:3f:11:33:eb:52:71:08:d5:01:38:4f:df:ef:
41:f7:5a:73:0d:f1:8d:16:59:cb:dc:c2:ca:b6:eb:
e1:f6:19:09:cd:7e:ac:46:32:45:be:a6:48:1d:11:
73:9e:a5:d7:d9:03:34:5f:ba:b5:69:20:b3:f1:f9:
07:b5:00:aa:3c:6c:71:2c:89:53:c8:37:80:ef:13:
a1:bd:e5:42:94:be:59:36:a7:6d:4e:00:2b:c2:a1:
21:9b:a3:83:60:ec:e2:89:90:62:87:9d:69:a0:8a:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F5:80:0D:E2:24:E1:DD:74:65:B2:2A:1A:12:67:23:06:72:1C:7F
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/5fWADeIk4d10ZbIqGhJnIwZyHH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.176.0/21
91.210.128.0/23
185.16.144.0/22
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
33:8f:b1:f8:c1:30:b0:e1:80:c5:82:5f:a5:f5:bb:99:60:6c:
4b:11:c9:d3:0d:69:ec:d8:3f:74:67:40:b9:4d:41:e2:f7:a9:
e8:55:83:4a:fe:26:1a:e1:00:1c:0f:bd:93:04:3c:8d:9e:31:
94:68:7b:5a:c7:49:63:e1:9e:c6:5d:15:93:1c:31:03:93:d6:
db:35:6f:d9:84:38:8f:5b:70:1d:6f:c2:a1:cc:ac:fb:6d:ec:
81:76:09:19:b2:36:5d:ac:34:5b:d1:57:6b:c8:38:8b:2a:b4:
18:3a:36:d8:e2:3e:1a:04:a6:59:41:87:83:0b:af:eb:ff:9c:
37:d1:3c:bb:f9:3b:42:38:46:68:73:2e:b4:ba:20:0a:85:33:
4b:c5:63:1f:7c:6a:29:14:94:81:c3:d8:d9:dd:73:da:77:21:
c2:56:7d:c0:96:17:02:42:8a:d0:8f:ea:ce:76:3b:a4:fc:38:
70:b9:b3:0c:1a:de:f1:8f:3b:91:60:79:e5:76:8d:da:b3:02:
8d:2d:e4:2a:a2:00:57:30:15:bc:f5:4a:ef:3d:55:9a:6f:fb:
fd:83:ca:e4:22:da:6e:44:b7:8a:05:23:ee:87:97:b1:19:c4:
74:81:d9:65:d6:da:b5:6b:0f:8f:a7:2f:2a:62:3f:f7:0f:a3:
e9:66:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:10 2025 by rpki-client