Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/9LPqpkIeNIaDSjjo7AOyAYTyhLc.roa
File: 9LPqpkIeNIaDSjjo7AOyAYTyhLc.roa (raw, json)
Hash identifier: soTAduWcheeUJCzzhhLzacDsCRQw6shBkj/UDzhlxwg=
Subject key identifier: F4:B3:EA:A6:42:1E:34:86:83:4A:38:E8:EC:03:B2:01:84:F2:84:B7
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 019422FB9F919925702B5D1E5ED9B6A942EE
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/9LPqpkIeNIaDSjjo7AOyAYTyhLc.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39591
IP address blocks: 46.17.8.0/22 maxlen: 24
46.17.12.0/23 maxlen: 24
2a02:2870::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9f:91:99:25:70:2b:5d:1e:5e:d9:b6:a9:42:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4b3eaa6421e3486834a38e8ec03b20184f284b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:9c:be:85:22:a8:ac:84:1f:30:b1:6f:70:
24:85:ed:ed:94:06:39:75:d6:ef:4a:2b:21:6c:bb:
2f:61:42:2f:13:1e:53:dd:7e:d9:37:a3:7e:16:2a:
98:c8:05:76:e7:6f:c9:b6:e3:97:7c:8b:40:43:f0:
2b:5e:70:1f:6c:a4:31:e6:28:51:52:79:7c:5f:ed:
aa:79:31:d4:6a:5a:08:7b:62:6f:39:68:d2:e7:42:
6c:0a:d7:5b:cc:48:86:c6:8b:fb:17:85:14:77:70:
c6:ac:83:92:bf:d3:73:24:6d:f5:dc:dd:fd:73:4d:
fe:c5:7f:73:bc:fb:0a:84:93:d2:a8:e2:0d:4a:b3:
1e:2e:dd:83:28:2b:e1:9e:0d:d5:34:04:9d:1c:4f:
8b:9d:e6:36:58:cb:c3:3d:34:c5:cd:6b:9f:c4:a6:
bb:a7:da:c3:71:5c:27:f6:d9:d8:c4:c9:fa:f0:42:
86:ab:a5:de:0d:cc:61:a0:d5:54:50:77:23:cc:93:
f7:a9:9b:4d:10:2d:c2:e0:a7:42:5b:91:90:d4:b1:
41:c1:ea:9e:10:05:e4:bc:53:dd:7a:ee:64:06:e7:
6e:65:b1:ca:ec:00:db:43:6c:d8:79:4b:e9:05:e7:
92:44:df:f2:8b:81:ec:12:e5:2d:ac:e5:30:04:26:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:EA:A6:42:1E:34:86:83:4A:38:E8:EC:03:B2:01:84:F2:84:B7
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/9LPqpkIeNIaDSjjo7AOyAYTyhLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0-46.17.13.255
IPv6:
2a02:2870::/33
Signature Algorithm: sha256WithRSAEncryption
df:65:38:1b:73:78:08:c8:06:77:44:db:71:27:ab:72:6d:ef:
0e:82:5b:fd:00:74:6a:76:69:0b:68:20:d3:c8:60:87:e9:3d:
a8:dd:06:3e:9f:fc:df:2f:df:af:cd:89:71:4a:23:ee:dc:82:
f5:cb:0d:34:4d:52:d5:04:6b:09:a7:9a:cb:a0:24:fd:d8:f5:
3b:56:7d:0d:38:52:6e:a8:c0:69:71:12:2e:78:6d:d9:70:0e:
cf:06:31:b1:76:56:35:ac:5f:41:fe:4e:27:62:a0:02:b3:30:
22:bd:97:3c:2f:e6:0e:0d:86:03:16:5b:1f:6e:ea:53:c6:47:
fa:44:11:11:e3:02:64:4d:33:f8:44:b5:32:0b:b4:46:ae:da:
85:4c:0f:19:6e:13:7f:c3:30:45:b0:a1:d9:b0:b2:03:b0:3f:
7a:29:63:3e:93:6d:ca:41:47:db:22:69:24:3a:eb:49:68:4a:
52:33:07:30:8b:55:5b:25:ee:7e:10:6f:ca:f2:29:8d:b8:8a:
1f:4e:6c:ce:4f:8b:90:85:fa:d0:27:d4:b9:30:ff:6e:f8:a8:
9e:aa:3f:e5:07:b9:55:2b:c4:75:2f:d7:a6:67:47:9e:53:f9:
38:e5:4d:40:0b:31:24:5f:71:17:dd:a1:84:29:8d:3d:1b:dd:
48:b7:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:02 2025 by rpki-client