Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa
File: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (raw, json)
Hash identifier: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=
Subject key identifier: B9:66:48:CE:BE:6C:23:FA:1B:7A:A9:38:3F:F0:0F:E8:7A:F3:CE:C7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 01941F8C81CDACDE84BF1F072C63F3665175
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 46.31.112.0/24 maxlen: 24
46.31.113.0/24 maxlen: 24
46.31.114.0/24 maxlen: 24
46.31.116.0/24 maxlen: 24
46.31.117.0/24 maxlen: 24
46.31.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:81:cd:ac:de:84:bf:1f:07:2c:63:f3:66:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b96648cebe6c23fa1b7aa9383ff00fe87af3cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:50:dc:aa:08:67:6c:8f:0c:f8:44:07:da:
f0:8f:8d:df:8b:de:fe:8d:1a:aa:fb:df:5c:ce:a0:
fb:a6:4c:3e:5e:e2:88:45:26:3f:f0:37:a1:14:24:
5b:d6:28:17:1e:68:b5:8f:0c:3f:d5:2d:36:d8:83:
0a:76:6a:0d:dc:3a:45:79:bf:80:44:7b:a1:e4:bc:
f9:1a:45:e4:15:6b:fc:3d:1b:2c:b4:b7:0f:09:c8:
32:d6:d3:ae:28:b9:ef:7e:d9:f9:a5:8d:cc:ff:4b:
eb:eb:49:35:87:f1:e7:97:32:1f:f4:ca:45:3b:e3:
71:e7:0e:17:61:d2:7d:c2:61:51:af:79:4f:d7:8b:
ad:ce:8d:46:ff:02:8c:af:58:bf:c7:0f:a3:f7:f6:
16:37:0a:0d:d7:d6:cd:98:7a:3c:74:71:6f:ea:02:
a8:79:63:2a:25:78:97:3f:36:b0:aa:fc:18:62:8a:
81:2f:b6:ef:66:5e:64:15:7d:37:5b:b7:de:bc:38:
a5:b5:f8:17:87:b8:b8:0d:47:e1:ae:84:69:38:c5:
16:87:8b:53:ae:67:c2:0c:a1:b8:4f:1e:42:b8:a2:
46:32:10:68:55:d0:52:94:e5:6d:5c:77:b7:18:d9:
0f:71:d2:1e:09:cd:0d:ac:7e:36:07:ec:1c:7d:09:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:48:CE:BE:6C:23:FA:1B:7A:A9:38:3F:F0:0F:E8:7A:F3:CE:C7
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.112.0-46.31.114.255
46.31.116.0-46.31.118.255
Signature Algorithm: sha256WithRSAEncryption
5e:f0:46:b3:6e:57:37:46:0f:8c:de:a8:31:4f:da:88:a5:e5:
33:5e:d1:f1:63:23:62:31:87:7f:77:ed:e9:35:00:e3:95:e4:
70:bd:03:b1:c2:dd:e7:ff:aa:84:42:57:85:04:22:e9:ce:69:
24:2a:18:54:af:a0:5c:2a:b1:1f:29:30:7d:b1:ca:67:d8:3a:
63:56:7c:05:90:59:bd:e0:36:bc:13:18:22:4e:43:c4:17:a4:
0d:47:aa:b9:53:a4:67:42:a2:21:37:f1:27:c8:06:d4:bb:fc:
6e:23:0a:30:e4:08:18:b4:e8:1a:ec:0d:68:88:ba:a4:c1:8e:
3e:96:9e:f6:d9:d5:2a:2e:0d:c1:74:f4:79:e4:0d:25:0f:95:
22:f9:52:71:3d:dc:24:3a:44:18:aa:ec:a6:9c:ed:b3:05:ff:
7f:21:cd:4f:18:ef:ac:53:02:9e:e6:32:aa:d0:84:b8:cb:ee:
56:f9:56:b0:69:22:9c:a8:1c:1f:a6:b9:66:4e:f9:38:a0:6b:
5f:61:8c:1f:81:47:ec:be:98:54:e3:88:78:f1:4c:0c:4f:c2:
7e:c7:a5:87:77:c6:0c:f0:5d:01:d4:de:de:54:2f:f6:c7:de:
e7:50:3c:f6:dd:04:d8:e9:56:b1:fd:9f:fa:bd:64:47:d5:6f:
9d:c1:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:07:50 2025 by rpki-client