Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/qWeBIgMT9yofaevmnsJv-k3J7gM.roa
File: qWeBIgMT9yofaevmnsJv-k3J7gM.roa (raw, json)
Hash identifier: OVmNg3h2HayVISC+svzIkwU6u8HmPx4SN/OehOmAqgY=
Subject key identifier: A9:67:81:22:03:13:F7:2A:1F:69:EB:E6:9E:C2:6F:FA:4D:C9:EE:03
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 019425218B5FCCFE4C6385576D3BD2C91FE8
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/qWeBIgMT9yofaevmnsJv-k3J7gM.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210805
IP address blocks: 46.252.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8b:5f:cc:fe:4c:63:85:57:6d:3b:d2:c9:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a96781220313f72a1f69ebe69ec26ffa4dc9ee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:82:9a:c9:79:d6:6a:7e:94:90:0d:4b:65:
37:18:d6:90:f0:ab:c0:a1:b5:af:d4:1f:19:f3:4b:
4a:cd:1a:a2:bc:15:56:7c:61:09:77:27:b1:fe:3e:
6d:01:65:a1:d4:2e:c1:a0:72:09:ae:87:65:22:27:
ea:cb:80:43:9a:df:8c:2b:5d:cc:39:17:a0:cb:82:
0e:34:02:2d:91:b0:20:33:67:04:f7:29:ed:7b:d2:
56:bf:04:76:4e:fc:fa:9b:db:c4:16:4d:8d:1c:c2:
b0:92:19:18:88:88:01:5d:cd:35:f3:6b:0f:9b:42:
2d:68:67:d5:40:46:48:41:3f:09:8c:b6:3f:29:08:
21:58:50:9a:da:7d:e7:ba:06:20:22:5e:15:4c:0b:
9a:73:82:05:15:04:a3:da:8d:e8:c2:3c:9b:3b:03:
8c:65:59:5e:33:0d:ae:16:33:0c:08:19:60:92:2b:
d6:ef:c2:01:7e:2d:9e:0d:04:ee:dd:73:1e:be:a3:
25:b2:07:16:b4:7c:c6:94:ac:e9:c6:14:be:f0:ee:
d4:46:ac:1f:53:a3:cc:81:23:73:da:bd:46:62:d2:
dc:68:1b:ed:30:0c:25:34:b3:27:46:cb:d3:bb:e2:
01:fe:90:d9:c9:51:dd:d9:b4:a6:18:a4:74:fe:54:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:67:81:22:03:13:F7:2A:1F:69:EB:E6:9E:C2:6F:FA:4D:C9:EE:03
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/qWeBIgMT9yofaevmnsJv-k3J7gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e0:20:a4:71:d1:a7:33:d2:d2:4b:ca:22:58:74:91:0f:be:
b5:69:92:3e:aa:93:eb:a8:f3:7c:e0:e7:a4:59:67:c8:64:cf:
13:13:36:05:8a:5b:e5:f0:16:16:64:d2:2b:e8:87:60:66:a2:
ef:90:63:b9:e7:e2:01:8f:a3:13:0c:7e:ab:aa:5b:71:69:f6:
09:3f:4a:c1:02:d2:8b:b6:da:55:ff:08:5a:32:ee:2f:6b:92:
3f:bd:61:9f:1e:b6:b0:a5:b1:b2:fe:44:a1:c2:24:3e:47:39:
b2:b7:49:66:bf:84:c0:56:4e:2b:9b:41:9a:63:51:f9:98:98:
4d:23:f8:ce:83:45:99:d8:f7:ba:0e:bb:cf:fe:ea:31:b5:94:
30:2d:0b:a5:7b:60:50:c4:5f:f4:42:b6:5c:d4:38:78:d3:9b:
d2:04:3c:13:f8:1e:5b:a7:6f:da:33:0d:e3:3b:44:ca:59:47:
54:79:b5:16:3a:e7:2b:d9:35:16:7b:39:98:87:53:1a:b1:0a:
59:82:ef:f2:22:e6:0a:be:19:c1:82:3c:4a:a9:dd:d6:ea:87:
51:6c:30:e2:8c:b6:fc:ca:7c:ad:ee:53:a9:80:fd:05:d1:3c:
00:f4:8a:db:9b:f1:d7:9d:58:b3:89:da:d0:a9:16:5d:1e:65:
0b:d5:48:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:22:35 2025 by rpki-client