Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kBpfBN_JAahzD_6FsRXdjqv915Q.roa
File: kBpfBN_JAahzD_6FsRXdjqv915Q.roa (raw, json)
Hash identifier: EdVFNkfDSkB3gmkdCzRozfBiBlEfMwJ2uDfIWd/mls4=
Subject key identifier: 90:1A:5F:04:DF:C9:01:A8:73:0F:FE:85:B1:15:DD:8E:AB:FD:D7:94
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440195583FB346B97D9F36C36AB1C1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kBpfBN_JAahzD_6FsRXdjqv915Q.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 46.149.173.0/24 maxlen: 24
91.246.56.0/24 maxlen: 24
91.246.62.0/24 maxlen: 24
91.247.169.0/24 maxlen: 24
91.247.170.0/24 maxlen: 24
185.225.190.0/24 maxlen: 24
194.59.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:01:95:58:3f:b3:46:b9:7d:9f:36:c3:6a:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=901a5f04dfc901a8730ffe85b115dd8eabfdd794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:61:1e:be:10:76:1f:d3:80:2b:8d:c7:c6:
62:f0:1f:0d:51:6f:1a:49:d2:dc:ce:07:8a:20:f6:
01:01:bd:79:c6:4d:33:d2:11:49:bf:b0:76:e0:6e:
08:87:1e:90:b5:65:54:2f:60:46:39:26:09:89:5e:
af:a5:97:d3:da:d4:0f:61:44:07:83:ce:0a:cc:1f:
cc:35:15:c3:8a:7f:d3:07:fa:a6:18:db:85:36:a5:
28:33:2f:6c:fe:26:f5:ae:59:a9:8c:c2:fe:21:46:
c3:69:8a:16:fe:df:50:d9:79:dd:05:26:f3:2d:ec:
de:d6:41:e1:63:45:b2:2a:08:32:71:b0:44:57:32:
a2:b4:bf:2b:4a:bb:85:69:82:ca:64:1b:d6:6a:20:
7e:9a:6b:ee:bc:b9:af:cf:86:56:39:c2:30:a0:a6:
fa:b0:11:bf:61:6e:8f:b5:a3:ca:cb:ca:43:27:a1:
4c:12:a4:0d:52:d4:1b:fb:5e:df:77:16:70:c1:44:
34:f9:05:e0:43:6c:2e:86:d3:45:a5:bb:1a:36:bf:
94:fa:15:c4:87:bf:ba:ab:30:e8:bb:e4:86:bc:ca:
d8:ed:21:36:ba:67:7d:7c:af:79:d0:30:bf:e4:9a:
cc:6c:33:94:55:ea:ff:75:92:0d:ae:7a:92:91:bf:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:5F:04:DF:C9:01:A8:73:0F:FE:85:B1:15:DD:8E:AB:FD:D7:94
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kBpfBN_JAahzD_6FsRXdjqv915Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.173.0/24
91.246.56.0/24
91.246.62.0/24
91.247.169.0-91.247.170.255
185.225.190.0/24
194.59.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:70:86:40:e2:cd:19:a7:fc:dc:35:26:ef:6b:3e:0b:36:92:
0d:31:e3:9c:52:2b:20:7c:70:77:cc:ac:05:c7:41:8b:72:9c:
72:9a:35:4a:b8:b0:52:54:8b:c5:f1:cd:94:cd:21:a3:e8:3c:
0a:63:3d:18:ac:d7:32:12:0d:c6:f6:73:7b:4e:df:32:01:36:
41:a5:a6:90:c1:6d:28:86:0c:9d:b9:b6:32:54:45:b8:c8:9b:
4e:9e:50:ae:78:32:cd:6b:6d:90:34:d6:4a:7d:bf:2c:c8:25:
f5:8d:05:6d:2d:14:ba:00:b3:b5:04:3c:91:31:27:3c:d0:f8:
89:d9:ef:b0:c0:65:b7:89:3c:74:4d:03:78:51:3a:ba:e8:20:
ab:73:d9:50:2b:94:fe:95:1c:ec:09:96:06:4c:35:30:9a:47:
c6:bb:b3:c8:32:94:0f:62:8e:73:54:b4:2c:be:cf:61:19:76:
d0:bb:8c:9e:31:97:02:c3:e8:44:11:86:da:af:d7:74:99:50:
34:1a:02:7d:5c:08:ae:ee:d0:18:04:ef:dd:89:24:30:e7:9c:
f7:06:62:77:cc:de:b1:9a:35:fa:8a:79:78:44:be:61:fe:64:
5a:05:7b:7f:81:32:e5:e4:5a:d5:ef:95:d7:c5:94:d3:8a:6f:
18:78:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:23 2025 by rpki-client