Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa
File: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (raw, json)
Hash identifier: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=
Subject key identifier: 69:0E:C9:B0:21:E7:48:1D:86:E1:D7:D8:FF:7C:87:5E:18:F7:5A:8F
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B549FCBC636C27B909006031894FEA
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147293
IP address blocks: 46.20.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:49:fc:bc:63:6c:27:b9:09:00:60:31:89:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690ec9b021e7481d86e1d7d8ff7c875e18f75a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:4d:b2:2e:4d:8c:9f:fe:c0:d5:f4:85:a3:
a1:b4:4c:7e:6d:62:ad:96:95:fe:0e:f8:5e:e9:e5:
87:63:53:13:f1:04:2d:a0:65:37:f9:32:dc:95:64:
ee:f3:69:0d:e4:8a:74:22:69:2e:d2:d0:37:66:d0:
29:d0:2e:80:e7:0c:f4:20:c1:a8:81:ca:4a:3e:a5:
7c:b3:0c:c0:72:b9:6c:1d:15:ec:56:a2:ea:ad:68:
9a:15:63:b8:3f:c2:40:8c:24:b7:5a:52:86:a0:ba:
2e:04:da:e0:f9:33:2d:6a:6d:ef:fc:3d:32:64:89:
0a:ba:cf:c7:e7:f9:6c:36:38:6a:9e:0e:9b:bb:3b:
2f:68:a3:36:cd:ad:91:09:14:95:23:9a:06:05:d5:
82:f4:9f:96:35:36:ed:f1:1d:94:f7:6f:d2:e5:4d:
eb:f9:a2:b3:0d:98:26:d5:9f:35:98:64:88:2e:0d:
36:76:1d:e6:9b:60:b2:83:8d:42:c0:8d:c9:25:fc:
69:da:8b:96:75:8d:19:ee:0a:4c:10:a2:13:26:93:
cc:b0:9b:6a:82:e1:72:cf:c2:5b:3e:98:c8:4b:88:
d6:43:9a:15:68:bf:96:fd:f5:b7:f5:d1:60:58:58:
ee:e5:96:d4:61:a3:7a:a5:29:83:a8:06:e5:83:95:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:C9:B0:21:E7:48:1D:86:E1:D7:D8:FF:7C:87:5E:18:F7:5A:8F
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f0:29:93:b5:35:13:76:69:4b:43:63:67:7d:67:20:44:82:
d6:37:76:73:cd:30:0d:84:59:ee:57:ed:73:cc:07:ef:bf:bc:
08:0e:94:5e:4c:f8:8a:a2:12:36:ce:8c:0a:41:4b:34:a2:ca:
a3:ac:7e:21:25:2d:85:73:4d:15:a8:ba:e9:18:48:a0:62:42:
59:08:60:0a:a3:35:d2:ba:b6:ba:6b:1e:f2:f8:4e:2a:1d:0d:
81:80:4a:f4:49:51:16:6a:4e:f4:da:76:75:c3:52:dd:72:24:
9a:ef:8e:a4:7c:f0:25:83:87:ba:d6:7b:00:b6:d1:73:33:12:
9d:bd:6d:95:ec:8e:bb:c8:43:f9:96:73:01:f3:34:ae:c5:37:
5c:78:da:59:ec:20:5e:8a:69:e2:07:1a:48:25:34:1f:e7:d2:
59:94:99:4f:b6:3f:b9:1d:87:52:20:16:ec:fb:4d:e5:19:65:
b0:95:0e:92:75:18:16:ec:9f:17:74:7e:08:69:35:18:b5:b2:
05:7a:60:44:02:f0:d6:74:a1:8e:e6:c5:f5:20:bf:41:77:98:
cd:3c:af:4b:08:70:87:7d:fc:37:af:27:3d:3b:ee:92:c7:d5:
ab:07:be:75:62:0a:42:a7:06:83:36:4e:a0:c2:45:60:18:69:
58:ba:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:31 2025 by rpki-client