Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/s-O-Xa-PER85Kd80a5vFRTOSotY.roa
File: s-O-Xa-PER85Kd80a5vFRTOSotY.roa (raw, json)
Hash identifier: NuukypAt6COI1RdeaDQm8oQpwDKeNhmg7D2Gj0Rrwxo=
Subject key identifier: B3:E3:BE:5D:AF:8F:11:1F:39:29:DF:34:6B:9B:C5:45:33:92:A2:D6
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019451101176FCAFC5A35A141EA3E537E3B1
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/s-O-Xa-PER85Kd80a5vFRTOSotY.roa
Signing time: Fri 10 Jan 2025 16:33:15 +0000
ROA not before: Fri 10 Jan 2025 16:33:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:51:10:11:76:fc:af:c5:a3:5a:14:1e:a3:e5:37:e3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 10 16:33:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3e3be5daf8f111f3929df346b9bc5453392a2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:ce:e4:b7:4a:e3:71:16:72:00:38:ca:ef:
d3:74:8d:4b:6e:6c:85:cb:b5:e6:75:73:42:96:4d:
b2:d2:8a:ea:bf:3c:dd:7b:41:0a:ff:e2:89:e4:4f:
37:87:61:da:b0:0d:57:e0:dd:37:13:11:0a:88:ae:
b9:e3:15:67:b0:6f:37:5f:cf:ad:fb:4d:eb:cd:72:
16:10:cf:48:be:07:02:6f:cc:47:ce:52:2d:af:71:
af:3b:b2:52:c1:7e:be:66:1d:aa:a4:12:f7:2d:b8:
4f:d5:04:ba:69:aa:88:5b:24:54:86:a5:d9:62:72:
6d:fb:1c:a9:87:3c:99:74:8d:04:ae:7d:d9:38:6a:
be:a2:eb:d9:78:6b:b6:7c:43:94:e7:cb:52:35:18:
9d:07:cf:da:59:a9:b0:18:6d:3c:e8:17:7d:c3:0f:
5c:bc:dc:e9:41:4e:c1:d6:a1:59:32:e4:0d:10:7c:
cc:d4:20:4b:75:bd:34:26:fa:21:73:a6:fc:21:80:
14:29:6c:f1:65:d6:0c:57:0a:80:5f:83:df:27:cf:
60:00:34:ee:5e:31:b4:70:e8:59:ca:7b:3d:d3:0f:
b4:a3:81:d6:00:73:cc:68:92:f5:8a:be:a3:e4:88:
cb:e7:87:cd:f7:69:aa:7c:e1:e4:8d:f7:35:dd:3b:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:BE:5D:AF:8F:11:1F:39:29:DF:34:6B:9B:C5:45:33:92:A2:D6
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/s-O-Xa-PER85Kd80a5vFRTOSotY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.103.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
9a:a7:72:e2:e2:45:20:cc:89:f1:e2:8f:14:f8:88:26:8f:5a:
b7:c0:1e:85:59:49:7e:a6:69:03:6f:2e:74:5f:d9:0f:e4:71:
cc:20:7f:7b:4a:15:33:76:ec:fb:d0:35:77:cd:99:6d:89:51:
64:64:ae:1d:6b:48:09:6a:ed:cc:5b:07:7c:55:8b:6b:28:15:
c2:11:af:e6:6e:70:d4:a4:ad:d6:35:e0:d7:a3:21:8b:a6:0c:
04:94:53:db:72:31:20:e2:c5:b1:73:6f:ca:d1:22:6f:29:2b:
ee:b3:ca:30:25:3d:0e:38:c2:a2:96:f7:2e:d1:d5:69:14:da:
b5:78:3d:cc:63:43:10:34:b0:c4:18:45:58:89:ff:75:79:6b:
b7:a4:e6:ea:7f:38:8d:55:7a:91:93:d7:7b:51:5f:86:e1:f4:
40:74:44:7b:37:0b:e6:d7:8b:fc:f8:b3:b5:9f:c2:fd:27:72:
30:c4:5f:08:38:c8:2f:cd:19:d5:91:ff:2f:ab:c5:11:d8:d3:
f8:cf:40:cf:90:76:62:e6:73:f0:35:70:26:03:31:13:af:3a:
5d:7f:9b:e0:b2:b6:21:be:90:2d:fa:15:04:21:e4:54:09:ff:
57:35:4a:fd:2a:06:98:d7:ab:06:a2:2c:5f:5a:02:ad:d2:f4:
72:3b:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:49 2025 by rpki-client