Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6V6qd9qkWRfJOC_4t6ZHK-aPhOw.roa
File: 6V6qd9qkWRfJOC_4t6ZHK-aPhOw.roa (raw, json)
Hash identifier: FmNgApppHbVgdubsPFOwKDVm3X/vzGqCclS3ESh3oj4=
Subject key identifier: E9:5E:AA:77:DA:A4:59:17:C9:38:2F:F8:B7:A6:47:2B:E6:8F:84:EC
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CF21B759D296A92F097F10E3EF0A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6V6qd9qkWRfJOC_4t6ZHK-aPhOw.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202984
IP address blocks: 46.8.21.0/24 maxlen: 24
46.8.29.0/24 maxlen: 24
46.8.158.0/24 maxlen: 24
95.182.120.0/22 maxlen: 24
109.248.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cf:21:b7:59:d2:96:a9:2f:09:7f:10:e3:ef:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e95eaa77daa45917c9382ff8b7a6472be68f84ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:18:3e:a0:d7:36:7d:69:80:96:4d:ea:e2:
24:e4:fd:54:14:4b:ee:4e:05:7d:c0:36:45:0d:31:
c9:17:c2:31:a9:6c:ee:52:f5:a1:cf:7a:3e:3e:66:
29:11:94:c2:23:92:fb:1e:38:e1:3a:c2:1c:91:72:
74:84:fa:21:5e:2c:c6:dc:7a:16:64:9d:6c:b4:1b:
44:ff:9b:ad:11:a8:2b:bb:2e:aa:47:d1:7b:18:86:
4f:7d:64:41:4c:fd:a1:ad:de:72:6e:e7:b9:2f:e2:
95:a8:e9:29:e3:7b:64:ef:fa:de:a6:b7:4d:e6:44:
58:2e:0a:94:f7:34:4d:4e:03:ee:9f:c7:60:db:9f:
30:70:2d:68:fc:26:19:9e:13:b3:70:93:36:49:ca:
7b:5e:0d:5d:2e:88:9b:1c:d1:4e:33:35:bf:c7:ee:
47:e3:f3:9d:90:a4:6d:86:32:0f:5e:db:95:ae:57:
52:29:8c:c6:a3:3f:f2:68:7f:6a:49:57:5e:16:16:
2e:2a:5f:00:f2:ea:5b:9a:21:4e:28:0b:46:ae:19:
e5:92:f7:7e:1f:24:7b:a2:7a:c4:e8:ba:33:a6:14:
db:22:c4:c7:6b:e0:03:64:d4:97:1a:1d:40:97:bc:
81:57:8e:b9:da:c1:6f:b3:76:f0:9b:0d:c0:20:13:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5E:AA:77:DA:A4:59:17:C9:38:2F:F8:B7:A6:47:2B:E6:8F:84:EC
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6V6qd9qkWRfJOC_4t6ZHK-aPhOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.21.0/24
46.8.29.0/24
46.8.158.0/24
95.182.120.0/22
109.248.59.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f0:03:bd:7a:76:7a:6a:ed:1e:d9:be:5f:b3:36:59:89:e9:
e9:f2:66:1f:9c:07:c1:9f:18:bf:cb:93:f0:25:c1:9a:b1:19:
c1:af:d5:9f:ad:f0:8f:2c:b2:94:5c:7f:ff:3b:50:f5:ac:7c:
b1:6b:58:08:e1:c8:38:36:70:b4:2b:10:45:c5:19:d3:3b:54:
9b:c4:e3:a3:a0:02:f9:d9:88:8d:28:91:7e:40:e9:4a:b9:bb:
b2:07:58:a1:6e:bb:a9:63:9b:14:9e:a8:f8:b1:c2:d1:b0:8c:
52:5c:9b:f1:c5:2f:1c:00:20:2e:f0:2d:cb:d5:02:a0:9e:4e:
38:fb:80:84:e1:4f:28:38:56:53:f5:54:9f:77:d2:de:09:73:
51:c7:7d:9d:ce:99:87:1e:ff:8d:e2:bd:05:36:09:eb:cd:6c:
c3:f4:0e:33:90:16:31:49:32:ac:e2:f5:c1:ea:41:55:82:b5:
e5:73:96:01:d2:b2:b2:05:b4:74:ad:7a:71:5a:25:e7:b4:39:
85:02:70:08:a1:fa:08:92:7c:72:d0:09:d3:60:f7:02:3b:1f:
53:36:e7:e2:f3:cd:ff:3e:56:59:ea:79:9a:1a:43:6c:6b:78:
b8:57:4e:9d:fc:99:9f:74:19:e2:f4:ff:17:41:07:fe:73:12:
80:f7:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:00:28 2025 by rpki-client