Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/48qXzhq5G8TLJUQaZrHaiBad-Ic.roa
File: 48qXzhq5G8TLJUQaZrHaiBad-Ic.roa (raw, json)
Hash identifier: nV+K7WLxj6FkqJsHe9ovJOwnmTnajbqmSfmqwWH66og=
Subject key identifier: E3:CA:97:CE:1A:B9:1B:C4:CB:25:44:1A:66:B1:DA:88:16:9D:F8:87
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019446651CB0B20B5C8A3A9DC94EB558409B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/48qXzhq5G8TLJUQaZrHaiBad-Ic.roa
Signing time: Wed 08 Jan 2025 14:50:19 +0000
ROA not before: Wed 08 Jan 2025 14:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59878
IP address blocks: 91.132.48.0/24 maxlen: 24
188.208.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:65:1c:b0:b2:0b:5c:8a:3a:9d:c9:4e:b5:58:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 8 14:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ca97ce1ab91bc4cb25441a66b1da88169df887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:5b:9e:44:5a:dc:5a:a9:45:46:63:32:c5:
74:0d:ab:e1:d3:7c:d6:16:81:23:b3:69:0b:13:ef:
61:fc:39:fc:d1:65:f4:64:cc:f6:eb:d5:9a:95:ab:
0a:24:91:ad:11:9f:ef:5f:35:16:f5:97:f8:14:d8:
a4:0d:8d:a8:48:a7:87:1c:df:04:6e:b9:6e:a5:00:
a6:ba:8c:5c:8b:8f:2a:d2:2c:09:95:30:97:23:04:
30:fa:66:04:f4:29:2f:d3:ba:1c:d1:b0:d7:0e:e2:
e7:47:d8:78:d6:f8:3b:70:b4:ee:13:f7:44:0e:f7:
01:b4:c9:44:1e:b3:cd:ad:ac:7c:0e:01:0b:a1:dd:
23:ef:74:40:91:2d:74:1e:f7:91:ff:7e:af:22:41:
a0:03:99:c0:f8:6d:2c:75:c9:7f:ba:b4:ed:bc:bc:
ba:86:1b:eb:a5:41:4b:88:7b:57:e4:0a:1c:cd:ca:
c2:3a:f5:7f:83:e1:f8:00:f2:49:ae:c9:72:68:58:
d5:a3:f7:7d:77:76:11:ac:ed:11:ac:33:46:8d:d4:
4e:24:a7:89:19:c6:0c:85:52:52:d5:fc:26:db:90:
db:a8:53:2d:75:3f:14:b9:2d:44:bb:c6:6a:59:4a:
90:4c:1f:99:6d:33:7e:9a:c9:ae:d5:7f:e7:43:4c:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:97:CE:1A:B9:1B:C4:CB:25:44:1A:66:B1:DA:88:16:9D:F8:87
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/48qXzhq5G8TLJUQaZrHaiBad-Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.48.0/24
188.208.110.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ad:8d:ed:f2:8c:24:4e:73:ff:0b:1e:41:f1:98:fa:e8:40:
d7:89:75:33:17:cd:9f:92:a1:50:ed:62:f0:e4:eb:83:b2:2c:
c4:74:f2:3e:09:27:25:21:14:34:e9:2e:1c:83:d4:61:f8:f8:
8f:d7:ab:92:2a:fa:6e:e4:63:ab:9b:a3:ab:df:20:c1:5a:6d:
c8:7b:14:cd:7b:fa:f8:6d:14:5d:21:54:f0:a6:9b:fa:e1:18:
8c:82:ee:df:f4:3a:9c:9f:f4:91:81:bf:31:67:a9:26:12:61:
35:69:fe:a4:9a:8f:fd:4e:7c:d2:ca:8a:5a:d4:f4:f1:3c:25:
4b:82:e4:37:e1:5e:0f:64:f1:e4:10:9c:06:9c:69:68:b7:09:
7f:9e:a2:4c:06:b6:0c:4b:49:f0:06:0a:eb:1e:d2:ec:e7:9c:
67:31:2e:9e:ac:53:30:ce:18:d1:79:4c:36:c4:56:9c:c6:be:
1c:54:10:a4:4b:b8:e9:59:46:32:aa:21:0b:3e:e6:a9:82:08:
6a:f8:08:36:cb:3e:22:44:32:4f:b2:b4:d1:b7:d4:ed:1d:af:
bd:63:95:6d:da:3c:a6:99:61:42:f6:8f:0d:6f:db:bc:2b:49:
df:8a:b6:2a:46:31:36:0b:cb:92:d1:9f:29:3f:59:ba:28:3b:
55:13:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:04:02 2025 by rpki-client