Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/Igsn8_GzxEpyZvyNiTStn1VsWkE.roa
File: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (raw, json)
Hash identifier: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=
Subject key identifier: 22:0B:27:F3:F1:B3:C4:4A:72:66:FC:8D:89:34:AD:9F:55:6C:5A:41
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019427B5ED6ABA9BE27F3211525A45948E31
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/Igsn8_GzxEpyZvyNiTStn1VsWkE.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211967
IP address blocks: 46.229.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ed:6a:ba:9b:e2:7f:32:11:52:5a:45:94:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=220b27f3f1b3c44a7266fc8d8934ad9f556c5a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:cf:96:31:93:9d:f3:18:5f:61:40:d0:87:
80:56:4d:f0:17:8d:10:23:f7:29:24:18:9e:5a:39:
7b:1d:89:72:f3:62:6e:53:a6:38:eb:fe:60:66:ca:
68:50:b4:3a:c6:da:81:38:18:14:3c:ec:7f:02:b2:
6d:19:f1:aa:85:4f:12:78:77:7a:25:c5:fd:3c:77:
1e:18:cb:4d:5d:4a:f2:e5:92:7a:e8:e6:45:6b:a7:
6d:74:b7:ed:73:91:68:58:c6:76:b5:16:fa:80:eb:
34:53:af:f1:cf:a5:91:4b:71:aa:ec:b6:c1:37:49:
d9:01:27:d4:b8:02:53:6e:b0:f8:3d:e4:94:05:b1:
4c:b4:55:61:55:e8:ba:d7:ee:a5:b1:a1:e6:fa:dd:
90:57:4f:d1:20:a1:3b:38:a6:42:b8:c3:88:b8:f0:
77:63:8a:49:46:af:2c:ae:e0:8f:f3:8e:f1:e4:a0:
5b:bc:58:78:50:f7:d9:1e:61:3c:a8:51:3f:5c:17:
84:d5:be:0e:7a:b2:eb:58:04:e1:4d:21:28:81:ec:
1c:27:44:7a:dc:b0:79:87:aa:e8:a1:3f:ec:3c:80:
b2:3a:dc:7d:c7:97:78:62:f9:d5:d5:62:b3:45:7b:
2b:d5:14:2e:9a:7a:e4:63:1e:d4:69:82:20:8b:10:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:27:F3:F1:B3:C4:4A:72:66:FC:8D:89:34:AD:9F:55:6C:5A:41
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/Igsn8_GzxEpyZvyNiTStn1VsWkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.53.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:19:93:e4:3b:02:56:9c:73:8c:98:fb:06:d8:89:d8:b3:46:
86:17:2d:8a:cc:d1:3c:dc:a5:97:7d:b9:83:1d:2b:a7:d5:cf:
69:c0:b6:fa:18:6e:a1:ed:3e:15:51:25:0e:1a:06:ec:56:0b:
b1:18:ab:41:a6:51:f3:e2:7e:97:62:67:db:e3:35:dd:10:55:
04:f1:22:92:5f:bf:0b:90:09:45:52:19:34:c2:36:3f:27:67:
be:34:04:7e:9e:7c:2f:45:eb:f9:46:7d:41:db:7b:fa:75:4d:
1c:c7:b6:af:c0:0b:fa:1e:d9:d2:7c:44:6e:15:7e:ef:14:fb:
3f:42:30:91:59:9a:89:4f:3c:7e:da:d7:12:0b:5b:26:fe:3c:
14:7e:6e:b4:b9:df:4d:e7:ea:9e:1a:91:7b:86:1f:eb:f9:9c:
12:a6:64:7b:e8:06:53:46:34:1b:2c:41:71:0f:5d:9c:4d:4c:
e2:56:0c:8f:20:38:bb:be:51:85:d4:5b:25:93:69:f3:15:00:
12:a7:af:87:55:ef:b9:b0:e1:6d:3b:20:f1:05:ad:e7:5b:48:
df:1b:86:87:11:f6:94:1c:04:59:be:3f:ca:f4:06:a3:8a:2d:
81:f1:15:12:ae:c1:2a:63:3d:8e:21:ae:0d:e2:4d:cb:98:cd:
2b:20:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:03 2025 by rpki-client