Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/VO04moXAuIXDmP-FmAZqJ4sbq3E.roa
File: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (raw, json)
Hash identifier: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=
Subject key identifier: 54:ED:38:9A:85:C0:B8:85:C3:98:FF:85:98:06:6A:27:8B:1B:AB:71
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019427B5E9FBB2B5EB544DEEBA8D9BA30028
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/VO04moXAuIXDmP-FmAZqJ4sbq3E.roa
Signing time: Thu 02 Jan 2025 15:50:20 +0000
ROA not before: Thu 02 Jan 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204294
IP address blocks: 46.229.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e9:fb:b2:b5:eb:54:4d:ee:ba:8d:9b:a3:00:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ed389a85c0b885c398ff8598066a278b1bab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:75:88:de:be:96:0a:a4:f3:f5:21:d6:03:
27:53:8a:d2:d0:16:ba:03:d9:8f:49:e4:a7:2a:25:
e2:62:af:fc:b5:3f:23:e6:f8:53:ef:25:75:a1:33:
9f:85:b7:16:c3:5f:5e:61:f3:ed:31:96:84:db:35:
d3:15:6c:56:b9:17:8d:e4:8f:98:e3:3c:f2:ac:85:
25:57:54:11:b4:40:d2:20:55:7a:ac:2e:0f:4d:c5:
50:9a:56:2a:ca:92:3e:d8:a6:77:78:9c:c2:20:d2:
a3:fa:ea:ac:f5:46:d3:b6:ff:48:5b:56:0c:41:2c:
b4:3c:b3:30:27:63:d5:0e:80:ec:e9:05:df:34:7e:
5b:dd:89:4c:67:9b:c2:90:4a:41:71:e2:d1:6f:22:
12:28:5e:31:cc:ab:5e:99:4a:a6:fd:8a:62:c9:68:
c5:40:7d:8d:82:5a:f6:e4:e4:64:53:76:9a:57:4d:
78:83:80:ec:dc:05:83:7b:e8:75:2f:5a:08:99:43:
8a:97:0c:0a:88:a4:b2:2b:89:53:50:09:3b:0d:54:
a2:d8:40:b9:c3:13:e8:1b:b3:82:f5:a7:44:b4:a9:
e7:6d:bb:a1:88:24:d4:c8:24:e0:d0:5d:18:c4:86:
47:f2:0b:87:00:24:53:95:57:4b:35:eb:8c:be:01:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:38:9A:85:C0:B8:85:C3:98:FF:85:98:06:6A:27:8B:1B:AB:71
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/VO04moXAuIXDmP-FmAZqJ4sbq3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b8:98:dc:78:44:29:0b:07:62:d4:96:5a:0f:31:48:f3:fb:
2f:45:fd:ab:cd:78:00:70:06:a0:ed:32:53:43:75:00:c4:f7:
7c:fa:93:4b:1e:7c:b1:a2:26:8b:1d:2e:e8:2d:8f:d0:58:4e:
da:5b:53:a0:4b:1a:76:46:4a:3f:0a:99:a4:b9:41:97:80:a6:
f0:55:5b:85:8c:5f:9e:92:7e:87:7d:af:f2:c6:2c:9b:03:b2:
7a:b3:f8:88:dc:99:de:86:86:d4:20:2c:a8:3b:3f:6a:a2:62:
82:56:26:42:fb:b2:b6:30:75:b0:a0:77:91:1e:3d:cc:9b:54:
96:82:2f:e3:65:ee:b5:d8:e9:77:3b:df:82:57:53:69:e4:03:
71:4b:71:f3:30:1d:43:08:bb:01:c8:8d:aa:d2:fb:88:b6:cf:
f3:4c:20:ec:92:32:4c:37:73:cd:e2:e0:32:d1:aa:03:f9:f7:
95:f4:61:ef:dd:34:08:47:8d:f1:1e:c4:d5:cd:44:01:eb:7a:
c2:e1:2c:4c:a7:35:2f:fb:50:fc:d5:1f:09:5d:9a:10:34:54:
08:37:f9:c7:fe:bd:c7:37:55:11:3d:0e:ca:80:e9:ef:7d:0c:
74:0d:97:00:78:e2:cf:8b:71:e4:79:e1:c9:f8:64:7a:ce:64:
91:7c:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:21 2025 by rpki-client