Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/ho0kqJfEMlf2sbVibqdADBrNulw.roa
File: ho0kqJfEMlf2sbVibqdADBrNulw.roa (raw, json)
Hash identifier: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=
Subject key identifier: 86:8D:24:A8:97:C4:32:57:F6:B1:B5:62:6E:A7:40:0C:1A:CD:BA:5C
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 019427B41528E6D275CEEFA9CEB2E22A2F5E
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/ho0kqJfEMlf2sbVibqdADBrNulw.roa
Signing time: Thu 02 Jan 2025 15:48:20 +0000
ROA not before: Thu 02 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 46.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:15:28:e6:d2:75:ce:ef:a9:ce:b2:e2:2a:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 2 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=868d24a897c43257f6b1b5626ea7400c1acdba5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:c2:ed:58:f3:a8:d9:12:ae:cb:2a:ac:76:
2f:05:eb:1e:4c:84:29:9e:2f:30:36:a4:17:2f:c6:
05:ea:09:d0:53:d5:a1:37:3b:db:fa:fc:b1:ef:bc:
a9:9d:ca:06:7c:bf:a4:a9:58:fc:d8:04:42:cc:e3:
61:8b:d8:4b:84:63:84:92:e2:e4:97:31:ae:28:4e:
7d:dc:97:a1:52:b5:e3:ac:d0:40:ee:73:0a:be:6c:
94:5c:20:74:05:71:2b:2f:5c:2a:63:8c:d2:a7:84:
e7:50:39:e0:df:3e:42:7b:03:e0:62:5a:e2:de:35:
84:57:c2:e9:da:0f:28:5e:9a:3c:08:2f:61:fa:68:
d7:ee:47:3f:3c:0a:92:9d:69:5d:24:7d:25:60:10:
69:5f:55:7b:93:52:6a:f4:34:5b:78:0f:bc:ca:66:
ae:0c:a0:4c:5a:51:a5:25:c1:f6:d7:9e:0b:4f:0f:
7e:a1:49:44:73:c9:c5:18:3a:76:31:8d:36:74:7c:
c8:2b:e6:ef:f1:d0:55:83:b1:d8:80:16:3c:e8:e1:
e0:67:19:46:20:9a:89:26:0f:6c:91:d0:a5:87:30:
08:36:e6:76:1d:cd:54:04:6d:db:d6:9c:35:35:8b:
b0:87:eb:b7:81:f2:7f:c5:1d:2a:f3:e8:49:c4:2b:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8D:24:A8:97:C4:32:57:F6:B1:B5:62:6E:A7:40:0C:1A:CD:BA:5C
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/ho0kqJfEMlf2sbVibqdADBrNulw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.134.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7e:d8:fa:cd:35:f8:3e:28:a5:5e:5a:1d:83:6c:d2:ad:fa:
4e:c4:5e:eb:ec:26:d4:3b:c8:4a:41:fe:1e:c0:cd:54:23:67:
81:de:ad:5a:ee:5c:b5:e3:9f:4f:5a:4d:9b:fc:12:67:00:ac:
d7:f0:25:a1:87:fc:6a:b3:19:ab:f5:47:a9:34:5d:cf:d6:8d:
a4:8d:48:49:46:29:4f:53:1b:1c:12:42:07:78:c9:25:25:d5:
cb:d8:21:06:b6:5d:14:96:be:ee:6f:e3:36:0a:70:ab:b1:aa:
a0:8d:c9:38:b7:dd:2d:32:4b:af:f8:48:89:ab:0e:86:a1:27:
67:dd:98:b7:79:23:71:51:34:41:40:82:85:52:0f:ae:6c:a0:
28:c6:f8:44:18:35:e6:75:73:7e:f1:bc:53:54:58:86:cc:86:
50:05:d9:7c:30:7d:5c:7b:e1:f2:b3:ad:e2:93:9b:0c:29:9c:
65:d5:73:9c:05:db:cb:17:8f:41:d0:29:b4:44:64:8e:e7:2d:
f4:24:73:2a:1e:24:0b:77:f0:7d:93:95:bd:74:00:4a:7f:09:
19:d1:ae:e9:79:8e:64:96:82:85:60:2a:66:e7:67:70:d0:c4:
bd:1c:56:c7:5c:5f:69:03:b5:85:b3:18:e4:ff:7e:8a:81:e1:
65:e0:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:04 2025 by rpki-client