Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa
File: QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa (raw, json)
Hash identifier: YrxsXgfls6BVbz+S7KqunX1/zH0o4Orz7g8fkYHg2uk=
Subject key identifier: 41:FA:D1:0B:26:C3:A8:59:BB:C5:14:3D:2A:35:33:E8:12:33:28:4D
Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial: 01941FFA9811FA26F51F96FC565C38EC83FE
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197503
IP address blocks: 46.149.144.0/20 maxlen: 20
46.149.146.0/23 maxlen: 23
46.149.148.0/23 maxlen: 23
46.149.150.0/23 maxlen: 23
46.149.152.0/23 maxlen: 23
46.149.154.0/23 maxlen: 23
46.149.156.0/23 maxlen: 23
46.149.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:98:11:fa:26:f5:1f:96:fc:56:5c:38:ec:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41fad10b26c3a859bbc5143d2a3533e81233284d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:6e:65:01:be:56:8e:9f:5c:38:79:67:6c:
8b:68:93:e6:91:66:45:17:11:2b:4d:00:4d:b4:74:
3d:66:cb:97:c5:d4:dd:7b:aa:73:aa:ec:9e:c3:01:
eb:cd:16:4f:10:69:75:fb:23:93:cc:b7:5a:4c:bd:
d3:97:f9:a3:98:c1:a4:1c:f2:1d:79:35:8d:fb:fc:
3d:3c:2c:9b:51:7c:1d:ff:4e:df:f2:60:65:14:b1:
2e:87:cd:dc:0d:f4:17:35:3b:b3:f8:24:2f:63:34:
18:94:34:bf:e9:e9:2a:ca:70:b8:a2:f8:b5:66:73:
fb:e6:d2:75:59:e8:d0:18:05:a8:c6:49:bb:ce:31:
0c:07:e2:06:83:24:0b:43:a4:b5:3d:f1:8d:a7:18:
08:96:26:bc:f2:22:e3:b1:6f:8d:ab:70:4b:72:e7:
d2:26:46:ee:ff:a3:0d:fa:84:a9:0e:8e:fe:41:f4:
b3:5c:b3:68:43:5f:f3:78:fa:a4:d0:7b:d5:3b:2d:
e8:1d:30:93:8d:d4:10:37:fc:50:12:cc:7f:c0:35:
af:59:b5:c9:d9:0e:52:72:71:fd:11:b0:31:b3:53:
ce:e5:77:77:15:29:a6:28:a6:47:63:11:a1:11:e2:
3d:57:1f:3a:90:0c:2d:35:52:7f:8b:75:3b:87:ac:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FA:D1:0B:26:C3:A8:59:BB:C5:14:3D:2A:35:33:E8:12:33:28:4D
X509v3 Authority Key Identifier:
keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.144.0/20
Signature Algorithm: sha256WithRSAEncryption
23:92:1a:1e:0a:42:f3:99:06:22:2e:28:27:e0:d6:1b:b7:7e:
46:b8:b1:99:a6:0e:80:46:f9:e2:2b:7e:84:09:12:8c:0e:38:
6e:4d:cc:e8:c5:b3:90:4c:07:ee:6b:15:47:e2:6a:21:89:15:
73:f3:e2:6e:11:22:cb:67:0d:db:d0:d1:78:2c:08:81:c0:e7:
b1:da:0b:52:f8:f5:3c:64:3c:7c:92:2a:46:f6:94:76:10:46:
31:6f:64:e6:e0:d7:5e:05:42:d6:2b:36:d5:a9:99:6d:3d:de:
8f:9b:1f:0f:0d:be:31:0c:67:c0:1a:70:af:3e:0d:5b:7f:91:
2a:ff:44:51:cd:e1:e0:0c:d4:23:50:ac:a6:57:b7:ca:1d:a9:
74:72:9e:29:3e:8f:e3:b8:4f:58:42:45:06:76:55:d5:fa:e1:
f3:2e:6f:53:95:e2:31:97:51:2d:56:af:2b:d1:8b:8d:a1:bd:
26:01:9a:2b:30:5d:32:fa:7b:0b:fd:8b:13:b9:3b:a3:ae:1a:
ce:d3:d8:a0:80:17:99:e9:52:b0:ff:00:c4:3f:44:02:ac:0f:
a1:bb:8e:67:7b:85:50:2c:2f:98:5e:07:7a:65:d3:fe:4d:f9:
3a:bc:67:29:38:86:a3:8c:2f:fd:de:38:31:07:31:3f:1b:67:
f4:05:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:22 2025 by rpki-client