Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa
File: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (raw, json)
Hash identifier: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=
Subject key identifier: 34:A1:26:73:51:A6:FC:D4:03:EC:24:FA:0A:7D:70:E2:37:68:06:15
Certificate issuer: /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial: 019421B19238429CD76AA47C8B1716168805
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56404
IP address blocks: 46.175.160.0/24 maxlen: 24
46.175.161.0/24 maxlen: 24
46.175.162.0/24 maxlen: 24
46.175.163.0/24 maxlen: 24
46.175.164.0/24 maxlen: 24
46.175.165.0/24 maxlen: 24
46.175.166.0/24 maxlen: 24
46.175.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:92:38:42:9c:d7:6a:a4:7c:8b:17:16:16:88:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34a1267351a6fcd403ec24fa0a7d70e237680615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:fa:7d:e2:c8:90:eb:f6:f0:8f:d5:0f:75:
2a:0d:60:fb:88:2c:90:90:1c:2f:82:f4:96:7a:f1:
be:1e:26:8a:01:45:f7:d8:cb:41:25:2e:2a:48:e2:
04:69:93:d8:e3:59:81:91:5e:1d:3a:78:e6:07:80:
6d:00:7f:3d:24:48:dc:8f:fc:16:5b:96:8f:32:cf:
19:79:60:8d:0f:e6:8d:8a:d4:df:43:ee:52:7e:a6:
41:87:d8:17:02:02:6f:e1:24:72:c7:c1:cf:f9:5d:
ce:87:d6:4c:1a:ba:4c:82:74:e1:37:5b:9b:be:ee:
e2:29:1b:39:7c:6e:5a:63:b8:11:4f:7c:1f:2b:e5:
79:27:40:e9:08:44:29:62:8f:c0:c0:35:26:d3:1e:
50:3e:b1:f8:ab:28:cd:e3:f3:a6:4a:df:dc:c2:31:
83:24:8e:3d:5b:72:d4:ae:82:4b:64:5b:85:0c:ca:
d3:95:bc:4b:eb:ff:1e:63:e2:4c:ae:65:ae:f3:f8:
14:31:64:f1:b2:05:4f:5c:2c:87:3a:a3:a4:7f:30:
5a:e3:aa:d7:cf:a3:d4:aa:e6:b1:c6:51:09:fa:b9:
c4:93:d9:31:f0:13:ee:8f:7b:f2:4e:bd:08:58:28:
a7:22:6e:60:bd:dc:f7:77:1d:e2:b0:2a:5c:cc:2a:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:26:73:51:A6:FC:D4:03:EC:24:FA:0A:7D:70:E2:37:68:06:15
X509v3 Authority Key Identifier:
keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.160.0/21
Signature Algorithm: sha256WithRSAEncryption
41:61:d3:b1:e8:d0:65:e7:1d:e2:d6:f0:57:26:02:78:17:35:
18:35:10:43:36:3f:e2:c9:0d:14:2a:6c:35:1b:b8:f6:09:f1:
51:a2:9f:16:11:2a:8f:55:75:01:17:c9:1c:09:5e:a3:4a:94:
59:05:f5:28:05:53:1c:9c:df:a6:87:61:5f:ab:10:af:ab:05:
db:16:d3:9a:e5:a3:31:bb:61:c6:09:dd:ea:47:2d:36:dc:ef:
a7:29:d2:b5:45:cc:64:d2:7d:a5:86:1c:32:2d:02:8b:34:41:
2e:75:23:a8:c1:e1:b9:86:09:b5:79:25:71:8b:27:7e:9c:0d:
9e:49:47:f5:43:ab:7d:78:e3:2b:25:a0:d7:f3:38:45:e9:dc:
1e:93:53:93:4b:4f:17:bc:b9:fd:02:2b:10:d8:33:89:48:3c:
7b:c1:8c:8f:ed:e3:b5:5c:1a:d1:a5:2f:d5:73:4e:e2:fa:ce:
a4:87:29:bf:72:c7:4a:03:36:55:e6:fd:f6:9b:e6:6a:e4:34:
62:05:22:e8:2d:d1:db:05:38:26:fe:33:21:7c:6c:59:a8:58:
ba:76:68:12:c6:12:5d:bf:de:3f:59:27:8d:8e:28:d8:d3:c8:
17:22:04:c8:c5:aa:21:26:64:2f:ba:8b:68:eb:74:c8:72:47:
ba:f9:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:35 2025 by rpki-client