Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/EVfs3Ty5us2kONM9lNbKxeOpQy4.roa
File: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (raw, json)
Hash identifier: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=
Subject key identifier: 11:57:EC:DD:3C:B9:BA:CD:A4:38:D3:3D:94:D6:CA:C5:E3:A9:43:2E
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 019425FDD3FC7926DA7EB7B7FBF4A4EB7E75
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/EVfs3Ty5us2kONM9lNbKxeOpQy4.roa
Signing time: Thu 02 Jan 2025 07:49:39 +0000
ROA not before: Thu 02 Jan 2025 07:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216200
IP address blocks: 46.255.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d3:fc:79:26:da:7e:b7:b7:fb:f4:a4:eb:7e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Jan 2 07:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1157ecdd3cb9bacda438d33d94d6cac5e3a9432e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:0f:23:00:92:02:e3:77:41:49:f2:22:ad:
a0:d3:ec:8b:06:85:0b:f1:95:a1:88:52:e9:f6:2d:
62:c3:58:17:49:20:bb:c8:ca:88:8e:63:d8:b3:86:
92:19:19:19:88:1a:42:04:4f:5a:91:3b:65:73:1e:
55:90:c3:67:31:6f:b4:c6:3e:b4:ed:0f:84:67:51:
30:cb:1a:36:89:d5:f1:a8:18:d2:37:35:87:d3:2e:
e6:3d:af:e9:16:44:89:75:ac:46:b7:66:3e:81:09:
db:6a:77:ac:9c:12:18:43:7b:de:9f:55:aa:02:2f:
e5:0c:a6:05:37:b6:d6:3d:32:e5:35:9a:00:de:b1:
af:8c:8c:4f:ff:dd:ff:ba:bb:a2:59:a2:d2:cd:84:
a6:bc:2e:4c:0f:05:a7:38:96:50:01:dd:89:87:31:
e5:a4:81:3c:de:cc:49:c0:c7:b5:b9:c6:c0:6d:a3:
9f:21:27:da:ad:02:aa:84:17:6e:f9:09:23:2e:ba:
c0:7f:1b:9b:38:2b:16:00:28:14:d8:54:9d:ec:61:
ba:4d:9e:67:81:24:56:91:f3:86:9e:56:b9:12:e2:
ca:51:4f:a8:11:71:f3:c4:0c:16:08:7f:42:8d:4d:
1b:fd:48:34:4a:11:23:97:19:aa:b0:cf:3c:a1:a1:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:EC:DD:3C:B9:BA:CD:A4:38:D3:3D:94:D6:CA:C5:E3:A9:43:2E
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/EVfs3Ty5us2kONM9lNbKxeOpQy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:88:9c:da:4c:2d:a7:74:f5:c2:51:dc:a6:96:8a:f0:68:49:
f9:02:fb:a1:6b:02:8f:0b:e1:58:26:c9:c0:f2:82:bc:be:17:
23:a4:9c:1a:10:96:5f:10:44:96:c3:87:38:e5:d2:68:64:5a:
5e:a7:b9:59:54:ca:03:36:16:18:e0:bf:df:53:f8:82:59:3d:
5b:29:7d:ff:25:4c:f0:08:94:92:ef:1d:df:61:06:91:c7:55:
14:e7:2c:fa:ab:de:9c:4a:52:98:81:ef:c4:4b:06:c1:16:d4:
21:d7:8e:b8:4a:16:84:93:ad:f9:68:9e:86:14:e6:5c:e1:e0:
70:4b:0d:01:7d:13:7c:c0:ef:bd:bf:91:60:4d:73:95:b8:6d:
81:07:1b:39:3d:1f:7d:ff:5c:e4:d1:9d:b9:a7:a5:01:b4:6c:
2d:85:44:96:7d:06:f1:e4:f0:92:fd:ed:cd:9b:80:c9:4c:f7:
16:42:e8:dd:88:65:bb:d8:fe:03:72:d2:72:98:94:7e:dc:0a:
ff:b4:f4:0c:c1:80:7b:98:7c:41:7c:1d:7c:82:e0:4c:06:b7:
f1:95:18:14:4a:9a:a9:82:2d:6e:8f:3f:96:da:a4:07:ce:9d:
95:71:4d:d9:d5:b1:20:e6:8c:cf:dc:c2:e8:49:31:80:fe:b8:
84:61:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:39 2025 by rpki-client