Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa
File: 4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa (raw, json)
Hash identifier: /Y71/tOsnj44V3PPOqV8jyNAecsoDys+kyFhb/Na/TY=
Subject key identifier: E0:AC:7E:BC:7B:96:1A:27:32:17:74:8C:AD:0E:CA:4A:CE:32:35:D3
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 019424B38450D9402BA5CF1AE928776F0AAA
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51788
IP address blocks: 46.143.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:84:50:d9:40:2b:a5:cf:1a:e9:28:77:6f:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0ac7ebc7b961a273217748cad0eca4ace3235d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:92:f7:61:ba:87:b6:54:1d:49:8f:c2:23:
42:1d:0b:23:2b:f7:ec:43:75:23:e3:6a:26:72:b9:
08:b1:2a:e1:c5:6a:f6:57:af:97:96:de:7c:e3:24:
bb:4e:68:70:ac:6a:65:fe:23:44:9d:b8:b2:93:c5:
d0:06:b1:bf:5d:bc:24:6b:06:1b:c9:12:d7:05:80:
32:00:fa:ca:fd:4b:31:1d:30:fe:e7:b8:58:81:11:
4d:ff:d9:08:e7:5f:97:35:3d:ee:27:87:72:b3:bf:
b3:f9:45:87:79:0e:19:52:2e:cf:aa:5e:3b:3c:ea:
a6:79:80:b8:63:82:7f:38:a7:77:4f:24:9f:b8:1f:
a6:09:a1:15:2d:e9:9d:7d:4e:8b:ea:d9:31:18:32:
b2:3c:8a:4a:73:8e:7c:df:86:50:ad:d1:2e:8b:0d:
7d:08:04:84:dc:f9:7c:57:f8:df:23:58:6e:8b:b6:
6e:dd:62:17:7d:5a:22:35:cf:1b:aa:72:9f:7c:21:
b2:14:1c:05:f7:3d:6a:36:af:ba:5d:d2:ab:92:2e:
73:0e:b1:89:45:58:74:31:f1:68:81:50:63:aa:c7:
b1:41:3a:ae:8c:e5:69:84:09:2a:fc:23:64:df:04:
28:d9:aa:c0:1d:2e:6e:64:ad:34:23:97:e6:16:1d:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AC:7E:BC:7B:96:1A:27:32:17:74:8C:AD:0E:CA:4A:CE:32:35:D3
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e8:05:10:53:49:16:cb:d8:b5:b4:03:d4:a5:de:5f:65:91:
b7:37:66:6d:af:29:ae:2d:c8:d3:d6:5e:8a:03:e6:ff:0b:96:
b0:30:5d:cd:c0:70:2e:4c:4b:0a:89:cc:41:6f:45:75:da:cc:
a8:13:36:d3:c6:c0:79:85:f6:29:f1:7e:a0:15:11:85:f9:7b:
dd:32:93:ac:c8:b3:f3:18:76:16:f5:e2:05:92:6f:e5:0c:b7:
72:91:b5:c1:90:92:0b:f0:27:35:14:10:7c:d6:58:8f:31:a2:
97:c8:80:b6:6c:07:07:30:27:ef:b2:09:ed:f4:90:50:f4:6d:
14:bc:93:27:4b:ef:af:c7:03:25:39:2a:a6:1d:94:2c:73:6c:
8d:dc:1c:9d:59:3b:02:6c:a4:71:80:12:17:b8:37:72:aa:0d:
65:df:95:c0:98:d5:35:75:53:e9:22:39:5f:b6:ce:86:00:6c:
6e:68:e2:00:3d:44:1d:9e:8d:d1:ac:7f:ca:cc:f3:b5:93:93:
9c:9a:93:3e:4e:6d:43:51:87:8e:52:ba:90:1e:1f:c0:2a:ac:
17:cb:e9:9b:22:23:47:66:e5:b7:2e:6e:d7:9d:49:d5:77:05:
65:75:25:92:08:5b:7e:01:2b:fb:59:dc:71:53:2e:81:51:77:
bd:90:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 01:25:49 2025 by rpki-client