Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/_ERs_WqsyKBsbDNrpF7678MzuE8.roa
File: _ERs_WqsyKBsbDNrpF7678MzuE8.roa (raw, json)
Hash identifier: x/e8FoqvrkwlrxEHgqowJDwm2nzTqRfGs9L2jLZX1F0=
Subject key identifier: FC:44:6C:FD:6A:AC:C8:A0:6C:6C:33:6B:A4:5E:FA:EF:C3:33:B8:4F
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 019424B38716C39F302E63D6A94B212E2EAC
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/_ERs_WqsyKBsbDNrpF7678MzuE8.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61248
IP address blocks: 46.143.212.0/22 maxlen: 22
46.143.248.0/22 maxlen: 22
185.84.220.0/23 maxlen: 23
185.84.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:87:16:c3:9f:30:2e:63:d6:a9:4b:21:2e:2e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc446cfd6aacc8a06c6c336ba45efaefc333b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:8f:0a:7f:95:d8:90:b2:76:ee:83:3a:25:
00:e2:3d:07:ae:28:6b:1c:49:f2:63:37:ce:92:f0:
2b:05:80:69:a0:86:45:4e:84:a5:4b:00:65:50:78:
2b:fb:85:3c:f4:12:68:34:55:3c:af:1f:6e:85:20:
21:e9:c2:d2:90:5d:fd:12:ff:2d:42:bf:39:fa:a8:
e8:84:d5:40:83:a9:f1:0c:9f:2a:dd:74:64:50:a3:
50:e9:43:c1:af:b8:87:2c:0b:29:b9:b4:dc:75:f8:
ec:0e:83:66:13:3e:c7:e5:b8:30:c5:fb:d3:93:9c:
9f:47:71:3e:8c:f1:7f:b5:b0:69:8a:6e:cb:85:65:
e6:66:84:9b:60:4c:dc:fc:0d:4d:2f:b1:6a:60:11:
87:21:7c:59:02:ac:99:b8:5f:5c:b2:e4:dc:4a:20:
ce:32:fb:68:ad:8b:74:39:cb:c1:c1:74:94:37:17:
4f:7c:34:1b:ee:07:d3:62:5a:43:94:43:00:07:8a:
09:9b:98:c8:04:63:cc:ef:1e:00:d0:9b:c5:6f:e4:
35:46:0d:da:29:1f:d2:ee:0f:4d:f5:12:72:cb:9b:
46:78:69:a8:6d:76:a8:eb:b7:8d:ed:86:75:15:c4:
e2:7e:40:eb:5c:03:08:95:bd:6b:17:5e:f5:b2:8b:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:6C:FD:6A:AC:C8:A0:6C:6C:33:6B:A4:5E:FA:EF:C3:33:B8:4F
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/_ERs_WqsyKBsbDNrpF7678MzuE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.212.0/22
46.143.248.0/22
185.84.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:7e:38:3d:f0:48:99:3e:83:51:b3:bb:f1:7c:2c:94:58:b8:
e6:5e:66:92:3f:3e:6a:3f:10:83:30:51:a8:5a:6b:47:38:2c:
40:f0:d6:4e:6e:30:2a:ae:c4:ff:a3:85:d6:ec:aa:82:91:16:
7c:2e:f3:c6:ba:97:4f:2a:a3:eb:28:48:d5:50:80:1c:62:f1:
54:65:3c:6c:5a:fd:c8:62:44:3a:c4:c7:12:97:2e:c4:51:ce:
f2:29:22:38:bc:9f:dc:85:d5:a2:2b:ff:a1:bb:15:00:6f:38:
bc:de:5b:37:7b:6f:45:00:4b:da:71:34:b6:90:22:ff:11:aa:
bf:32:12:c8:57:e0:49:80:df:4a:d0:97:07:05:ab:12:10:c2:
e3:58:b7:47:72:52:ed:ea:8c:41:ba:e0:4a:bf:c6:9d:8f:30:
61:8b:0a:be:8e:f6:99:51:b5:d8:44:be:0c:8f:e4:08:6f:21:
3c:9a:19:d8:c6:c6:2a:e8:1d:11:4b:d5:df:3d:3c:dd:13:ba:
9f:ac:01:c0:9d:3e:be:8a:5b:ee:ba:13:90:6b:3a:66:9f:40:
e3:12:22:c8:f1:a2:d3:8e:c8:f6:d6:ab:59:a8:cd:4c:55:da:
77:88:6d:97:3a:d1:cb:fd:10:20:37:31:81:61:86:77:e7:2a:
7c:89:34:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:38:46 2025 by rpki-client