Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/UzlLJhfSrUNJLRR4VAmgrw8pzGo.roa
File: UzlLJhfSrUNJLRR4VAmgrw8pzGo.roa (raw, json)
Hash identifier: 1t/jTZ5arlnYBIzjgbN6ZRsvi2Rgri7ens1cAuZZLW4=
Subject key identifier: 53:39:4B:26:17:D2:AD:43:49:2D:14:78:54:09:A0:AF:0F:29:CC:6A
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019425FCA29F1B97C3FE81252F64B1772572
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/UzlLJhfSrUNJLRR4VAmgrw8pzGo.roa
Signing time: Thu 02 Jan 2025 07:48:21 +0000
ROA not before: Thu 02 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197465
IP address blocks: 46.23.240.0/20 maxlen: 20
46.23.241.0/24 maxlen: 24
46.23.242.0/24 maxlen: 24
2a02:5000::/32 maxlen: 32
2a02:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a2:9f:1b:97:c3:fe:81:25:2f:64:b1:77:25:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Jan 2 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53394b2617d2ad43492d14785409a0af0f29cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:28:e8:0f:a7:e1:34:82:19:67:49:c8:18:
79:59:5c:e1:4c:8e:48:32:72:39:70:5a:58:8c:9b:
d1:8e:bf:31:1a:35:fc:46:de:3a:4c:94:e2:ac:3e:
ae:49:14:cd:52:15:01:0b:8a:31:16:32:72:2e:01:
0c:36:06:fd:86:95:7f:4d:46:9b:b2:b9:3d:05:7b:
46:f6:9a:48:26:a0:77:18:0f:43:7b:55:26:93:d7:
48:c6:75:cd:18:57:f2:e7:6b:a0:6a:81:de:06:8c:
5d:19:0b:71:44:4f:e5:5a:3e:d4:86:3c:df:bb:83:
07:2c:65:3b:2f:21:2b:f3:21:3c:e6:4b:dc:28:df:
47:fd:e9:42:d6:76:49:52:55:10:b6:17:ca:6f:31:
6f:64:00:d1:bd:6d:e6:67:11:7a:d1:18:b1:74:8d:
2f:f5:d7:53:9e:c0:f8:5a:94:6b:f5:db:d4:3f:0f:
c7:40:70:a3:d2:1c:c8:4a:f8:05:26:6a:0f:a3:87:
8d:2d:18:c2:5c:9a:6a:51:ff:cb:77:b7:7d:e4:34:
fd:6b:c2:aa:f1:65:d4:0c:a3:c2:16:a4:d2:cd:10:
8c:b8:48:e2:94:cc:01:76:86:75:fc:bd:42:49:24:
df:36:12:c7:52:70:b7:ba:85:15:cb:1a:d9:2c:5b:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:39:4B:26:17:D2:AD:43:49:2D:14:78:54:09:A0:AF:0F:29:CC:6A
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/UzlLJhfSrUNJLRR4VAmgrw8pzGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.240.0/20
IPv6:
2a02:5000::/32
Signature Algorithm: sha256WithRSAEncryption
62:e8:3a:37:dd:1e:ff:d5:9e:bb:f8:9f:e9:97:e7:ab:e1:55:
f3:89:a1:7e:32:33:21:fd:07:44:6f:00:fc:c5:6a:2b:b7:73:
55:1a:6c:e9:15:53:fa:8f:ea:89:c7:21:d5:4a:c3:dd:cb:c4:
39:cc:06:2f:65:29:3e:2e:58:44:cf:fe:f0:e0:55:a1:82:48:
3c:43:6a:8f:8f:c0:79:af:b1:00:72:30:e2:68:2d:61:ec:45:
13:a4:d2:85:f2:d7:79:74:08:31:ac:eb:0c:11:91:e3:3d:1f:
f9:27:29:8b:97:5b:95:75:4e:25:49:71:a7:0e:46:56:74:d4:
39:83:68:07:49:9e:5c:b7:83:32:a0:84:6e:60:de:13:13:7c:
e6:b2:b1:4c:bb:1f:b6:ee:8e:65:df:71:7c:8b:f8:71:25:ef:
84:41:16:f6:16:b3:93:51:a1:5e:ad:3b:5f:2e:e6:01:ae:d6:
b7:54:1b:07:f4:7a:01:c1:a0:ae:1a:a6:2d:ec:ba:67:26:a9:
6a:61:69:6c:6e:e3:5a:d7:3a:7f:6b:26:a3:13:0b:3a:39:b2:
fb:51:67:54:46:1f:82:c5:ce:5f:87:bc:cf:23:f6:c2:3e:2d:
35:0f:eb:70:ae:38:70:b0:58:19:a2:0c:8c:2e:f1:64:b9:16:
cf:41:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:09:02 2025 by rpki-client