Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/SinlQ5z34pUrW8vj7b8roBMhucc.roa
File: SinlQ5z34pUrW8vj7b8roBMhucc.roa (raw, json)
Hash identifier: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=
Subject key identifier: 4A:29:E5:43:9C:F7:E2:95:2B:5B:CB:E3:ED:BF:2B:A0:13:21:B9:C7
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 0194221FE33889893358FB71A86F63AC9A47
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/SinlQ5z34pUrW8vj7b8roBMhucc.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8943
IP address blocks: 46.255.72.0/21 maxlen: 21
46.255.72.0/22 maxlen: 22
2a00:a400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e3:38:89:89:33:58:fb:71:a8:6f:63:ac:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a29e5439cf7e2952b5bcbe3edbf2ba01321b9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:0b:77:63:bb:8f:ae:ec:f9:cb:ee:0e:f9:
8b:d0:8b:1f:2e:6e:a6:25:78:90:df:4a:57:ef:1b:
3c:cb:fa:46:4c:f4:01:ae:b7:96:88:6c:78:ef:63:
a4:7a:48:eb:95:56:cf:f4:ab:81:8b:59:d5:03:6a:
58:01:12:56:63:3a:e2:12:f6:00:05:5b:8c:1f:c0:
5b:03:12:a5:49:b2:9a:4c:24:9c:95:6c:16:d4:59:
ba:61:ea:5e:67:c3:db:90:8f:57:0e:23:3e:84:c0:
2a:37:09:43:c0:7f:03:84:17:39:d4:e8:40:13:42:
6b:26:ba:2e:87:60:a1:21:c5:0c:4a:4c:f4:ef:f1:
2a:78:e5:45:2d:05:22:2e:f8:c0:f3:57:e6:37:5b:
f5:5c:24:89:ee:7d:e2:17:64:ab:28:55:2b:a5:d0:
fc:1a:90:b1:6a:8c:76:7e:41:a1:a2:3e:6e:98:cc:
f4:74:d3:ff:18:c7:8f:cc:4f:a3:44:fa:64:15:0b:
6f:6d:7f:af:02:16:6b:82:53:bb:0e:19:38:07:8b:
75:7c:10:4f:2f:2d:6c:c3:b0:ef:7a:2e:cc:0b:4e:
46:4b:71:da:c6:da:44:1f:1a:88:f3:62:a2:a0:e5:
2b:62:8a:94:36:c6:72:75:1c:58:61:5d:0d:c1:50:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:E5:43:9C:F7:E2:95:2B:5B:CB:E3:ED:BF:2B:A0:13:21:B9:C7
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/SinlQ5z34pUrW8vj7b8roBMhucc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.72.0/21
IPv6:
2a00:a400::/32
Signature Algorithm: sha256WithRSAEncryption
38:3b:e9:66:59:1d:e5:ec:c8:b8:2b:aa:03:59:67:ce:4b:5c:
24:86:5b:92:a4:0e:4a:9e:f7:ba:f0:9d:20:a9:94:91:2c:59:
03:4c:29:03:4d:ac:c0:33:98:ae:0c:b9:b7:51:3b:08:05:44:
44:33:b9:ec:18:53:43:95:e7:27:4e:09:09:be:e7:f1:84:21:
f6:97:78:d0:da:3f:44:24:71:2b:b2:08:b3:d4:40:aa:53:cf:
4d:82:f6:29:74:33:ba:8c:cb:52:08:aa:34:63:61:04:10:87:
5d:78:bb:c8:02:ad:56:f9:d1:c3:6d:67:bb:6f:cb:47:68:26:
f2:01:f8:e5:d3:04:58:b0:a7:20:e9:13:7b:df:7e:f8:44:2d:
fd:56:d5:4e:b8:ca:f0:e4:2d:3d:37:cb:0a:c5:09:ab:9a:3b:
79:7b:24:19:f3:3c:de:26:a6:89:7c:85:e9:d9:af:ab:7e:c4:
36:fc:f9:c1:95:7a:c5:fc:d3:f1:b0:4a:d8:79:4e:af:8f:bc:
c2:f5:11:77:ab:c5:2b:58:74:0d:80:9a:36:b8:47:c3:b0:c8:
db:6b:51:a9:f5:b8:91:b9:56:07:5a:bd:d2:11:75:57:10:70:
d3:83:4f:97:39:0b:09:4f:d9:f4:d0:54:a9:6f:49:94:dc:b2:
f9:da:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:49 2025 by rpki-client