Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/8qKws60nW6Z3LiJs0eyANnP0SG4.roa
File: 8qKws60nW6Z3LiJs0eyANnP0SG4.roa (raw, json)
Hash identifier: 9lHqUiw7ZlL+8c06Gu/fNSQfRoy60xmd5tsMPvOvsaw=
Subject key identifier: F2:A2:B0:B3:AD:27:5B:A6:77:2E:22:6C:D1:EC:80:36:73:F4:48:6E
Certificate issuer: /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial: 019420687427174EDE33577A9314D9EDD128
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/8qKws60nW6Z3LiJs0eyANnP0SG4.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214905
IP address blocks: 185.222.40.0/24 maxlen: 24
213.254.176.0/23 maxlen: 23
2a14:4ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:74:27:17:4e:de:33:57:7a:93:14:d9:ed:d1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2a2b0b3ad275ba6772e226cd1ec803673f4486e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6a:34:f6:ef:b2:7f:86:2c:9b:75:23:49:02:
bf:bf:1f:07:bc:43:fb:6f:46:e5:cc:3f:53:e4:c6:
31:9c:b1:37:d8:91:a4:d3:36:f1:95:32:09:a0:db:
48:bd:5d:43:c3:e8:08:4c:cc:2e:ea:18:58:69:03:
36:a1:6d:86:1c:8c:3c:35:32:24:ec:46:84:1f:d9:
f0:2e:56:bf:7f:d3:92:bf:e9:96:12:81:67:ce:46:
da:a7:e4:29:4b:4c:d6:8f:1d:0a:43:0b:ae:cb:52:
84:d6:c8:63:00:d7:6d:48:5f:4e:44:cf:44:43:43:
fb:5b:39:57:bc:62:9d:31:53:78:ae:97:79:b3:46:
2b:92:d6:f7:f4:22:4a:1f:66:2e:62:b5:4c:c9:65:
26:b3:10:6b:2a:76:4f:4c:d7:90:7a:c9:6a:de:49:
07:ad:4e:3b:86:a6:1d:a5:40:a4:e6:c2:0a:aa:f1:
b1:89:c4:c4:1e:0a:0e:f9:30:8d:e9:6b:c5:fc:2e:
ab:fa:54:6d:83:24:be:05:46:d7:ea:12:fc:79:d4:
fc:38:a9:f2:4e:32:63:a5:b2:7b:31:45:c9:12:c7:
c2:7e:f6:2b:63:58:68:fd:23:85:7f:02:02:56:8b:
f1:21:59:cc:ad:71:a3:1d:e5:22:71:67:05:da:93:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A2:B0:B3:AD:27:5B:A6:77:2E:22:6C:D1:EC:80:36:73:F4:48:6E
X509v3 Authority Key Identifier:
keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/8qKws60nW6Z3LiJs0eyANnP0SG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.40.0/24
213.254.176.0/23
IPv6:
2a14:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:65:14:1f:05:bb:68:cf:20:eb:01:08:55:7d:b0:a2:14:fe:
03:7b:69:53:de:07:fd:b9:db:31:89:89:8e:03:cd:79:7d:3f:
94:e0:80:c7:42:e9:44:c9:9a:20:66:2c:54:27:a8:24:2c:64:
ad:49:1b:49:84:7c:80:eb:49:ea:08:26:1b:bb:ff:cc:31:34:
dd:48:fe:a3:33:e7:dc:d4:01:97:b7:4f:44:ee:dd:cc:e1:96:
e0:02:b1:fb:97:44:a8:39:e0:6d:9b:2e:ad:a9:85:4f:f3:cb:
20:c4:9c:dd:ab:92:45:f6:63:7e:ab:fb:23:f1:b8:fd:3a:20:
66:12:fc:a4:7e:32:dd:b3:0e:28:37:91:0d:2a:e6:f6:9f:18:
6d:94:bf:cd:4f:af:f9:3c:22:ed:99:b2:14:97:31:61:d3:31:
99:08:1d:f9:35:63:2e:56:9c:e3:5a:2e:8f:4e:38:6e:d2:33:
02:47:1d:20:20:4e:a2:ce:64:00:ed:43:93:40:cb:03:ff:b1:
32:d8:9a:b1:3a:de:65:bd:0a:5f:27:52:06:eb:d0:50:1e:15:
6c:a1:d0:cd:d3:db:97:66:e7:04:90:99:ca:7d:1b:79:4c:21:
b8:27:fb:ac:d6:bc:54:d7:0d:2a:fb:a5:dc:a0:8e:df:49:e4:
93:59:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:12 2025 by rpki-client