Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/l9udc1nNsxrHs9SGGxHoTpBRajQ.roa
File: l9udc1nNsxrHs9SGGxHoTpBRajQ.roa (raw, json)
Hash identifier: cENTXB6RTPeVgbu01KS7vnsJeTDyjU4OfXpDr++EjWQ=
Subject key identifier: 97:DB:9D:73:59:CD:B3:1A:C7:B3:D4:86:1B:11:E8:4E:90:51:6A:34
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019704D98ABDC9F101B7F11ABFF4D8B5DE24
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/l9udc1nNsxrHs9SGGxHoTpBRajQ.roa
Signing time: Sun 25 May 2025 00:30:54 +0000
ROA not before: Sun 25 May 2025 00:30:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 46.31.76.0/24 maxlen: 24
46.31.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:d9:8a:bd:c9:f1:01:b7:f1:1a:bf:f4:d8:b5:de:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: May 25 00:30:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97db9d7359cdb31ac7b3d4861b11e84e90516a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:06:07:e5:d5:e8:45:92:85:1b:07:32:d7:
d1:ba:bf:b3:ad:e9:be:a3:d5:40:e9:a8:1b:11:ad:
09:fb:83:f1:44:0a:90:2a:5c:70:f4:89:71:e6:8d:
50:24:02:0c:a7:8c:f2:c3:f7:db:e6:b8:9e:42:74:
c0:c3:e9:ae:92:0f:12:d0:2b:4f:32:90:a0:d8:1e:
10:23:9f:87:3c:55:73:ee:06:ec:45:7a:94:9a:43:
3c:52:69:ac:ec:a3:93:d9:1f:f6:b0:a7:94:e8:a2:
c9:3d:16:c1:e9:24:b7:49:19:d6:f0:37:ba:09:48:
26:eb:5f:cf:80:c7:7a:fc:90:55:05:d5:3b:3c:4f:
67:18:f1:8a:c1:eb:df:09:fe:33:3c:e5:59:ac:79:
e5:2b:54:e4:6d:d3:76:91:68:86:67:f5:3f:7f:ea:
99:1b:73:80:ae:0f:25:b6:2f:c1:eb:f1:bb:d8:1d:
f5:3b:bc:bf:3c:99:83:7f:3b:33:45:2b:2c:5b:c8:
b5:32:af:d2:bc:2d:f5:21:83:7e:95:f4:6c:0b:68:
29:43:6a:42:1a:db:49:ac:c2:79:80:fa:67:90:ce:
a0:58:2d:b5:04:3c:81:26:71:71:7c:00:ae:8f:4b:
28:d4:7e:4c:9e:ff:c2:14:3b:56:32:33:5a:99:63:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:9D:73:59:CD:B3:1A:C7:B3:D4:86:1B:11:E8:4E:90:51:6A:34
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/l9udc1nNsxrHs9SGGxHoTpBRajQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.76.0/24
46.31.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:eb:f1:21:d6:a1:84:12:a0:5d:84:11:79:3c:86:23:43:1e:
4d:e1:9d:cd:14:30:c5:64:95:2b:77:49:cb:ca:1c:d9:92:2f:
5f:31:c0:6c:58:dd:82:27:30:26:2f:1e:e0:17:f4:14:1f:a0:
a4:2d:5f:38:ea:01:24:00:4d:8c:81:1b:5e:3a:01:9d:6c:bf:
c1:c3:8e:3d:43:92:fd:e3:bf:d0:9f:d2:6a:d6:88:93:c4:82:
00:18:2b:0d:61:86:6e:fe:b5:26:1e:fa:0f:b8:7c:c7:d1:11:
dd:de:b7:cc:79:01:58:4e:f6:26:67:42:04:36:f0:a8:76:66:
c7:6b:34:cf:c0:b2:ce:9e:1d:33:f7:53:23:c1:18:22:c0:8a:
f0:35:c1:7a:92:3b:b3:bc:6e:31:8d:7a:b4:ab:0f:d9:4d:08:
1e:0e:b1:0c:e5:a9:ac:ab:cf:46:df:02:ca:67:29:be:e9:ce:
c9:38:6f:1c:f7:c8:21:85:27:e9:ef:9c:b0:1e:3b:84:fb:fc:
c8:4b:49:a0:34:9e:ce:58:be:86:db:60:e7:57:35:95:ce:23:
e1:b6:48:04:c0:58:87:cb:ac:d4:45:0e:4b:a3:c2:ee:05:73:
e3:1f:5f:c5:b8:89:90:33:2d:de:2e:8c:2a:fe:30:db:51:df:
f5:60:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:32:39 2025 by rpki-client