Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa
File: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (raw, json)
Hash identifier: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=
Subject key identifier: 17:F8:C7:3D:4D:FF:03:73:6D:7C:6D:C0:93:7C:7A:F5:41:5A:C5:56
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0194236A1F55075F6162B1C8FF7C79465E3C
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45014
IP address blocks: 46.175.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1f:55:07:5f:61:62:b1:c8:ff:7c:79:46:5e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f8c73d4dff03736d7c6dc0937c7af5415ac556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:72:c5:3f:cb:8b:b1:66:f7:5f:a6:a6:ff:
4b:ce:f5:28:d0:7c:68:df:dd:a8:8d:bd:2d:84:11:
21:47:47:67:1e:26:e5:dc:0f:2a:d2:17:bb:b6:62:
79:94:bb:a2:af:35:2c:8b:bd:38:58:9b:30:d8:40:
24:c7:ac:90:fa:f3:36:c8:d2:2d:3a:cb:38:d7:f9:
bc:cd:d9:66:fa:ef:2a:3f:62:06:ce:e3:b7:22:df:
87:d5:3f:71:ad:c9:0e:aa:64:e6:4c:df:16:2c:06:
e0:2c:01:76:33:46:64:5b:2c:17:18:ca:46:b6:d3:
4e:5e:f2:6f:92:0e:bc:91:38:f5:64:34:3e:0b:dc:
34:5d:68:22:38:24:af:b5:30:0d:25:24:8d:45:80:
bf:12:cf:75:64:89:68:fd:0e:1a:68:ee:4b:0a:05:
b4:89:ac:64:9f:1e:34:b6:7b:ce:52:d8:3f:e8:b7:
c7:42:a2:d9:c4:a5:24:02:4a:a2:e7:79:9f:2d:c3:
75:ac:99:f7:e9:87:97:5c:b6:c3:50:5b:11:0f:3f:
d7:5e:01:1d:4e:ee:e0:5d:01:bf:19:a7:da:6f:88:
8f:a2:e9:19:65:33:3d:6e:13:fe:8c:8b:3f:1a:2e:
14:aa:d1:cf:68:39:76:b5:18:0d:0d:88:76:68:d0:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:C7:3D:4D:FF:03:73:6D:7C:6D:C0:93:7C:7A:F5:41:5A:C5:56
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:74:db:e5:3d:d2:83:68:8f:f4:ca:83:58:15:37:1a:e2:a1:
d5:1b:98:cb:b4:8a:5f:c4:6b:72:5e:33:c0:d9:3b:ae:70:93:
75:0c:fe:95:e6:0b:59:48:e8:8d:0a:00:b0:bb:8f:c7:a6:37:
56:34:af:1d:fb:40:28:9f:26:f8:25:02:06:b2:5a:45:f0:74:
99:98:f6:54:b0:32:19:a6:a0:6f:15:8e:60:f7:96:90:e3:5b:
65:a1:28:8d:6f:2a:72:78:f3:19:28:98:ec:6d:b0:15:54:8c:
a4:57:6b:51:0f:dd:66:ec:06:74:4d:e7:3e:6b:7e:14:d8:5e:
23:6b:85:8e:2a:54:90:e7:8f:87:3d:ee:ac:7e:9f:32:bb:09:
b3:15:a0:3f:6a:2b:88:06:09:b9:ac:4f:f6:03:7f:81:1e:85:
a5:34:e5:40:5d:8e:24:e3:1d:5f:a7:9f:7d:51:7b:74:29:b3:
3a:29:83:c7:46:19:9e:b7:12:ea:a5:64:7d:67:8e:6d:0c:b5:
7e:a6:f9:56:47:b5:f2:2a:97:34:34:47:38:e6:87:e0:e7:11:
6b:69:a3:c2:a6:c3:15:8c:55:64:7d:b8:a2:6f:d6:f1:b3:3b:
7d:fc:ac:f2:bd:41:d6:03:5e:63:e5:b7:15:3c:fe:54:8c:9a:
fc:6b:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:29:58 2025 by rpki-client