Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/xIJo2EuzM_PScXOHUg-DUkxIyEk.roa
File: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (raw, json)
Hash identifier: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=
Subject key identifier: C4:82:68:D8:4B:B3:33:F3:D2:71:73:87:52:0F:83:52:4C:48:C8:49
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 01942521240C4CD8CE20DD0EFFE68007CED6
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/xIJo2EuzM_PScXOHUg-DUkxIyEk.roa
Signing time: Thu 02 Jan 2025 03:48:36 +0000
ROA not before: Thu 02 Jan 2025 03:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50718
IP address blocks: 46.151.202.0/23 maxlen: 23
46.151.205.0/24 maxlen: 24
46.151.206.0/23 maxlen: 23
91.227.236.0/22 maxlen: 22
185.29.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:24:0c:4c:d8:ce:20:dd:0e:ff:e6:80:07:ce:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 2 03:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c48268d84bb333f3d2717387520f83524c48c849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:87:83:44:65:84:45:a0:ae:d7:1d:76:da:
3c:4a:88:5e:c8:6d:f9:c1:af:1b:71:ba:04:96:23:
08:71:49:1b:4b:0d:4a:d5:60:71:c7:70:39:71:eb:
4d:ff:24:61:35:2e:78:71:87:1c:2f:52:8f:d8:91:
91:e8:10:e8:5d:20:49:6c:a9:0e:83:fb:d0:e7:73:
f5:9a:49:bd:28:d7:06:10:50:bb:ee:6d:f2:74:7e:
15:89:c9:64:e9:94:d4:40:4a:2f:b9:8a:7e:38:57:
b6:fb:a2:fa:fa:6e:34:db:67:7d:9a:aa:06:1a:81:
41:ba:eb:11:d3:7f:ef:ca:d2:1b:ad:45:9d:79:b6:
a1:21:51:3d:d8:a0:11:99:87:20:e0:91:68:74:61:
8d:71:8d:cc:50:58:17:07:22:c7:f0:76:4e:1f:d7:
69:24:cd:ec:fa:43:0c:05:a0:64:46:01:07:ad:3a:
58:9e:3d:bf:56:5b:76:de:46:9d:6a:43:ad:f3:35:
8c:23:6d:a1:5e:b6:44:01:a7:0e:54:c9:3e:9c:af:
7d:f3:4d:46:b7:96:81:92:a0:ec:84:9d:90:f7:2f:
62:5a:0b:d0:fd:06:f4:26:42:fe:f6:f3:fc:e2:78:
59:0e:6d:d3:11:ad:63:80:90:55:16:35:45:47:02:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:68:D8:4B:B3:33:F3:D2:71:73:87:52:0F:83:52:4C:48:C8:49
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/xIJo2EuzM_PScXOHUg-DUkxIyEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.202.0/23
46.151.205.0-46.151.207.255
91.227.236.0/22
185.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f3:86:4b:3b:c5:e9:80:7a:e0:34:83:13:9d:4b:16:d0:83:
26:6d:27:0c:12:5d:4c:b9:8f:bc:af:fb:3f:98:e2:00:d9:95:
a2:7c:c9:32:fc:a8:34:d2:bb:1f:58:7f:b9:34:b5:5c:22:fe:
c7:61:8d:97:ca:1a:92:27:3f:2a:ba:01:67:8a:56:cf:d9:b0:
04:c5:6e:83:4f:1c:66:43:e7:4a:9b:d6:9a:fb:bc:be:df:b9:
12:1f:da:73:a1:89:d4:7d:6f:fa:42:ea:10:4c:70:49:9b:fd:
4c:6c:03:d2:b5:88:0b:ac:92:26:7c:30:d6:1b:93:6b:a5:a6:
16:4e:13:db:69:f7:c0:a1:e0:97:88:e9:e5:2e:d3:81:bd:5a:
d8:fa:b0:ff:7a:79:7c:1b:4c:a8:76:5a:db:80:54:c8:31:6d:
33:62:de:f8:0c:e3:c5:f2:e4:aa:db:c1:b9:72:97:8c:2f:a7:
a1:0a:9a:4d:3f:99:10:2c:d1:37:02:12:5f:c9:d6:1e:e2:dc:
6a:27:a8:00:88:8a:60:44:66:5e:55:21:70:d4:90:7a:f7:13:
7d:2c:18:f8:a8:3f:bc:e9:df:2e:23:27:5a:68:db:20:e6:2a:
68:da:87:bc:28:4c:73:29:3c:47:13:3b:7e:60:b9:ac:d4:7e:
e1:f0:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:31:31 2025 by rpki-client