Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/46uMqFoZIbx_W9-E8n9u53LtPPw.roa
File: 46uMqFoZIbx_W9-E8n9u53LtPPw.roa (raw, json)
Hash identifier: 2dilAY9A0HBjLWWldEcSomY7yF95pmwR+zYOHTlJZo4=
Subject key identifier: E3:AB:8C:A8:5A:19:21:BC:7F:5B:DF:84:F2:7F:6E:E7:72:ED:3C:FC
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 01941FFA183DAF1BC307CB1063FC247D3C39
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/46uMqFoZIbx_W9-E8n9u53LtPPw.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42976
IP address blocks: 91.194.4.0/23 maxlen: 23
91.216.31.0/24 maxlen: 24
91.220.9.0/24 maxlen: 24
193.104.44.0/24 maxlen: 24
194.5.56.0/22 maxlen: 22
194.165.42.0/24 maxlen: 24
2a0c:c340::/29 maxlen: 29
2a0c:c340::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:3d:af:1b:c3:07:cb:10:63:fc:24:7d:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ab8ca85a1921bc7f5bdf84f27f6ee772ed3cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:34:75:7d:68:0a:39:c1:c1:d9:68:9d:44:
e9:37:50:fb:8e:13:2b:86:53:6c:5d:e9:b9:a9:23:
28:eb:94:48:4b:8f:fe:f5:cf:e9:d3:d0:ab:12:5c:
de:fd:cf:27:96:04:61:29:06:f4:59:fa:a8:34:94:
b8:9a:ec:cf:e0:be:de:90:8a:ce:27:e0:5f:f3:72:
26:f1:1a:f8:4c:21:ae:8d:26:16:8f:50:a6:cf:9a:
85:e4:45:85:50:ae:68:7d:68:53:3a:98:93:10:de:
1b:17:fc:fa:d2:f6:8a:bf:ba:fc:0d:02:a8:bd:07:
f1:2b:4f:82:07:cd:b1:24:ac:d5:9d:e8:1c:19:30:
23:2d:81:89:88:e4:1c:f2:87:ef:e6:df:bf:35:d2:
2b:9e:e5:b4:6e:2c:01:e0:90:f5:fb:8d:b4:96:9c:
07:16:86:06:f5:7f:42:0f:c5:1c:53:eb:3a:4e:16:
67:f6:51:3a:a4:87:a3:71:cc:71:95:00:5f:15:a5:
56:6b:bd:ff:e1:97:d1:e6:fb:7c:2c:dd:93:43:ec:
a8:8b:e0:3a:8f:5f:94:a4:ce:a9:93:c6:f2:90:b9:
af:6c:4d:bc:0a:46:3a:07:2e:a0:f5:48:94:d1:b2:
5e:46:98:55:b5:20:53:52:96:65:c2:c4:8d:90:ad:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:8C:A8:5A:19:21:BC:7F:5B:DF:84:F2:7F:6E:E7:72:ED:3C:FC
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/46uMqFoZIbx_W9-E8n9u53LtPPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.4.0/23
91.216.31.0/24
91.220.9.0/24
193.104.44.0/24
194.5.56.0/22
194.165.42.0/24
IPv6:
2a0c:c340::/29
Signature Algorithm: sha256WithRSAEncryption
0e:19:73:70:80:96:4c:16:5a:d4:4d:22:a9:de:47:f0:3b:4b:
64:f5:7b:96:bc:fe:c9:45:cf:52:d9:af:da:89:ed:d7:7a:e7:
8d:c7:73:da:05:ea:47:2d:25:c3:ea:3d:fc:83:01:c5:88:e6:
50:ad:74:47:68:b6:bd:58:e9:57:70:77:fe:a9:ff:77:78:4a:
68:c9:91:d9:21:f3:ee:be:a4:56:5e:51:d0:68:72:27:7c:15:
f1:00:28:d1:93:d4:52:74:bb:91:03:2e:23:4a:8b:16:fe:92:
a9:a1:ab:4b:2e:45:cd:f6:9d:36:ed:30:34:b2:05:bb:47:2d:
36:bd:43:ea:e3:5b:5d:b4:ee:db:44:b0:ba:bb:54:65:2b:c4:
02:d7:03:d3:b5:6a:3f:e5:55:a7:81:50:eb:ea:c5:04:9d:41:
6b:d6:3a:fd:33:57:13:2e:18:b5:9a:70:3b:5e:3d:25:5e:d0:
97:b2:3a:33:8d:a3:2b:4c:86:78:56:14:4e:5d:d3:eb:86:f7:
58:e1:e1:d5:b9:00:64:fb:fd:64:4f:75:28:ef:b4:d1:e4:38:
80:72:7d:07:08:18:3c:3f:54:43:dd:26:98:13:1c:f3:f1:5e:
13:e4:f9:c7:60:b1:4b:10:06:fa:0a:f0:3a:64:0a:19:17:87:
62:d2:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:41:11 2025 by rpki-client