Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/Z4ff2msRKcb6YMtm9rlrjleZxQM.roa
File: Z4ff2msRKcb6YMtm9rlrjleZxQM.roa (raw, json)
Hash identifier: R/U2SPlro8qocLQcB9G60tY7YkY0sJXo2Wic6VrrpPw=
Subject key identifier: 67:87:DF:DA:6B:11:29:C6:FA:60:CB:66:F6:B9:6B:8E:57:99:C5:03
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01942827328E35A76791F728948E46CE95EB
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/Z4ff2msRKcb6YMtm9rlrjleZxQM.roa
Signing time: Thu 02 Jan 2025 17:54:05 +0000
ROA not before: Thu 02 Jan 2025 17:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47147
IP address blocks: 46.38.248.0/24 maxlen: 24
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:32:8e:35:a7:67:91:f7:28:94:8e:46:ce:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 2 17:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6787dfda6b1129c6fa60cb66f6b96b8e5799c503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:46:8a:a9:68:a9:c5:fd:26:77:2a:8e:0e:
24:b5:57:89:35:71:a6:ab:bd:37:ad:48:24:ef:fa:
ab:49:08:76:23:25:40:41:b2:cf:df:7f:34:97:de:
42:57:fa:43:30:92:41:9e:59:1f:b8:ee:4a:d7:83:
be:5f:3b:a9:8b:0c:4c:c2:6b:fc:9d:8f:8c:44:33:
08:e6:be:2d:65:2a:2a:a0:79:cb:54:81:3f:4e:03:
42:75:96:bb:d2:aa:27:5a:5a:89:3b:57:6c:99:1f:
98:b1:06:6a:72:95:18:ec:30:9e:b3:5f:08:c5:c3:
a5:37:b9:fa:6d:3a:2a:37:35:09:bb:0e:b2:52:d2:
c2:53:8c:0b:f4:2e:25:71:69:89:af:91:31:bc:3e:
01:a1:85:23:ba:c4:6e:b0:7b:ca:14:d3:56:56:09:
93:be:d8:52:ee:c6:61:2a:35:14:c9:f3:00:e5:ba:
0f:7e:6d:bb:94:ef:b8:b4:59:2d:a2:98:ca:80:0f:
f8:d9:95:55:4f:25:94:70:e0:c4:b3:cd:0c:bb:8f:
3d:20:2a:6b:96:78:97:fa:d6:10:dc:17:d2:04:62:
bf:fc:3d:ad:40:e0:9a:a2:c8:1c:fb:52:94:e4:be:
04:db:6e:1b:ee:41:d7:05:9f:55:3c:39:e8:d9:78:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:87:DF:DA:6B:11:29:C6:FA:60:CB:66:F6:B9:6B:8E:57:99:C5:03
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/Z4ff2msRKcb6YMtm9rlrjleZxQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.248.0/24
IPv6:
2a0a:4cc0:40::/43
2a0a:4cc0:80::/43
2a0a:4cc0:c0::/43
Signature Algorithm: sha256WithRSAEncryption
2c:7d:23:2f:d7:1b:6d:6c:b6:66:8d:ff:12:b7:e9:19:b0:d9:
2b:c1:91:42:b1:da:73:ea:26:f8:17:3a:86:6b:29:4e:a9:07:
50:e7:83:ec:f2:0a:67:0c:a6:f5:1f:57:5a:50:42:48:35:8f:
aa:55:68:6c:65:29:73:f3:e7:ac:9d:a1:5f:ef:9d:a7:db:e1:
62:44:a9:88:62:53:ca:6b:24:ea:de:99:e1:53:3e:62:17:24:
7d:f1:70:ba:69:f4:3c:fd:35:c6:23:45:e7:26:73:69:33:11:
89:3c:97:71:e6:76:e4:ac:2d:7e:a7:ab:27:0f:1a:7c:e8:f2:
77:08:2e:2a:24:16:35:fc:c1:cf:5a:3e:73:9f:32:f6:4a:08:
f7:e9:ae:39:94:82:fb:05:28:05:fc:23:8f:a3:01:ad:7f:ad:
7a:42:26:ee:c8:78:38:d3:56:f6:b8:3a:3c:e8:1f:7b:2f:7d:
9f:0e:a1:a8:6a:19:8b:7e:81:08:72:77:d6:a1:df:28:e7:1e:
9d:66:2c:f9:f6:6e:fc:25:f6:1e:d0:76:2c:a6:60:23:94:38:
58:62:b4:fa:12:83:6c:17:f2:0f:8a:dd:36:42:a4:3b:86:7c:
d9:fe:c2:9f:0c:68:87:48:b7:63:03:79:2f:d1:4f:8d:d2:a9:
1d:a1:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:04:48 2025 by rpki-client