Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/tSWx1lY4W5RWfIoEa9ZiLZAUrJw.roa
File: tSWx1lY4W5RWfIoEa9ZiLZAUrJw.roa (raw, json)
Hash identifier: BXE0UWACwtmo2QDwp5Gd5dEhuobHdzrduyzOxIVuE/M=
Subject key identifier: B5:25:B1:D6:56:38:5B:94:56:7C:8A:04:6B:D6:62:2D:90:14:AC:9C
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 0194F034CFEC95D3A88A8C37678F953CE892
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/tSWx1lY4W5RWfIoEa9ZiLZAUrJw.roa
Signing time: Mon 10 Feb 2025 14:13:00 +0000
ROA not before: Mon 10 Feb 2025 14:13:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8749
IP address blocks: 46.183.128.0/21 maxlen: 21
46.183.128.0/22 maxlen: 22
46.183.132.0/23 maxlen: 23
46.183.134.0/24 maxlen: 24
46.183.135.0/24 maxlen: 24
91.234.54.0/24 maxlen: 24
91.235.148.0/24 maxlen: 24
91.235.241.0/24 maxlen: 24
91.236.12.0/24 maxlen: 24
94.125.48.0/21 maxlen: 21
159.253.168.0/21 maxlen: 21
164.138.88.0/21 maxlen: 21
185.3.180.0/22 maxlen: 22
212.19.0.0/19 maxlen: 19
212.19.0.0/22 maxlen: 22
212.19.18.0/24 maxlen: 24
212.19.24.0/24 maxlen: 24
212.19.25.0/24 maxlen: 24
2a00:c040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:34:cf:ec:95:d3:a8:8a:8c:37:67:8f:95:3c:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Feb 10 14:13:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b525b1d656385b94567c8a046bd6622d9014ac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:e8:9f:01:31:9a:4d:0c:0b:a3:d3:98:34:
e6:06:81:f0:be:de:97:89:55:bf:f8:32:78:02:ab:
04:fd:10:f7:48:c8:8f:7b:76:4c:41:58:a4:4f:6c:
c0:69:bd:b8:53:b2:86:1a:2c:9a:a8:4e:f8:2b:cb:
7d:89:3b:cb:15:a4:b2:d7:70:03:df:ca:e1:6f:65:
dc:0d:52:36:eb:70:10:2b:62:48:9f:60:3f:c3:28:
c4:96:a3:a1:32:26:7d:ce:77:c5:48:f4:ec:41:cb:
95:7a:5f:b0:76:69:c5:9d:10:c4:6c:cc:2b:a0:6d:
85:20:e7:8d:30:9f:a1:22:b1:7b:ee:67:75:12:73:
a4:54:67:6d:e3:9a:5c:f3:e7:f9:6b:86:69:28:80:
33:c0:d3:83:1d:6b:23:a2:10:08:e6:76:50:84:db:
4b:9d:15:86:f7:9f:8b:8a:b7:49:cd:54:8e:64:67:
60:50:bd:2e:78:c4:68:24:6a:bd:82:6d:5c:87:a1:
e4:44:41:01:dc:c4:f9:85:b5:6d:38:95:ef:c7:83:
94:ee:f9:37:02:e6:81:5e:db:34:01:e1:6e:68:a4:
a1:aa:4e:82:e7:f2:ab:ff:26:43:92:48:a3:fb:46:
3f:fb:d9:73:74:07:c9:49:8f:8c:b8:f3:2f:28:4c:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:25:B1:D6:56:38:5B:94:56:7C:8A:04:6B:D6:62:2D:90:14:AC:9C
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/tSWx1lY4W5RWfIoEa9ZiLZAUrJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.128.0/21
91.234.54.0/24
91.235.148.0/24
91.235.241.0/24
91.236.12.0/24
94.125.48.0/21
159.253.168.0/21
164.138.88.0/21
185.3.180.0/22
212.19.0.0/19
IPv6:
2a00:c040::/32
Signature Algorithm: sha256WithRSAEncryption
c6:5d:b0:7c:0f:9f:78:38:5b:e1:61:7a:be:1f:a0:98:6c:36:
d5:be:bb:65:46:5a:b9:a1:8c:e5:37:8e:ce:1e:56:22:35:54:
39:dc:d8:73:52:7a:01:33:9f:ff:69:60:f1:37:72:bc:55:be:
6d:3c:05:f3:44:12:9b:39:4a:25:6d:4e:bb:c0:be:ec:06:73:
f1:08:33:43:05:38:aa:fb:46:42:d4:21:51:c8:f7:c2:04:d4:
f0:13:f6:90:ae:7a:2d:05:f2:dc:7f:2c:41:f8:a6:ee:ff:9c:
1c:93:07:3a:d7:5e:e7:65:24:ff:c2:3c:75:0d:fb:fe:b1:56:
32:e4:ee:95:96:1e:27:3e:17:c9:54:a9:fd:c8:13:d6:ff:7e:
5a:1d:23:b1:6c:b9:e6:4c:60:d2:01:80:5e:d5:3d:0f:53:55:
25:22:91:ac:0b:b2:f1:78:5c:e1:0b:ce:97:0c:22:7b:36:76:
a1:1f:65:64:79:17:87:53:e4:05:e2:88:26:bc:81:2b:72:24:
20:3d:42:7e:f1:72:29:74:c6:68:fe:5b:d2:97:f0:2e:a2:8a:
a5:1e:87:9e:1a:64:76:aa:88:3e:03:f8:93:c2:61:c0:58:04:
ce:5e:b1:fd:cb:fc:85:91:64:a1:ba:f2:89:1c:79:20:06:b8:
10:6a:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:48:17 2025 by rpki-client