Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/NznO4CxJJ6L0xLB6PTLKpB7weFM.roa
File: NznO4CxJJ6L0xLB6PTLKpB7weFM.roa (raw, json)
Hash identifier: cSE4XxBXPFFORCEl811D1OzY3o/1e0FebNC7EW5YkMk=
Subject key identifier: 37:39:CE:E0:2C:49:27:A2:F4:C4:B0:7A:3D:32:CA:A4:1E:F0:78:53
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 0194266C11F630BAE381175FB9CD114650F4
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/NznO4CxJJ6L0xLB6PTLKpB7weFM.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 46.28.58.0/24 maxlen: 24
46.28.59.0/24 maxlen: 24
46.28.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:11:f6:30:ba:e3:81:17:5f:b9:cd:11:46:50:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3739cee02c4927a2f4c4b07a3d32caa41ef07853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:6c:8c:c2:6a:d9:97:c1:48:5e:94:7c:44:
e7:3d:c8:20:96:98:f2:ea:1c:d6:46:2d:dc:18:1e:
73:a6:56:9c:bb:0c:ca:b8:dc:03:07:61:94:27:0a:
3e:9d:e2:d2:07:50:1c:dd:97:e6:5c:b4:9e:41:a1:
f4:29:47:d3:f9:5d:b0:99:cb:93:89:68:0c:6d:25:
b9:c7:5f:79:44:16:84:7c:0b:94:a2:ff:73:7c:03:
bb:00:ee:55:c1:11:4e:19:5f:d3:58:9e:63:63:54:
35:8e:f2:24:49:d9:4a:51:15:ee:21:8a:01:7f:cb:
4a:a5:40:5c:91:a0:72:93:41:c2:cd:64:95:74:2f:
d8:36:bc:0c:ff:8c:40:bd:88:6d:7a:2d:9b:3e:f8:
af:9c:9f:e3:f9:9f:6f:76:43:88:f7:03:e5:b8:53:
4f:33:c3:75:05:65:dc:ba:3e:ff:2d:55:a3:c8:74:
76:14:11:89:e8:09:ac:0b:f2:0b:20:5b:6c:ed:03:
05:ec:7b:93:95:c6:8f:4c:22:69:dc:5b:e3:e7:3c:
d1:ab:5a:f3:83:05:c4:ee:cb:8a:ea:c1:1d:48:b2:
94:fd:37:eb:bb:a3:e6:9e:db:d5:c8:d4:82:23:11:
fb:8e:76:b6:51:f6:93:07:91:3e:cf:4c:dd:c7:f8:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:CE:E0:2C:49:27:A2:F4:C4:B0:7A:3D:32:CA:A4:1E:F0:78:53
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/NznO4CxJJ6L0xLB6PTLKpB7weFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.58.0/23
46.28.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6e:11:c6:e5:14:7d:68:27:bb:e4:02:75:0c:41:cc:b5:55:
f6:b4:d7:7b:18:3f:e2:6b:9a:fd:a4:a2:28:e4:64:cf:37:f4:
e8:1e:70:13:fb:81:76:b7:dd:0c:72:29:0f:b7:fe:b9:84:a6:
3d:70:d6:51:e3:d3:44:e4:ca:0c:e7:e5:b4:89:69:0c:8c:1e:
40:36:85:d1:a3:1d:bb:45:6c:02:73:ff:90:54:95:c1:96:e0:
cf:e3:ba:1c:89:1a:b5:0d:b5:71:aa:99:e4:8f:e7:06:8e:39:
e1:4f:6a:79:17:cf:24:8c:f9:08:c3:f3:85:9d:ab:79:ad:fc:
27:83:e3:bc:82:98:14:6e:ca:31:e2:a3:b5:c2:20:a2:f7:86:
40:76:fb:95:c4:15:59:38:f5:31:af:2c:0f:f7:5f:0e:ac:6f:
0b:d9:18:b6:af:2a:70:c6:2d:d4:bf:af:6a:9d:de:a0:f9:63:
b4:1e:33:06:12:14:a0:9d:8a:5b:16:77:9a:17:a9:76:bb:2a:
7f:17:ab:38:e9:83:74:e9:85:26:ce:f9:f8:df:d0:a2:05:6b:
dc:d7:a0:6f:78:be:a0:9e:98:e6:1f:71:c4:52:22:de:88:49:
5b:d1:51:86:cb:cb:8d:91:c7:b6:68:73:8d:cb:b7:14:e1:48:
9b:be:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:13 2025 by rpki-client