Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/hVV7bHBD-mLe_PCozGrmTHxovsM.roa
File: hVV7bHBD-mLe_PCozGrmTHxovsM.roa (raw, json)
Hash identifier: YI06CwugD4QjZYDajA4+sFtJ0/JL/QvZ5A+ius2+OkM=
Subject key identifier: 85:55:7B:6C:70:43:FA:62:DE:FC:F0:A8:CC:6A:E6:4C:7C:68:BE:C3
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 0194266C12FC0011E6D7263ADF6F594F9BA7
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/hVV7bHBD-mLe_PCozGrmTHxovsM.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.28.58.0/24 maxlen: 24
46.28.59.0/24 maxlen: 24
46.28.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:12:fc:00:11:e6:d7:26:3a:df:6f:59:4f:9b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85557b6c7043fa62defcf0a8cc6ae64c7c68bec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:ad:ba:e8:1f:14:0b:d4:28:1a:01:87:45:
e9:a2:93:54:1f:b7:ad:e0:82:06:04:08:ec:71:33:
d8:ba:1c:ce:0f:8f:f1:a9:c6:5c:64:f4:28:33:46:
a5:e7:a1:ba:1f:9f:48:bc:d6:b9:4f:88:e5:85:f5:
6a:1c:82:4d:2c:e0:39:43:2e:a6:63:99:1a:55:55:
2c:d6:e6:6b:fc:8b:e0:5c:18:76:c7:9c:e3:bc:f2:
74:51:25:7c:64:1d:63:c3:92:11:b6:dd:a2:07:8f:
9f:59:91:f2:8d:32:bf:88:2c:62:21:06:97:41:f8:
aa:50:c9:39:c3:b4:ae:96:a8:a8:16:4b:b7:3c:0c:
fc:41:6d:a5:26:ad:0c:31:82:dd:01:b2:b8:f4:b0:
fe:a1:b1:41:47:ad:50:26:bb:6b:d2:c0:d0:2f:67:
cb:b2:9e:19:dc:e5:d2:26:67:39:ca:a0:60:43:88:
f6:54:52:95:55:d6:ae:71:d7:f5:45:bc:f1:1a:ba:
6c:15:4c:b8:94:59:f4:ed:ba:b6:36:05:e8:3c:b0:
e9:ab:cf:67:3c:4a:f5:67:ec:b9:3c:d1:50:9a:51:
aa:25:b6:1a:c8:4f:d9:dd:a4:f2:34:d4:6c:d3:05:
98:68:4f:af:11:8c:99:6f:38:43:fd:43:8a:c1:a2:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:7B:6C:70:43:FA:62:DE:FC:F0:A8:CC:6A:E6:4C:7C:68:BE:C3
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/hVV7bHBD-mLe_PCozGrmTHxovsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.58.0/23
46.28.63.0/24
Signature Algorithm: sha256WithRSAEncryption
79:48:b0:c1:9d:9a:22:88:0c:f4:1a:41:71:6a:27:9a:2c:64:
3e:eb:fe:b0:94:1f:82:5b:5f:2a:dc:45:74:de:0c:74:f1:57:
87:72:75:94:77:34:ec:9b:09:9f:42:2c:4e:c0:c7:72:c6:34:
12:84:1f:ee:36:e8:12:25:a2:d1:b9:ff:08:b1:26:3f:d1:a2:
a4:ca:93:86:a0:33:97:5f:06:42:ae:b0:35:aa:8c:84:27:20:
f3:cc:8e:6e:40:11:75:fb:57:c5:63:19:91:a6:b0:c8:e7:7e:
d5:ca:16:28:c8:36:68:0c:87:95:12:0c:86:5c:0b:b4:c0:9d:
97:3d:1c:21:b1:50:e9:6c:2f:ee:96:c8:df:9c:17:5f:40:57:
e8:6c:1d:51:d3:0a:b1:b1:dc:34:ec:13:c0:8a:11:ad:a2:54:
6f:73:39:9d:79:3b:89:f0:ba:80:87:c7:ad:f7:f3:9e:e4:4e:
9e:72:36:ae:a4:7e:24:80:bd:40:55:57:fa:78:71:60:90:ad:
2e:48:c7:87:70:f6:10:9b:91:1f:b2:64:c8:22:cf:37:f4:e5:
16:e7:b1:33:e7:47:d2:26:a1:21:42:c5:ae:75:13:a4:60:db:
33:32:f6:ae:db:c0:7a:f7:02:75:e9:60:8e:8e:1c:4f:f7:57:
82:2f:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:55 2025 by rpki-client