Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/rTVHjttPuQQ_1Dt0EA11KAiXgII.roa
File: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (raw, json)
Hash identifier: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=
Subject key identifier: AD:35:47:8E:DB:4F:B9:04:3F:D4:3B:74:10:0D:75:28:08:97:80:82
Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial: 019423691FD46A2B286F41187029D816372F
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/rTVHjttPuQQ_1Dt0EA11KAiXgII.roa
Signing time: Wed 01 Jan 2025 19:47:59 +0000
ROA not before: Wed 01 Jan 2025 19:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34841
IP address blocks: 46.252.48.0/20 maxlen: 20
185.77.124.0/23 maxlen: 23
185.77.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:1f:d4:6a:2b:28:6f:41:18:70:29:d8:16:37:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Validity
Not Before: Jan 1 19:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad35478edb4fb9043fd43b74100d752808978082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:b5:1f:28:5d:fd:44:fe:1f:f9:61:91:ab:
23:ab:75:87:19:fb:35:f1:b6:f1:f9:c5:ed:86:13:
9e:dd:ad:14:7f:01:cf:57:8c:95:96:30:9e:72:19:
1b:30:ce:f6:f4:38:2f:30:56:cd:c7:92:93:40:3f:
5b:7c:7d:cb:30:83:0f:58:1e:40:58:d1:af:d1:a6:
42:1a:d7:35:ef:1a:2c:07:7e:76:c7:1a:da:9a:be:
b2:ef:8a:a2:56:b9:07:b3:5b:7e:1a:77:aa:b8:90:
e5:2f:3c:94:a7:d7:18:71:cd:dc:1b:21:97:d9:d6:
d5:ce:e1:b7:0f:8c:13:d7:4b:5b:95:a6:b1:8f:12:
b9:df:26:67:57:4e:20:56:c4:6a:ed:09:9a:f3:bc:
01:ac:4d:d4:26:19:2d:05:01:91:53:55:f5:43:e3:
f2:b2:79:c7:d1:38:f8:fa:fd:81:55:be:38:5c:7a:
31:60:c7:89:eb:47:e3:14:f2:b3:4f:06:42:8f:83:
43:e7:e2:aa:54:65:ef:a0:84:1d:5a:83:44:7d:97:
ac:07:57:29:bb:08:88:74:7f:f2:00:3d:d9:78:04:
ce:ac:f2:20:34:03:a3:28:b8:3d:da:89:0b:29:93:
bd:02:43:aa:ad:17:87:00:be:a5:e1:23:0f:24:df:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:35:47:8E:DB:4F:B9:04:3F:D4:3B:74:10:0D:75:28:08:97:80:82
X509v3 Authority Key Identifier:
keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/rTVHjttPuQQ_1Dt0EA11KAiXgII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.48.0/20
185.77.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:5a:64:ca:16:bb:ec:73:86:6f:80:12:20:13:44:20:47:bb:
3c:39:30:7c:7a:ed:37:85:b6:ef:bb:56:4a:fa:e6:59:6e:e8:
bb:22:1d:18:4a:01:f8:87:4b:92:fb:4d:1e:06:74:2e:f7:26:
20:5c:ff:a9:1f:ed:bd:3f:de:03:e0:e6:8b:c7:cb:6f:52:a6:
05:0c:88:00:02:db:16:35:2e:cb:9c:89:c2:eb:20:a2:00:4b:
cc:8d:a9:2f:4c:b0:3e:9e:a9:4e:c1:3e:2b:a5:6b:29:0a:14:
b4:24:22:d1:b1:db:7f:b2:e7:66:52:ed:72:16:bd:b2:63:86:
68:95:0a:a6:d9:2a:bd:3b:af:f2:7c:0f:77:e8:cb:37:8a:79:
1a:ce:21:25:40:66:00:dc:c7:b2:85:ff:39:e9:2f:cb:27:3b:
dc:0f:ac:c0:31:7a:e6:ce:3a:34:15:13:e2:1d:69:14:a0:b7:
7f:d7:a5:de:2b:35:52:f5:ca:2c:8e:d8:1d:fa:d9:42:48:18:
26:30:c7:54:ef:77:00:3e:51:92:bc:e1:0b:d1:f9:42:51:6e:
eb:95:18:f2:5b:1a:cc:a1:7f:82:17:ca:60:aa:5a:1c:08:ce:
b3:ff:8e:65:7f:70:d3:4b:26:a5:49:2f:5e:6d:4e:40:1e:d8:
46:f3:b4:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjaR/Uaisob0EYcCnYFjcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjBiNzM3NzE1MTE0ZGVkMjBmNjhlZjAzNDdkOWY3NTJh
MGUwYjcwHhcNMjUwMTAxMTk0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDM1NDc4ZWRiNGZiOTA0M2ZkNDNiNzQxMDBkNzUyODA4OTc4MDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX21Hyhd/UT+H/lhkasjq3WHGfs1
8bbx+cXthhOe3a0UfwHPV4yVljCechkbMM729DgvMFbNx5KTQD9bfH3LMIMPWB5A
WNGv0aZCGtc17xosB352xxramr6y74qiVrkHs1t+GnequJDlLzyUp9cYcc3cGyGX
2dbVzuG3D4wT10tblaaxjxK53yZnV04gVsRq7Qma87wBrE3UJhktBQGRU1X1Q+Py
snnH0Tj4+v2BVb44XHoxYMeJ60fjFPKzTwZCj4ND5+KqVGXvoIQdWoNEfZesB1cp
uwiIdH/yAD3ZeATOrPIgNAOjKLg92okLKZO9AkOqrReHAL6l4SMPJN8utwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK01R47bT7kEP9Q7dBANdSgIl4CCMB8GA1UdIwQY
MBaAFCfwtzdxURTe0g9o7wNH2fdSoOC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2Ut
MWVkNjIwNDUyNTA5LzEvclRWSGp0dFB1UVFfMUR0MEVBMTFLQWlYZ0lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2UtMWVkNjIwNDUyNTA5
LzEvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELvwwAwQC
uU18MA0GCSqGSIb3DQEBCwUAA4IBAQBaWmTKFrvsc4ZvgBIgE0QgR7s8OTB8eu03
hbbvu1ZK+uZZbui7Ih0YSgH4h0uS+00eBnQu9yYgXP+pH+29P94D4OaLx8tvUqYF
DIgAAtsWNS7LnInC6yCiAEvMjakvTLA+nqlOwT4rpWspChS0JCLRsdt/sudmUu1y
Fr2yY4ZolQqm2Sq9O6/yfA936Ms3inkaziElQGYA3Meyhf856S/LJzvcD6zAMXrm
zjo0FRPiHWkUoLd/16XeKzVS9cosjtgd+tlCSBgmMMdU73cAPlGSvOEL0flCUW7r
lRjyWxrMoX+CF8pgqlocCM6z/45lf3DTSyalSS9ebU5AHthG87Qv
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:14 2025 by rpki-client