Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/HIg12NFUg7Eb_z2q4_r85AxcQMM.roa
File: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (raw, json)
Hash identifier: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=
Subject key identifier: 1C:88:35:D8:D1:54:83:B1:1B:FF:3D:AA:E3:FA:FC:E4:0C:5C:40:C3
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01964D9BFC603DB8301675181C051F05A31E
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/HIg12NFUg7Eb_z2q4_r85AxcQMM.roa
Signing time: Sat 19 Apr 2025 10:33:10 +0000
ROA not before: Sat 19 Apr 2025 10:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 46.34.58.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:9b:fc:60:3d:b8:30:16:75:18:1c:05:1f:05:a3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 19 10:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c8835d8d15483b11bff3daae3fafce40c5c40c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:d8:94:c8:eb:60:77:bb:cd:8f:0e:48:6e:
f8:76:37:25:ed:8e:a5:9e:d9:e2:d9:48:9e:ca:3a:
ce:73:c3:52:ad:0b:81:02:0a:91:78:b1:99:ad:9f:
6c:1e:90:c2:e1:f4:d5:74:cd:70:b7:b1:1f:f8:55:
7e:b4:f1:26:3c:1b:5c:01:b0:75:30:21:7a:ca:8a:
bb:4e:25:d9:80:1e:c9:69:c1:54:fd:11:b3:a8:16:
15:46:5b:fa:75:cb:98:4e:76:9e:30:13:d8:46:d3:
d6:9e:12:f1:3d:0e:24:c5:61:f5:dd:fc:be:df:00:
d9:c1:4d:0e:2a:1e:ec:93:29:16:72:2c:0a:6d:ad:
7b:a7:86:4f:b6:72:50:b5:11:d8:51:9c:79:9d:e3:
24:21:6f:f8:b1:bb:5b:07:f0:f9:e3:62:58:90:0c:
74:19:49:ac:cf:ac:71:ce:b8:0d:e2:cf:12:7f:29:
cf:d8:cb:c7:a5:c2:be:9b:a6:4a:f7:a2:c5:aa:ff:
c7:da:2e:0d:6c:e3:88:65:d7:84:cc:ad:20:b9:70:
84:e6:ac:4b:e9:0b:ae:7c:29:06:a0:8f:31:47:9f:
e5:f0:d5:7a:c6:ee:35:9b:9a:4a:55:d6:bd:54:87:
6d:0f:b5:55:43:67:49:1f:a2:7b:bc:5c:94:95:86:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:88:35:D8:D1:54:83:B1:1B:FF:3D:AA:E3:FA:FC:E4:0C:5C:40:C3
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/HIg12NFUg7Eb_z2q4_r85AxcQMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.58.0/24
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
17:17:6f:fe:98:17:84:1a:98:5d:00:3c:e7:9b:22:fb:e2:5e:
d5:79:e2:0d:1c:de:7b:84:b8:4b:83:60:f6:d3:69:a4:8d:79:
15:11:19:6f:a9:b4:6a:0d:43:e6:4d:11:2a:86:00:fe:c4:c7:
e6:a1:64:8d:4f:1d:00:ed:4e:99:64:76:aa:9d:b8:ed:db:2d:
a3:03:16:a3:41:d0:97:36:15:54:c9:4a:e3:f3:76:94:43:ad:
68:7f:95:3d:e5:c3:23:92:5c:09:52:f2:5e:0c:37:8d:12:d3:
79:e0:98:48:bd:4e:6a:8c:78:12:2d:58:b3:ff:47:85:17:2b:
3b:52:c3:63:ad:4f:61:c0:d6:00:54:ba:66:8c:8d:8c:d4:aa:
a1:17:76:05:ae:e5:ba:3c:9b:40:6d:32:9e:3a:1f:6e:e2:7e:
4f:2a:5a:3b:41:dd:79:8e:24:22:7d:0f:02:fb:d5:e0:d3:e6:
52:f7:6a:43:4f:da:b2:0b:b0:76:54:96:a0:40:91:ab:20:4b:
ac:05:09:ca:6d:35:fe:7b:e2:ed:35:04:0f:ae:25:f6:ad:fe:
b0:7c:5e:57:33:49:c2:69:1c:75:06:97:39:d7:ce:fd:da:2b:
8a:5b:73:fb:98:e8:e9:37:16:46:62:a0:41:f1:68:39:a2:83:
2e:c0:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:02:30 2025 by rpki-client