Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/p25F4lxe6nXngKaRbux6XPZ5x1U.roa
File: p25F4lxe6nXngKaRbux6XPZ5x1U.roa (raw, json)
Hash identifier: I4gYijlDBFf9xEaj+NrtUgL1crcekBLLnZdYciaAwRg=
Subject key identifier: A7:6E:45:E2:5C:5E:EA:75:E7:80:A6:91:6E:EC:7A:5C:F6:79:C7:55
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0195F55122C8625ED9868E044A5EF1C1C473
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/p25F4lxe6nXngKaRbux6XPZ5x1U.roa
Signing time: Wed 02 Apr 2025 07:04:50 +0000
ROA not before: Wed 02 Apr 2025 07:04:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:51:22:c8:62:5e:d9:86:8e:04:4a:5e:f1:c1:c4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 2 07:04:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a76e45e25c5eea75e780a6916eec7a5cf679c755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:75:d2:a7:56:53:cc:bd:f7:41:52:42:af:
b4:79:95:90:10:62:8a:f1:9e:0e:25:6c:cb:aa:f3:
e9:c8:92:78:db:49:ac:94:23:fe:f0:c6:c1:22:0a:
dd:16:79:af:ab:8f:44:c0:49:02:ce:32:25:eb:99:
75:e6:80:c6:b3:dc:02:70:b1:cb:85:71:09:42:96:
c7:2d:e5:54:3e:51:6c:f9:1a:a3:f4:f4:e5:6f:fe:
89:2f:60:c1:69:70:98:da:b7:e7:8b:31:d1:70:6d:
9c:58:24:2f:84:ec:a3:68:cc:b2:7f:ab:a4:f5:33:
0f:ad:c2:b3:b4:a2:4e:f7:c3:d7:63:69:a5:15:62:
e2:a9:f7:fe:53:49:be:3c:a3:b5:1f:9e:4f:02:b7:
0e:21:79:20:98:dc:7c:bd:b4:11:e4:6b:65:07:ae:
53:40:7f:6f:16:8f:48:26:46:5f:09:1c:67:85:a2:
6c:49:41:30:80:cc:14:c1:43:8f:b3:a7:04:a4:bb:
45:39:c1:44:9b:fd:ee:5b:fd:1d:f9:a5:31:5a:e8:
48:92:98:c8:04:c5:c4:35:10:8c:48:b8:72:6a:0c:
cf:9a:93:71:cb:09:c1:98:93:32:9e:2a:84:22:84:
8c:2c:b1:f2:9c:0a:a4:88:cb:51:a9:7f:75:49:2a:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:45:E2:5C:5E:EA:75:E7:80:A6:91:6E:EC:7A:5C:F6:79:C7:55
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/p25F4lxe6nXngKaRbux6XPZ5x1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.62.0/23
Signature Algorithm: sha256WithRSAEncryption
28:bf:2c:37:34:f2:51:69:03:fa:61:e7:1e:f1:8f:1f:92:d9:
b3:c2:a2:b4:96:4f:88:8f:56:b9:22:94:71:c8:c1:77:b2:e4:
88:ea:4b:f7:b2:94:b5:5e:d7:5d:15:83:57:3a:33:fe:33:d6:
96:b0:88:da:2c:2c:ec:68:09:22:2b:21:dc:58:c1:99:14:cc:
09:e3:99:17:65:78:54:1d:3b:05:0d:de:e9:b8:e6:04:ba:d6:
a8:b8:b0:9b:66:53:c7:7b:d3:ab:a7:46:9a:9b:72:13:2b:72:
9d:bb:8f:9f:51:2d:14:b1:bc:15:a2:37:98:c6:43:1f:18:6a:
72:a0:af:32:f1:ba:52:14:5a:ff:c9:95:dd:7e:ea:f9:d6:04:
90:7e:01:e2:82:f4:78:c0:a4:b4:6c:67:67:d3:21:bc:73:67:
f6:fd:a8:7b:21:42:db:89:d4:1c:c2:0c:72:5e:e7:2c:5d:69:
92:e7:5a:3e:cd:14:e6:d6:f3:b2:a5:6c:9c:2b:fa:c9:cb:b3:
7c:67:f6:df:e8:14:6a:49:3c:28:42:93:9b:f6:6a:58:d1:54:
f0:d6:0b:09:42:06:c2:a5:4b:06:db:ac:84:6d:cf:5d:8e:ac:
7f:03:53:36:ed:c2:fc:a8:b1:ec:bc:a7:6c:31:e6:fb:0c:50:
17:40:fb:62
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZX1USLIYl7Zho4ESl7xwcRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjUwNDAyMDcwNDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzZlNDVlMjVjNWVlYTc1ZTc4MGE2OTE2ZWVjN2E1Y2Y2NzljNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIB10qdWU8y990FSQq+0eZWQEGKK
8Z4OJWzLqvPpyJJ420mslCP+8MbBIgrdFnmvq49EwEkCzjIl65l15oDGs9wCcLHL
hXEJQpbHLeVUPlFs+Rqj9PTlb/6JL2DBaXCY2rfnizHRcG2cWCQvhOyjaMyyf6uk
9TMPrcKztKJO98PXY2mlFWLiqff+U0m+PKO1H55PArcOIXkgmNx8vbQR5GtlB65T
QH9vFo9IJkZfCRxnhaJsSUEwgMwUwUOPs6cEpLtFOcFEm/3uW/0d+aUxWuhIkpjI
BMXENRCMSLhyagzPmpNxywnBmJMyniqEIoSMLLHynAqkiMtRqX91SSpKFwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKduReJcXup154CmkW7selz2ecdVMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvcDI1RjRseGU2blhuZ0thUmJ1eDZYUFo1eDFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAEuIj4wDQYJKoZIhvcNAQELBQADggEBACi/LDc08lFpA/ph
5x7xjx+S2bPCorSWT4iPVrkilHHIwXey5IjqS/eylLVe110Vg1c6M/4z1pawiNos
LOxoCSIrIdxYwZkUzAnjmRdleFQdOwUN3um45gS61qi4sJtmU8d706unRpqbchMr
cp27j59RLRSxvBWiN5jGQx8YanKgrzLxulIUWv/Jld1+6vnWBJB+AeKC9HjApLRs
Z2fTIbxzZ/b9qHshQtuJ1BzCDHJe5yxdaZLnWj7NFObW87KlbJwr+snLs3xn9t/o
FGpJPChCk5v2aljRVPDWCwlCBsKlSwbbrIRtz12OrH8DUzbtwvyosey8p2wx5vsM
UBdA+2I=
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:13:42 2025 by rpki-client