Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/toUQ0_iu6duuq_aTFgLEWgwtLpw.roa
File: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (raw, json)
Hash identifier: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=
Subject key identifier: B6:85:10:D3:F8:AE:E9:DB:AE:AB:F6:93:16:02:C4:5A:0C:2D:2E:9C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01942445404DD5E8E05AE3B9A9286ADF5E56
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/toUQ0_iu6duuq_aTFgLEWgwtLpw.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 46.34.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:40:4d:d5:e8:e0:5a:e3:b9:a9:28:6a:df:5e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b68510d3f8aee9dbaeabf6931602c45a0c2d2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:02:a8:1e:5b:0a:83:aa:7e:9d:92:6a:d4:
67:e1:f7:07:83:0c:c5:e2:da:c9:ee:5c:87:9c:cc:
95:45:9f:66:6c:e7:c7:34:2a:ce:6d:b0:ff:f8:e6:
c1:7f:1a:ff:c8:8c:c5:57:56:d0:4a:7f:f3:49:da:
68:66:19:e2:1e:e6:b3:00:40:f9:45:d7:a3:6b:6e:
a2:36:57:e9:7b:e2:ef:7a:7f:81:17:ba:42:68:7f:
e1:fc:9f:42:2f:bd:c4:95:06:0c:5e:f0:18:a7:02:
d8:b2:77:07:88:d0:11:05:a7:59:a1:e0:bc:44:4c:
96:b4:e6:8e:20:14:da:6a:1c:31:36:a3:a3:73:c9:
75:1f:15:87:18:95:d0:57:da:3f:13:11:cd:df:9f:
0f:f7:a3:10:b5:ee:c9:42:95:24:d2:f6:10:44:15:
2d:c5:e9:f9:23:72:85:f6:84:dd:a7:21:8b:f5:ee:
c2:68:9f:81:5c:1f:7a:35:c5:9c:3d:d6:5b:ec:49:
2f:b7:c9:33:b5:b7:62:6e:4a:6f:43:f8:5e:9b:72:
de:e1:79:95:30:11:d1:fd:25:5c:dd:22:d1:c9:79:
b3:f7:56:bb:d8:42:16:3d:42:6e:26:86:d1:d6:4c:
70:b0:bc:37:77:d8:45:be:7c:3d:6d:9c:66:1f:b9:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:85:10:D3:F8:AE:E9:DB:AE:AB:F6:93:16:02:C4:5A:0C:2D:2E:9C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/toUQ0_iu6duuq_aTFgLEWgwtLpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.52.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4a:f7:13:85:ec:13:27:66:6e:4b:32:87:ef:f0:2f:89:bf:
c9:f5:90:a3:23:be:f6:ae:d1:5a:84:0e:77:83:35:31:67:63:
ec:bc:8f:05:a0:ad:fc:c6:2d:d7:b2:71:7b:f6:8b:84:73:37:
e1:1f:86:ad:4a:13:71:25:d0:82:40:0c:8b:69:dc:3e:ee:3f:
d3:97:26:d9:2c:3f:3b:c6:43:d7:a9:05:48:f5:0c:67:dc:d4:
c8:7b:0c:2f:7c:17:d6:91:b4:83:e1:5a:1b:0a:9f:39:58:cc:
ee:23:f2:7b:1e:57:f3:c9:5a:44:87:e0:7a:a8:3e:eb:88:02:
59:a1:35:8f:a7:0f:80:5d:87:e2:5d:99:d0:89:ef:65:02:f8:
61:a8:86:ca:43:3d:70:68:2c:f0:3d:8b:d0:f0:c3:ee:bd:fd:
8d:6c:bb:b9:9a:b8:08:e5:91:24:4c:65:4b:e8:f3:ec:06:a1:
c7:31:82:1b:fe:78:0f:e9:20:16:2b:05:c0:ca:09:ed:be:ce:
db:b3:5d:6e:4f:07:57:89:f9:2d:20:de:3f:7d:05:d8:91:39:
f0:b6:c7:e0:76:5b:46:54:eb:1a:34:73:a3:83:aa:76:dd:2d:
cb:89:a2:04:f0:c4:f9:59:b7:2e:b2:71:9a:aa:22:cc:01:9c:
d0:03:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:13:39 2025 by rpki-client