Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/stWlBvkDAHuVKxJMKsXA_goxOvY.roa
File: stWlBvkDAHuVKxJMKsXA_goxOvY.roa (raw, json)
Hash identifier: Oy5OPNV5kIqWH3P0YL0NZu5JsCznsU+qKqGaA3RgWGw=
Subject key identifier: B2:D5:A5:06:F9:03:00:7B:95:2B:12:4C:2A:C5:C0:FE:0A:31:3A:F6
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 0196C489D913E0AF053423465080CC9757E5
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/stWlBvkDAHuVKxJMKsXA_goxOvY.roa
Signing time: Mon 12 May 2025 12:48:10 +0000
ROA not before: Mon 12 May 2025 12:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52088
IP address blocks: 46.30.30.0/23 maxlen: 23
185.45.108.0/23 maxlen: 24
2a02:22f0::/32 maxlen: 48
2a02:22f0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:89:d9:13:e0:af:05:34:23:46:50:80:cc:97:57:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: May 12 12:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2d5a506f903007b952b124c2ac5c0fe0a313af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:a1:67:8d:a9:b7:dd:d5:68:84:63:b3:0f:
3d:c8:97:5a:d0:88:76:9c:a9:76:0c:4c:c8:99:59:
70:32:5c:83:1c:96:ce:b1:43:e3:2b:77:88:04:a6:
81:05:e8:54:4c:9e:d1:61:a6:81:da:87:31:e0:32:
cf:d0:1b:28:0a:63:45:8c:c8:90:b1:c4:62:2e:4b:
10:68:31:fd:df:39:dd:8f:b8:13:66:23:24:63:30:
69:e5:b2:08:0f:a7:8b:cd:bd:c4:8f:a4:d8:98:ef:
8d:28:6c:3d:41:df:71:1b:68:a0:4a:fb:2f:5c:5a:
cd:c5:4b:25:92:27:f6:ab:97:85:30:cb:3a:6c:47:
f1:dc:2f:f7:85:c2:0c:cb:02:90:af:24:4f:05:9a:
7b:57:c9:e7:3e:dd:d8:b0:e1:28:06:98:96:02:40:
e9:74:6f:89:cf:ab:82:fd:19:06:a8:6b:57:da:be:
7a:3c:8d:24:53:ae:8c:d0:bf:44:64:d3:35:14:ee:
cf:1a:d9:aa:ef:db:6f:f2:81:29:b7:ae:0c:67:fa:
21:ba:99:8f:03:a2:8b:3f:01:d2:c1:74:58:97:23:
5d:75:fe:1a:21:00:e3:45:d6:0d:8b:a3:3c:08:ea:
f1:6f:f8:46:0e:f3:3a:b5:fb:4f:2f:25:59:87:49:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:A5:06:F9:03:00:7B:95:2B:12:4C:2A:C5:C0:FE:0A:31:3A:F6
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/stWlBvkDAHuVKxJMKsXA_goxOvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.30.0/23
185.45.108.0/23
IPv6:
2a02:22f0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:2c:3f:77:13:81:41:11:80:a4:fc:72:2f:0b:f8:32:3b:df:
97:11:27:52:28:f0:ad:c7:d7:9a:33:41:c5:6b:69:e4:bf:65:
a0:f6:e6:e1:27:ee:42:7d:81:c1:1e:fe:18:46:22:45:1e:37:
fe:30:c3:37:59:8b:50:95:f6:da:6b:42:b1:4b:dc:5a:68:73:
1f:dd:0c:e3:b0:c0:9c:39:0a:88:e7:9b:1c:cb:88:7c:26:37:
ff:be:e7:bc:88:71:a5:17:04:32:c8:b9:78:30:28:32:5f:5b:
3f:15:64:bd:6c:eb:5a:99:0b:bd:9a:63:ab:6e:42:1a:d9:bb:
24:fd:ca:28:c3:9e:48:14:c7:1e:c8:3f:13:0e:d5:bb:92:1b:
d5:23:ed:75:98:33:de:d2:91:91:d6:b6:76:1f:73:e1:2c:a6:
7a:e8:5b:9a:85:ac:ef:d3:4d:5a:7c:29:bc:d0:62:12:52:bc:
9e:8f:bb:8b:2c:5f:98:9c:59:4e:bb:46:1a:e4:cd:87:f5:fa:
51:8d:44:2e:d2:38:16:65:9c:9d:1a:5a:96:62:c1:1b:3d:f0:
c6:9a:ca:73:b8:6e:b1:16:7a:23:cc:83:13:ee:8a:1d:8e:11:
65:f7:b8:5d:a9:6f:77:42:2d:bd:49:ba:d2:cc:44:d8:64:12:
10:67:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:03:31 2025 by rpki-client