Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cnVIKSsKy8JJFjMcutZL9z4Kpcw.roa
File: cnVIKSsKy8JJFjMcutZL9z4Kpcw.roa (raw, json)
Hash identifier: X17LoP5QP5FaNImVjV2A/cQv/OVPQBl122gIMjGfN8A=
Subject key identifier: 72:75:48:29:2B:0A:CB:C2:49:16:33:1C:BA:D6:4B:F7:3E:0A:A5:CC
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747FC417E5F690D9CE6161755A2D514
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cnVIKSsKy8JJFjMcutZL9z4Kpcw.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201384
IP address blocks: 46.10.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fc:41:7e:5f:69:0d:9c:e6:16:17:55:a2:d5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=727548292b0acbc24916331cbad64bf73e0aa5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:31:ec:00:ec:23:22:8d:8f:14:ec:e1:a1:
40:24:8c:df:33:8e:62:62:71:43:08:41:e8:75:62:
92:01:7e:48:5c:0c:44:2b:64:37:93:1a:8d:e0:f9:
9e:6f:ec:73:e1:e5:84:9d:f2:c2:27:86:34:a7:9c:
bf:44:9f:77:f5:5c:60:ae:b2:eb:7b:6e:e9:e8:f4:
85:5f:70:b7:ed:d7:69:f7:cc:79:25:64:83:01:8f:
d8:5c:56:6e:3d:bb:63:2a:8d:cc:26:6b:da:f4:5f:
34:eb:26:fa:0a:e8:85:7b:60:61:79:92:c4:84:81:
1e:aa:64:19:9a:ab:a8:4c:38:37:a0:c7:6e:ad:bf:
9d:74:14:cd:63:e8:c3:da:ba:3e:9f:57:f4:a0:e3:
be:5d:d2:a5:69:cf:0f:6a:6d:46:50:cb:d0:61:f9:
43:61:0c:a2:bd:7a:a2:89:2b:7f:ce:62:b0:2f:15:
d1:52:63:92:54:db:f5:ee:97:7b:11:8b:10:26:0c:
c3:c7:93:17:31:b1:73:1f:cd:81:a8:8e:a7:22:db:
eb:da:3c:f9:96:5a:97:39:b1:b2:e4:9b:10:08:ea:
41:2f:48:a8:c0:99:8a:9e:8c:69:eb:77:dc:2d:02:
52:65:e9:07:2d:e2:81:c1:93:44:db:62:d7:d6:78:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:75:48:29:2B:0A:CB:C2:49:16:33:1C:BA:D6:4B:F7:3E:0A:A5:CC
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cnVIKSsKy8JJFjMcutZL9z4Kpcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.176.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c8:b2:aa:cc:3b:d4:ab:e2:8b:91:da:79:22:62:b4:5f:68:
01:74:16:05:1f:a8:02:7b:5b:bc:e5:a2:02:bf:48:25:6f:a6:
2f:86:84:76:22:83:60:bf:4f:7c:f4:ca:1e:17:52:88:d9:d0:
07:00:04:88:2b:eb:8f:4e:d2:26:02:fa:d4:16:6d:54:a9:8c:
32:06:b2:7a:8e:79:ab:66:fb:58:20:dd:86:06:7f:2e:38:66:
21:81:ab:24:85:3d:8d:1e:ef:28:04:bd:0a:8f:b4:16:4b:45:
ac:c1:90:9b:d8:ed:39:98:72:cd:ec:32:38:ba:21:01:95:0e:
55:dc:28:2d:a1:32:4b:d4:be:3b:48:e9:fb:e8:b9:7e:89:5f:
94:b0:52:2f:60:25:26:20:7c:9f:59:d0:44:a0:97:69:84:f1:
9f:0e:22:3d:9e:2f:67:1d:b1:75:97:9c:82:f6:ee:a1:e1:fe:
c3:da:70:9f:f8:8e:95:ad:24:10:06:73:58:21:f4:5d:07:38:
10:26:09:cc:6b:17:f1:4b:73:a5:48:8e:1f:f9:28:78:d8:07:
20:07:b7:37:13:11:24:20:be:ac:b1:60:4e:18:72:fe:08:ac:
ba:94:a5:cd:b0:81:3e:14:b6:cc:f2:80:bd:73:6e:6f:e9:13:
2b:ef:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:43:58 2025 by rpki-client