Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/blSvVBOfQQX8HPgRw9s7J2WaT7U.roa
File: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (raw, json)
Hash identifier: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=
Subject key identifier: 6E:54:AF:54:13:9F:41:05:FC:1C:F8:11:C3:DB:3B:27:65:9A:4F:B5
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0194236A0ABF4CD88007BF2E569B4F1A3EED
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/blSvVBOfQQX8HPgRw9s7J2WaT7U.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7393
IP address blocks: 46.254.108.0/24 maxlen: 24
91.205.223.0/24 maxlen: 24
94.247.138.0/24 maxlen: 24
193.3.175.0/24 maxlen: 24
194.62.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0a:bf:4c:d8:80:07:bf:2e:56:9b:4f:1a:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e54af54139f4105fc1cf811c3db3b27659a4fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:92:85:9a:21:4d:b9:dc:cf:59:fc:fc:fe:
cf:c0:91:eb:d7:73:2f:28:38:af:96:f4:aa:65:f2:
94:66:a6:88:cb:83:91:ad:ef:cb:8c:d7:56:24:5a:
a7:43:cb:bd:29:f0:a1:dd:28:37:96:d2:14:84:87:
dd:4f:d3:ae:6b:b0:98:23:1a:ef:f3:a5:64:ff:db:
82:08:b9:e5:c3:0a:42:0f:54:bb:09:c8:5c:bc:7a:
cc:e4:6e:47:6e:09:88:c7:b3:8b:7f:ae:ce:eb:f2:
db:14:be:cb:0d:ca:59:0e:49:93:7a:4a:70:67:f8:
e8:9a:54:85:81:d9:1c:46:49:f7:20:1d:e2:50:a4:
19:58:67:01:b4:61:58:99:fc:2d:97:50:39:eb:28:
d2:8d:ee:68:53:20:bd:9c:e9:06:c8:34:fb:1b:6b:
11:2b:2d:08:a9:62:9b:c5:68:41:5c:db:c1:91:10:
0a:91:ad:81:f7:88:8c:c6:1d:53:91:99:e3:80:8f:
71:bc:d8:4d:e6:cc:45:84:0b:06:36:be:9e:bf:b3:
df:8e:28:21:89:34:6c:bc:d2:b5:a0:9b:47:60:e6:
20:97:60:b1:00:1d:b2:e9:99:c3:73:25:82:6f:32:
59:f1:6e:d5:89:2d:1f:76:4f:cf:17:ad:3b:64:d5:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:54:AF:54:13:9F:41:05:FC:1C:F8:11:C3:DB:3B:27:65:9A:4F:B5
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/blSvVBOfQQX8HPgRw9s7J2WaT7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
91.205.223.0/24
94.247.138.0/24
193.3.175.0/24
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:31:e8:38:04:eb:1d:8d:0b:fd:06:fb:8a:9e:f6:39:22:41:
29:4b:c4:fd:5e:4d:c0:6a:54:35:cd:47:c7:55:ff:7a:00:57:
5a:15:e7:d7:19:77:04:d1:2c:ad:aa:d4:63:34:39:7b:9f:3c:
c0:52:51:da:87:be:21:4f:54:de:0e:9a:1e:3f:84:1d:f9:4d:
81:92:8b:db:52:e1:75:5f:0e:90:63:0a:e5:66:84:2f:09:99:
6a:e4:f2:9f:1e:8f:2e:ee:0f:89:9f:55:85:94:7f:04:0d:7b:
86:07:1d:bc:37:4d:ea:ea:61:a7:c5:0a:e7:20:dd:be:f2:07:
66:92:80:7a:c0:0d:54:33:ac:5d:bb:44:cc:98:fd:48:8b:7f:
43:02:51:ec:1e:88:29:03:4e:7a:1a:fe:b3:8e:6c:ed:ae:88:
a8:32:8c:0d:7c:1c:0e:b3:81:f0:ca:00:73:ab:cb:03:26:3e:
a5:f9:dd:e5:05:07:a0:b6:f7:7f:28:4e:3c:eb:22:5c:e2:94:
89:b9:eb:7a:d2:b8:ef:15:af:67:7d:76:4f:fe:95:e6:e1:42:
1c:40:52:6b:2f:ef:4a:29:13:88:63:7f:60:01:32:4f:c1:09:
31:d0:77:a7:d7:47:4e:69:86:c9:88:3c:67:b9:98:62:55:e3:
cf:98:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:03:33 2025 by rpki-client