Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/IWMZBVgX3cc5Wvjzl4jnuQAqeyw.roa
File: IWMZBVgX3cc5Wvjzl4jnuQAqeyw.roa (raw, json)
Hash identifier: o4xnvKpR1H4iSPNc9E+0WDHvByCtNlzRd8/EbIPtlMo=
Subject key identifier: 21:63:19:05:58:17:DD:C7:39:5A:F8:F3:97:88:E7:B9:00:2A:7B:2C
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019420D63C3861817EA886D88018B1DBB1E7
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/IWMZBVgX3cc5Wvjzl4jnuQAqeyw.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49603
IP address blocks: 46.19.152.0/21 maxlen: 24
185.88.60.0/22 maxlen: 24
185.92.152.0/22 maxlen: 24
2a05:ca80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3c:38:61:81:7e:a8:86:d8:80:18:b1:db:b1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=216319055817ddc7395af8f39788e7b9002a7b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:3b:28:6a:42:50:d3:aa:17:72:32:d0:3d:
dc:ba:0f:7d:c2:df:f2:79:e3:5b:52:69:9c:ca:36:
fc:cd:c8:91:be:64:b9:99:af:6c:d2:a8:18:3e:ad:
ad:1f:31:12:7c:9a:6e:e9:07:54:a7:f5:6a:8c:56:
87:30:77:74:d9:f5:bf:d6:1b:96:23:08:57:98:0b:
2b:fe:b9:57:15:76:3e:61:be:21:b5:58:74:d7:49:
52:f2:79:4e:d8:2a:79:f3:8c:14:f9:e0:e4:1a:91:
e2:9e:98:c7:80:a9:a2:3c:df:1e:fb:94:da:80:3d:
f0:b8:a7:4e:2e:7a:9d:ba:c5:48:93:3f:d3:2b:16:
6c:5d:b3:4d:c9:ec:5d:d4:ee:02:75:64:89:76:d5:
32:ed:9f:55:38:ce:9c:d6:b4:4d:3a:0d:b7:8f:68:
d3:bf:44:bd:07:cf:ab:50:5d:d8:87:f2:81:30:af:
2b:fe:91:d0:8c:47:11:98:01:4e:46:5b:e5:b0:3d:
0b:54:c1:fd:e5:fd:7a:75:3c:06:99:cb:8c:c6:b1:
75:81:f1:9d:f5:e0:57:d9:43:8d:99:ed:7b:02:cf:
1d:14:a0:68:e9:b0:5d:d1:ff:57:b8:62:27:f8:ea:
87:a5:d2:99:5f:39:bf:16:b6:8f:fe:3e:2d:60:1d:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:19:05:58:17:DD:C7:39:5A:F8:F3:97:88:E7:B9:00:2A:7B:2C
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/IWMZBVgX3cc5Wvjzl4jnuQAqeyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.152.0/21
185.88.60.0/22
185.92.152.0/22
IPv6:
2a05:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
a9:33:35:8c:0b:51:50:fd:d1:97:ec:bb:52:5d:a1:3e:b0:6b:
9e:03:00:c1:7b:7f:a9:ec:c4:ef:69:25:4e:9d:51:83:cd:17:
99:89:09:79:2e:24:58:3b:c5:a1:e7:e7:67:3e:b0:c2:83:07:
ff:f6:5d:09:8e:a1:81:8a:d9:f0:03:b8:0f:db:a0:ff:80:cc:
62:ef:90:8f:db:c1:61:ac:86:a1:80:e7:f7:71:b8:7f:73:ad:
29:f8:6d:30:47:00:a2:e3:91:79:ff:06:c5:ac:c8:57:ab:a7:
d1:49:62:a3:47:70:a6:69:3d:a9:09:28:98:a5:80:8a:10:d7:
b4:11:21:34:bc:98:79:7c:c8:56:e0:c4:dc:8d:ca:b2:ab:de:
8f:28:4a:e9:21:97:41:ad:31:36:69:c7:ad:0c:5b:17:49:ac:
38:86:dc:de:8a:56:52:cb:1e:ef:3a:d2:5a:19:fe:a0:f8:8f:
93:b0:aa:0e:b4:d9:86:89:de:41:9e:98:c9:45:5d:39:38:99:
34:5d:9c:e2:ca:79:35:c1:5b:ac:1a:a2:e8:3f:e0:c9:5d:f1:
30:bd:c6:fc:d2:c5:39:cf:6d:2f:c8:02:75:78:de:2b:af:eb:
da:0d:9f:ae:ab:45:0a:2d:10:c0:96:0b:82:91:b6:f9:35:18:
7a:86:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:35 2025 by rpki-client