Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/blse6v5EH2fVrElwGZmlrK99XJk.roa
File: blse6v5EH2fVrElwGZmlrK99XJk.roa (raw, json)
Hash identifier: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=
Subject key identifier: 6E:5B:1E:EA:FE:44:1F:67:D5:AC:49:70:19:99:A5:AC:AF:7D:5C:99
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 0194228D564719B9B177DCB3D9F0C086F692
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/blse6v5EH2fVrElwGZmlrK99XJk.roa
Signing time: Wed 01 Jan 2025 15:47:55 +0000
ROA not before: Wed 01 Jan 2025 15:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52030
IP address blocks: 46.16.88.0/22 maxlen: 24
46.16.92.0/22 maxlen: 24
46.28.0.0/22 maxlen: 24
46.28.4.0/22 maxlen: 24
46.30.240.0/22 maxlen: 24
46.30.244.0/22 maxlen: 24
46.254.32.0/22 maxlen: 24
46.254.36.0/22 maxlen: 24
67.231.176.0/20 maxlen: 24
77.39.208.0/21 maxlen: 24
86.107.32.0/21 maxlen: 24
89.46.224.0/21 maxlen: 24
93.95.216.0/21 maxlen: 24
185.13.252.0/22 maxlen: 24
185.81.0.0/21 maxlen: 24
2a02:24b8::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:56:47:19:b9:b1:77:dc:b3:d9:f0:c0:86:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Jan 1 15:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e5b1eeafe441f67d5ac49701999a5acaf7d5c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:ca:27:94:b1:3e:87:60:42:b7:60:b0:ca:
d8:52:bf:12:0a:f6:98:e3:dd:ac:13:ce:e2:24:12:
ee:eb:8e:9e:fe:06:53:c8:55:4e:7d:7f:c8:6f:54:
99:65:f8:62:99:0a:49:b4:7d:a8:84:24:04:15:28:
a1:d0:38:53:f3:86:2f:c9:f7:05:35:c5:d3:75:59:
2d:74:b6:6e:67:60:45:4e:a5:32:ef:64:27:18:85:
46:e3:07:c0:44:d0:01:5a:85:90:58:aa:32:bd:7e:
6f:8e:29:b4:4f:c1:19:e2:09:fd:0a:72:e6:cf:de:
3e:f9:8b:d0:85:c7:0e:cb:0b:44:c2:11:74:c5:1b:
a9:c2:21:ab:b5:55:42:02:98:5a:f4:6d:b6:55:c8:
01:4e:36:72:1f:6b:59:4c:ca:1f:ec:67:b2:4c:b3:
04:bb:a7:72:db:1b:fd:a6:d9:e6:d3:12:9a:72:9e:
eb:a5:b2:70:18:c5:2d:b2:29:96:05:11:99:3c:a0:
d5:36:e6:87:36:81:32:9e:5a:54:71:c8:24:42:86:
6e:cd:5e:0a:40:40:2e:4e:79:bf:bf:c0:33:fe:cd:
9a:b8:ec:ef:02:96:2d:a5:7a:80:83:16:6c:cb:2a:
fb:57:9d:44:01:49:ac:0f:1f:39:53:02:43:d8:e6:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:1E:EA:FE:44:1F:67:D5:AC:49:70:19:99:A5:AC:AF:7D:5C:99
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/blse6v5EH2fVrElwGZmlrK99XJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.88.0/21
46.28.0.0/21
46.30.240.0/21
46.254.32.0/21
67.231.176.0/20
77.39.208.0/21
86.107.32.0/21
89.46.224.0/21
93.95.216.0/21
185.13.252.0/22
185.81.0.0/21
IPv6:
2a02:24b8::/40
Signature Algorithm: sha256WithRSAEncryption
2b:78:84:a7:e8:d6:17:9a:6e:1a:8e:23:35:c0:62:f9:4e:87:
df:ec:98:5f:8e:06:b3:e0:50:e6:fe:67:02:be:a2:bd:3d:85:
23:93:0e:9a:bc:55:a8:b9:f1:38:1d:58:db:f3:ce:b4:3e:0e:
df:60:f3:78:90:8d:e8:d0:6d:17:9c:25:b1:67:f3:cf:53:49:
b7:ca:90:bb:fa:26:e7:84:95:e0:f7:14:f5:4e:c5:21:bb:86:
cf:62:b8:d2:25:f9:10:eb:f4:1b:90:4f:18:fc:95:b7:88:a4:
9c:23:a1:9b:c6:16:bb:16:13:ff:3e:be:6a:12:45:1e:b5:14:
2a:32:93:04:06:34:5a:d4:fe:9f:c9:eb:aa:3d:9f:fd:0e:92:
68:3d:e0:4a:be:c9:8e:1c:c5:fa:c7:1f:30:56:36:60:90:19:
ec:54:97:e2:e4:93:83:84:3a:57:66:e5:e3:32:a2:c1:04:d1:
14:15:38:1d:be:6d:10:6a:b9:85:c2:dc:a4:c1:87:f4:d2:2e:
9e:b2:3f:44:7c:9f:c4:6f:eb:eb:df:f4:d8:69:2f:f2:5d:aa:
45:b9:72:3c:59:20:8d:fb:d4:20:3d:6c:c5:85:0d:1e:b1:ae:
52:ec:bd:18:19:ed:16:cf:fc:ba:1f:74:91:e7:6f:1e:a1:c4:
08:c1:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:07 2025 by rpki-client