Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa
File: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (raw, json)
Hash identifier: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=
Subject key identifier: F5:E3:57:8A:96:C8:93:25:5D:67:74:FC:36:A9:84:61:7C:12:2E:A1
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01955CDCA89D025F17D9EB7E440F567443F8
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa
Signing time: Mon 03 Mar 2025 16:35:19 +0000
ROA not before: Mon 03 Mar 2025 16:35:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205547
IP address blocks: 46.32.168.0/24 maxlen: 24
46.32.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:dc:a8:9d:02:5f:17:d9:eb:7e:44:0f:56:74:43:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Mar 3 16:35:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5e3578a96c893255d6774fc36a984617c122ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:7a:c6:6a:0a:80:2c:61:2e:8c:fb:38:5e:
7c:34:4c:f1:bb:44:ac:ba:00:ea:46:63:9b:be:1f:
57:51:4e:97:ed:eb:0c:a3:2c:c0:c5:72:02:91:18:
ad:3d:6e:09:d1:93:98:c9:80:41:94:d6:61:9d:d0:
2b:75:45:51:a4:a9:28:21:b2:1a:13:52:0b:8c:8a:
9f:36:2f:58:63:74:fa:4f:f0:c4:34:7a:6f:db:d5:
83:9a:54:31:8f:9c:25:52:f4:95:0f:6e:9d:1d:19:
0a:91:02:90:3a:18:f7:2a:56:d2:04:b9:63:05:ba:
b8:3e:f5:8b:f3:78:f9:51:c5:d7:e9:da:c0:c8:72:
d8:a0:c2:74:e2:6a:69:2b:b0:49:97:41:2f:a4:b6:
48:38:fe:e3:9c:ce:ad:dd:e3:4f:2a:41:d0:d9:d9:
78:47:6a:bb:9a:db:60:19:fc:a0:0a:a7:6e:1b:3b:
01:12:a8:b0:19:6f:5d:67:df:e3:0b:f1:fb:b5:93:
05:07:d6:ca:e4:fd:7a:b6:56:0d:cf:57:08:2e:f7:
65:6a:1f:5b:23:6f:14:04:b4:13:31:27:49:af:dc:
9b:92:24:7d:7c:5b:2d:4e:01:d4:15:d4:67:73:3e:
22:bf:42:e2:88:67:9a:4b:40:de:c1:76:d9:fd:e6:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E3:57:8A:96:C8:93:25:5D:67:74:FC:36:A9:84:61:7C:12:2E:A1
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.168.0/24
46.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f9:73:99:b0:45:de:15:0a:2f:da:c0:5d:8b:e2:f0:c8:b6:
91:c5:ba:41:7e:6e:06:fb:cf:20:f4:ba:e3:72:aa:22:ab:6b:
86:ca:2f:4e:b7:c1:cc:a2:b9:c9:df:ba:b5:a9:54:42:ae:16:
a5:f8:3d:6e:df:34:aa:dc:bf:7c:fb:bb:5e:57:d5:33:fc:69:
a7:01:10:a8:5c:e3:59:91:c7:e8:37:bc:e1:cd:95:25:80:92:
18:87:0f:7e:1b:d2:02:ba:d9:82:b1:98:6a:21:e3:3d:2b:23:
62:64:35:fd:50:75:4b:8f:08:6d:26:8b:a2:fe:e8:84:0c:b9:
42:72:e1:5e:58:ab:95:cb:13:62:94:5e:17:7a:05:91:9b:c8:
92:da:dd:e4:7c:ff:3a:88:64:50:99:38:07:08:49:49:6d:b4:
cf:c4:be:e5:7e:47:c0:1e:37:25:64:e3:23:28:6d:78:0b:03:
08:71:14:2f:b4:bf:57:56:2f:4c:70:0f:66:b2:1e:4a:5c:30:
86:b5:a8:82:5c:28:2f:05:1d:66:63:e7:15:9b:e7:b0:5c:40:
75:7e:01:04:69:e1:81:c9:b2:d4:f2:e5:aa:bd:10:22:8d:37:
e3:fd:ac:e9:e0:fe:3b:39:2a:00:e3:bc:ae:de:aa:36:6d:58:
bf:f4:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:32 2025 by rpki-client