Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/GHhfFCE3A402Gr9cqgeQDfKgELg.roa
File: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (raw, json)
Hash identifier: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=
Subject key identifier: 18:78:5F:14:21:37:03:8D:36:1A:BF:5C:AA:07:90:0D:F2:A0:10:B8
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 0194221FF01C3CD98FE2AFFF0A914FF0C03D
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/GHhfFCE3A402Gr9cqgeQDfKgELg.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56364
IP address blocks: 46.173.208.0/22 maxlen: 22
46.173.208.0/24 maxlen: 24
46.173.220.0/22 maxlen: 22
46.173.220.0/24 maxlen: 24
46.173.221.0/24 maxlen: 24
46.173.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f0:1c:3c:d9:8f:e2:af:ff:0a:91:4f:f0:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18785f142137038d361abf5caa07900df2a010b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:8b:19:e1:8b:ab:4a:3c:df:e4:09:2b:20:
65:c7:de:29:de:f9:26:2f:ac:c1:89:12:df:b8:39:
d9:93:43:36:03:4a:8b:42:22:13:b8:d1:5a:92:00:
a0:51:51:cd:ac:a3:79:1e:6d:2a:d9:2f:13:0e:c4:
0a:d3:31:01:3f:be:58:8e:cf:f1:29:aa:86:e5:7d:
f9:c3:39:2c:2a:13:1b:dc:52:48:96:e6:cd:88:ed:
11:d2:03:0c:5a:44:2f:53:03:15:7a:4b:84:67:48:
b8:aa:d0:6c:45:c4:0b:52:9e:45:7a:57:16:9f:a2:
6c:a8:45:2b:0d:58:aa:6a:f2:8d:a9:ab:30:a4:c7:
3f:b2:b4:ab:15:68:8e:77:7b:ed:06:b2:6d:f0:e3:
61:e8:97:bd:79:33:44:a2:68:ab:98:3d:b5:87:76:
9f:f8:30:24:4b:f9:44:66:4e:ac:fc:4f:0b:99:30:
58:28:b2:88:e7:87:3c:d9:09:37:20:99:ba:8c:dd:
0d:aa:cb:c8:87:6f:60:18:b0:ac:0a:eb:d7:61:ad:
73:ba:b5:35:65:f6:6b:06:1f:ed:af:4d:c7:0f:ff:
f3:4b:2c:2f:75:ce:30:e5:65:05:80:8d:9a:0a:d3:
a8:6a:d2:98:fa:53:47:d2:1d:d1:0d:bd:bc:fb:95:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:5F:14:21:37:03:8D:36:1A:BF:5C:AA:07:90:0D:F2:A0:10:B8
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/GHhfFCE3A402Gr9cqgeQDfKgELg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.208.0/22
46.173.220.0/22
Signature Algorithm: sha256WithRSAEncryption
33:e8:e2:86:c3:4a:af:90:c0:98:96:80:0a:9e:b6:ee:f4:4c:
87:bf:c2:eb:04:8b:a2:00:6a:32:bd:ad:2e:dd:bc:dc:e5:4c:
09:62:93:56:9b:e8:b5:1b:ce:e2:21:7c:f4:22:67:fd:c7:0b:
3f:d1:56:b6:5d:85:ab:2b:44:fa:cc:36:8d:54:aa:cd:0a:59:
d7:f3:dd:d7:a6:48:7c:c1:8d:9c:d1:d7:c7:e1:28:a7:db:94:
2f:2b:26:fe:2b:31:34:c7:5a:29:5e:4e:56:c3:09:ec:81:48:
94:3a:da:f4:1b:0e:66:be:53:30:c8:b0:91:af:e9:d0:fc:f4:
01:e0:68:46:c7:d8:c8:06:6a:a8:94:62:5f:5f:13:2f:ed:03:
d3:93:eb:3e:d5:a6:1f:9e:19:1f:0f:74:95:b3:38:2c:88:34:
88:9c:59:34:43:e4:bc:5c:e0:75:1f:0a:83:02:eb:b6:75:46:
89:18:9f:5d:57:0b:21:9c:44:3b:78:2f:c8:23:e4:df:f3:98:
97:d2:e7:b1:f0:e1:76:47:26:c6:36:17:48:09:b6:12:33:43:
4f:ef:71:31:9e:f8:d5:04:de:c0:30:5f:4b:9a:32:17:19:28:
f1:cd:62:d7:e4:2f:c7:40:5c:60:0b:65:c7:01:98:5a:1b:31:
f6:22:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:22 2025 by rpki-client