Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa
File: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (raw, json)
Hash identifier: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=
Subject key identifier: 62:2A:F5:C0:59:C0:2B:E0:C5:75:6D:60:25:04:01:A8:A7:8B:FE:B8
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 019421B223BAEED68682DC3FF7A3DFFB519E
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57908
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.17.0/24 maxlen: 24
46.243.18.0/24 maxlen: 24
46.243.19.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
46.243.21.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
46.243.23.0/24 maxlen: 24
2a03:6dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:23:ba:ee:d6:86:82:dc:3f:f7:a3:df:fb:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=622af5c059c02be0c5756d60250401a8a78bfeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:67:3e:58:1f:74:f1:60:8b:3c:83:9c:25:
b3:63:eb:f7:5b:9d:52:42:30:14:a0:a8:3f:c8:81:
4d:41:ab:1f:95:ed:b8:66:14:63:cc:98:45:61:35:
5b:f7:92:ea:a0:e3:fb:48:16:18:2c:fe:31:4b:32:
e2:7c:20:b1:74:ea:2f:16:0a:82:8a:92:46:da:a4:
c8:ed:e2:92:1b:94:79:a0:41:e4:32:f1:c8:fc:f6:
00:a5:4e:8f:a3:8f:c5:39:af:50:e3:6b:fe:f8:95:
de:fa:fb:ce:53:bc:ef:da:b2:33:7c:71:af:b0:06:
00:63:8a:18:2d:41:e3:34:67:63:22:af:97:17:70:
1a:a1:ba:30:48:49:c2:c6:74:7b:bc:2f:85:d1:d4:
36:5e:69:aa:ed:e0:4d:4b:33:3c:46:80:5c:c4:67:
76:10:14:f7:c5:28:b8:fa:26:94:73:5d:3a:a1:00:
a0:f2:86:62:1c:21:d8:87:69:c9:aa:84:49:f2:46:
73:4f:f4:b4:9e:e4:9d:9d:81:6c:97:53:d0:ad:71:
3a:68:d2:92:62:2e:a5:9d:a9:6a:81:d3:12:07:92:
e2:1c:9c:53:32:a2:c7:6b:0b:6c:7f:d3:d8:d3:63:
17:5c:31:f2:68:7c:3e:7c:8d:85:18:d3:a9:64:27:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:F5:C0:59:C0:2B:E0:C5:75:6D:60:25:04:01:A8:A7:8B:FE:B8
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/21
IPv6:
2a03:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:02:a5:63:97:85:e9:26:03:f5:a5:bd:bd:dd:73:1e:4f:93:
62:fd:3f:05:64:e4:b1:32:98:be:93:d6:e9:e2:88:fa:ea:5d:
1a:75:3a:25:88:ed:c5:f8:7a:9a:4b:db:83:8d:4e:ce:54:93:
50:f2:41:dc:99:b4:54:5a:b8:59:9a:9a:78:36:eb:99:a5:ea:
69:f4:d3:e9:93:05:25:92:00:42:b4:e2:44:73:93:15:b9:9a:
54:fd:03:ae:b9:0c:81:6e:86:c8:0b:89:ff:fe:16:94:2c:df:
66:5e:ea:af:b5:46:b1:39:28:23:40:b6:be:7b:5c:c5:ab:40:
ad:f9:12:32:78:90:54:b2:6d:d0:8b:10:ca:65:10:06:db:2f:
77:fd:6e:5e:17:32:90:78:47:14:3f:30:92:12:3c:99:80:17:
47:82:d5:86:62:b1:3c:03:13:df:07:30:65:ab:68:d6:20:21:
e4:c2:99:c1:6c:99:83:13:89:83:bc:7f:7d:c2:ac:f1:23:fa:
d6:5f:9e:06:cb:07:e5:a8:c3:11:f6:56:83:09:6e:bd:6b:c1:
78:bd:51:58:34:77:b0:a2:aa:cc:7d:dc:e0:7d:9d:09:e3:96:
74:07:15:e1:eb:10:2d:51:2b:82:41:3c:29:b3:11:4e:c4:42:
21:e8:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:16 2025 by rpki-client