Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/8YyDmxndvd6azClM9JTsxIv2kz0.roa
File: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (raw, json)
Hash identifier: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=
Subject key identifier: F1:8C:83:9B:19:DD:BD:DE:9A:CC:29:4C:F4:94:EC:C4:8B:F6:93:3D
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 019421442AE0EE2DF46819A5AE12EA73A69C
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/8YyDmxndvd6azClM9JTsxIv2kz0.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44299
IP address blocks: 46.232.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2a:e0:ee:2d:f4:68:19:a5:ae:12:ea:73:a6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f18c839b19ddbdde9acc294cf494ecc48bf6933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:ba:45:52:14:3f:80:0f:e7:69:e0:d5:47:
ff:bd:bc:48:0a:03:6a:b9:c2:2e:2c:a0:c7:af:68:
6a:7c:6f:5e:13:4b:79:81:c4:1f:b3:d6:19:8f:81:
6d:1d:7e:4c:ef:75:e0:f4:b5:34:8c:f8:65:54:d6:
03:cd:f8:bb:3e:c7:7a:05:21:6a:36:21:d0:26:b9:
81:b9:ec:4e:15:67:07:52:67:6f:71:de:ce:69:47:
d0:e8:1e:9a:5a:74:a6:6a:10:1b:ac:11:e9:d9:78:
1d:60:97:e6:9d:57:63:ba:67:a5:58:87:c8:44:8a:
47:69:96:69:ae:da:3d:17:0a:2e:3c:72:bc:12:50:
ae:00:d9:98:bc:fd:f7:c5:0e:11:88:a5:22:34:cc:
58:30:00:04:26:a5:a5:52:ff:49:02:07:f7:5e:5a:
39:2c:06:77:c3:14:ba:72:db:9f:2a:5a:51:d4:5f:
81:e4:98:fc:f9:db:51:ba:90:23:61:de:cb:bb:a8:
74:6e:d7:14:31:79:e7:94:68:eb:92:83:f5:c5:7e:
29:df:cf:25:dd:b1:05:53:48:45:df:10:10:7e:63:
ef:5f:2d:e3:2a:51:37:74:9c:66:e3:1c:4f:56:40:
9a:fe:52:48:c1:db:92:ca:ae:e9:8a:97:7d:a0:70:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:83:9B:19:DD:BD:DE:9A:CC:29:4C:F4:94:EC:C4:8B:F6:93:3D
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/8YyDmxndvd6azClM9JTsxIv2kz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:13:d3:5d:8d:36:38:15:ef:7c:83:e6:fc:44:79:72:53:96:
16:a9:31:0c:52:32:85:cf:0d:49:d5:72:9b:20:36:be:92:1f:
a3:fa:f0:06:df:7a:33:bc:46:89:50:8f:79:f6:d8:03:9e:96:
13:35:27:f3:27:d9:56:4d:ef:e6:cc:86:dc:89:1d:00:a2:9e:
b7:62:e4:ba:17:9b:c4:c8:ca:11:ec:3d:7d:49:3b:6f:f7:a5:
cb:85:23:31:53:58:df:97:73:1a:b4:eb:b4:4d:2d:3e:0a:c4:
1b:8d:5e:07:51:72:2e:21:f3:d9:04:d9:45:1f:b8:4b:27:5a:
3b:1c:83:70:65:88:43:3c:d3:dd:b2:60:37:7a:11:78:8b:73:
63:31:55:f9:93:d9:0f:1c:27:f5:31:1f:fc:34:e7:fe:8d:da:
63:6f:9b:13:5d:93:db:07:18:7c:82:0e:de:88:fa:8c:5a:9e:
0d:6f:33:88:17:ee:f8:15:a8:03:78:94:d1:4a:14:0e:c2:36:
3d:cf:8e:11:c4:58:41:15:cf:ad:e6:26:7c:bd:84:27:2c:71:
9a:c8:37:df:44:ef:d6:16:02:9c:e7:a5:c5:c9:ee:e2:8b:c3:
71:88:87:2c:2b:c7:a2:56:26:39:c1:6d:2f:38:fb:b4:7e:cd:
32:b0:60:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:53:29 2025 by rpki-client