Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa
File: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (raw, json)
Hash identifier: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=
Subject key identifier: 6A:BE:33:94:99:FD:38:FC:B5:E8:29:7F:1A:7D:80:4B:6B:AF:96:4A
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019420D5CBBCC7105920862813AE2A708DA3
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51561
IP address blocks: 46.226.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cb:bc:c7:10:59:20:86:28:13:ae:2a:70:8d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6abe339499fd38fcb5e8297f1a7d804b6baf964a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:c7:f0:a4:96:56:3d:95:7b:09:2e:8b:ed:
ce:a8:08:ee:17:b7:ab:2f:12:03:b8:b5:24:fa:ea:
21:0c:3d:fd:49:e8:e3:1c:bb:be:d0:5b:92:4a:c2:
d5:02:52:fc:0e:a3:3c:0b:14:d0:82:b4:91:6f:c3:
b5:22:4b:3b:cc:5b:44:8b:e9:2f:83:4d:d7:eb:9a:
b1:f7:67:23:c0:3c:cd:57:f2:f9:ba:1c:f9:df:f1:
ba:2d:28:89:c0:bd:11:e9:0a:ae:2a:a2:0d:b5:b1:
00:90:13:a9:96:4f:3f:6d:64:a7:1d:88:b2:d0:5a:
3d:d1:e3:d8:df:d6:9a:41:6a:66:62:aa:48:2f:f4:
8c:97:3d:ba:b5:06:68:05:39:53:ef:9d:ee:3e:a0:
a9:d9:d5:b7:4f:a6:e1:4c:7a:8a:21:5d:5f:56:17:
a8:fd:a3:ce:89:7a:0e:d2:14:da:c9:ac:25:56:55:
43:3c:44:1a:26:f6:b8:5f:a4:c3:b8:83:8c:03:6b:
d5:38:22:fb:5c:76:bc:88:51:5f:92:d7:24:5c:f5:
07:ab:88:b6:ee:0a:1b:47:58:17:eb:bb:bb:eb:79:
43:c9:03:f1:10:4d:ee:31:e8:0b:9e:ad:59:2f:6f:
6a:e0:b5:1c:12:7a:14:7e:7a:e9:d1:ba:6a:a5:31:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:33:94:99:FD:38:FC:B5:E8:29:7F:1A:7D:80:4B:6B:AF:96:4A
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.120.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cf:4d:11:84:a6:77:53:0c:2c:61:92:e1:2a:39:61:74:2e:
69:64:fb:58:53:08:ea:c6:8f:df:7b:6e:a4:33:9a:cd:e9:64:
88:bd:91:4d:ef:5b:b4:e3:b1:3e:63:6e:1a:48:45:95:d4:2a:
32:26:5a:a5:2e:93:ba:b8:16:7c:e7:b4:0e:3e:1b:cb:6c:fe:
31:0e:ec:8f:68:04:d0:8c:68:a6:36:c5:53:d5:ac:ce:39:c8:
bb:73:8b:91:53:1c:e7:18:c8:f7:25:ba:8d:fe:4e:d8:de:8b:
02:92:a4:fe:42:2f:bf:60:89:47:00:9b:a8:af:6f:78:36:3d:
8a:9f:63:5a:cd:11:20:4d:b3:16:71:44:e7:12:98:89:7e:57:
bd:1f:cf:62:83:14:13:23:47:62:ec:1a:5e:72:ec:a7:e6:5d:
27:cb:98:c0:d1:56:52:62:ef:d7:9d:4c:41:94:1a:8b:80:cb:
10:92:5c:23:5b:13:bd:cc:f3:6d:7d:2c:fe:87:1f:02:bd:0b:
3b:e0:4b:61:8e:b7:eb:15:35:ac:34:c3:1d:85:74:13:a6:cf:
07:2e:5f:ab:a3:c3:3d:08:8f:5a:f7:9b:15:ba:df:6d:a9:17:
3f:70:4a:53:6c:6e:08:9f:e1:d4:84:62:45:e7:f0:4f:c3:bb:
3a:94:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:35 2025 by rpki-client