Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Sxo51wfMar1fBgBlnSy08-4oReo.roa
File: Sxo51wfMar1fBgBlnSy08-4oReo.roa (raw, json)
Hash identifier: Y3GU6CyzJk0W8WbyiauLyIcWoj4XYsvqpue7jpmgdTg=
Subject key identifier: 4B:1A:39:D7:07:CC:6A:BD:5F:06:00:65:9D:2C:B4:F3:EE:28:45:EA
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFC86DA8F0C7092FF095393282F13
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Sxo51wfMar1fBgBlnSy08-4oReo.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47374
IP address blocks: 46.254.128.0/22 maxlen: 22
46.254.128.0/24 maxlen: 24
46.254.129.0/24 maxlen: 24
46.254.130.0/24 maxlen: 24
46.254.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fc:86:da:8f:0c:70:92:ff:09:53:93:28:2f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b1a39d707cc6abd5f0600659d2cb4f3ee2845ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:b9:fb:06:b4:b1:67:fe:cb:9f:cb:50:d7:
0f:2d:76:05:07:d5:17:27:29:93:a2:1d:b8:83:59:
d5:fd:ed:f2:72:80:50:79:10:94:0c:c9:6d:0f:7b:
66:ae:4d:44:b1:86:3a:be:8c:3c:55:ea:ec:85:0e:
44:49:81:4d:95:4b:c8:c0:3c:b7:66:ce:29:3f:bc:
3b:6a:63:f3:c2:4e:72:17:b9:fe:ba:1a:ca:cb:93:
6b:1f:75:9e:f1:68:01:e2:21:e0:d9:26:50:2a:44:
fe:9c:f5:ae:64:43:f6:f3:f2:df:2f:54:29:7f:54:
69:a6:cd:2c:ce:29:07:bf:ef:0d:3d:e3:80:69:9f:
28:a0:58:78:32:b6:9f:5b:9d:35:3b:84:ad:5f:6f:
6d:e2:60:a3:74:63:f6:14:87:00:0d:bc:a8:32:df:
49:4d:b4:22:f0:df:bf:7b:ca:74:65:a0:f9:79:e9:
4f:76:e5:cb:d7:d0:f8:e7:d7:bf:fa:3b:07:2e:f8:
b6:bd:dd:56:b6:49:1b:7b:bf:e1:a8:1c:2a:29:48:
58:dc:9f:b3:01:12:f8:49:a3:6f:d1:85:63:7e:dd:
c9:23:7b:b8:39:65:31:a7:23:da:13:79:98:d3:31:
f9:8e:66:fa:bb:3a:e3:1e:3a:ac:62:21:ee:7e:4e:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:39:D7:07:CC:6A:BD:5F:06:00:65:9D:2C:B4:F3:EE:28:45:EA
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Sxo51wfMar1fBgBlnSy08-4oReo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
73:ef:ac:e7:3b:65:33:92:88:22:81:37:19:2d:ca:5a:c4:e2:
85:63:92:f7:59:e0:43:07:ce:0f:dd:72:72:6c:0b:b7:f8:c2:
f6:6b:da:1f:92:29:81:9d:2e:d6:36:16:a2:42:31:14:22:e5:
d6:28:17:f4:2f:fb:2c:e5:48:2f:55:57:d0:2a:f4:5d:1c:44:
0f:18:56:a5:29:c7:ed:7c:60:09:4c:c1:17:02:96:ae:49:2f:
bd:a2:89:a3:f3:59:18:44:4c:f4:7e:c2:37:20:c3:3f:21:fe:
8e:46:b0:f3:33:12:20:c7:21:1d:6b:f7:71:4f:8b:da:f1:76:
30:e6:15:51:09:26:ec:0b:f3:76:b7:2e:ba:ba:d0:f6:5e:19:
b0:56:f8:1c:54:25:fb:e3:58:4c:13:86:33:84:92:46:21:1c:
25:01:eb:77:62:f9:fe:3a:21:2c:6a:93:4f:1f:36:55:b4:c7:
d5:d9:22:f1:55:99:a8:d5:52:ad:94:3e:a7:41:6f:73:b9:99:
9f:6f:c8:13:d4:75:5d:92:07:e2:ad:e2:9c:62:e2:24:9c:01:
ac:f8:b4:98:d0:d7:55:8d:16:53:92:94:d8:10:17:b1:8d:a6:
d7:74:52:3b:cb:04:d2:ee:c7:18:73:77:0a:4f:d3:0a:46:54:
53:d6:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:02:19 2025 by rpki-client