Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa
File: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (raw, json)
Hash identifier: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=
Subject key identifier: FA:3A:0B:5F:17:2B:FD:B5:48:5F:C1:98:BF:AA:40:F4:59:74:FA:C5
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0194266C44F400E4892578D835158ECABBFC
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12741
IP address blocks: 46.182.96.0/21 maxlen: 21
78.154.64.0/19 maxlen: 19
185.9.124.0/22 maxlen: 22
217.28.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:44:f4:00:e4:89:25:78:d8:35:15:8e:ca:bb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa3a0b5f172bfdb5485fc198bfaa40f45974fac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:94:17:dd:b7:15:a2:4d:e3:7f:33:d9:45:
bd:37:cb:f3:f7:09:7b:2e:92:91:f0:06:c0:50:99:
0a:49:84:5a:0c:92:79:39:86:21:8d:45:0c:5f:06:
a6:3c:8c:ab:ab:25:86:ed:37:2a:d9:5d:32:6f:d0:
38:08:a0:5c:c3:ba:b2:cb:26:72:a6:cc:fb:0c:8d:
14:2c:04:91:33:fa:fd:83:89:5d:f7:e4:5d:76:66:
85:03:ec:31:13:7d:d7:90:62:f7:5f:a6:54:04:20:
2e:21:58:80:26:a7:b8:23:56:45:fa:df:3d:0b:3f:
d8:13:5b:cb:f3:01:d8:b1:77:01:43:98:65:b2:be:
54:51:7d:f6:54:43:fc:e7:c5:00:1f:9a:86:30:8b:
b1:36:c9:88:07:8e:d2:ed:ed:ff:04:1e:79:79:72:
da:b4:8d:10:82:2a:b6:ea:5b:7c:a8:d5:aa:b5:8d:
bc:89:40:b5:39:ca:75:2b:2e:99:83:86:f2:0e:dc:
5a:30:1a:33:f0:43:31:41:b8:f5:a9:19:11:bd:5e:
68:c5:b2:ff:9d:f9:f4:51:f4:c1:aa:70:74:f0:e4:
0b:5e:c2:d9:2d:0e:a8:b7:ae:eb:98:97:61:84:5a:
a5:f2:98:ff:29:86:c3:ce:ef:5e:58:17:57:33:4b:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:0B:5F:17:2B:FD:B5:48:5F:C1:98:BF:AA:40:F4:59:74:FA:C5
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.96.0/21
78.154.64.0/19
185.9.124.0/22
217.28.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:53:8b:6e:17:9d:04:95:99:01:5c:2f:32:32:2e:43:f9:82:
a5:e1:27:e6:ed:56:16:f0:18:73:5c:d3:4c:4b:c9:55:39:8a:
4b:f8:43:cb:c4:71:68:e0:13:f7:90:bd:15:c0:02:cb:c6:95:
d6:e8:2e:7c:d7:87:d0:0f:01:40:27:ef:56:7f:4a:cb:d2:3c:
84:38:6e:40:67:d1:65:66:97:0a:d0:21:12:3a:98:bf:9d:22:
6c:0a:1a:92:6f:8a:95:df:b2:a1:ef:a7:10:49:9d:91:3b:57:
2f:12:5b:f0:7b:fe:b5:51:7f:02:98:5d:86:71:09:82:b5:3c:
aa:53:07:5c:97:aa:3f:72:3b:25:ae:cc:bf:74:4c:82:86:f3:
0b:fb:4c:5e:c2:23:ed:21:ac:a2:6e:50:fe:f4:99:e7:5d:7d:
14:52:5b:27:36:74:69:41:41:9e:16:32:c6:27:00:6a:64:2c:
b7:d5:04:c8:92:66:3b:9b:40:55:72:ec:bb:88:50:85:c9:12:
be:20:23:41:29:d6:1f:f6:7d:a4:d2:37:b3:d5:f6:df:19:98:
cf:7e:26:4b:5c:20:66:58:71:1f:5f:a8:1a:44:09:fe:2d:ab:
1c:46:e3:1e:3e:ea:95:24:4c:c5:eb:37:43:dd:26:26:38:74:
0d:25:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:41 2025 by rpki-client