Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/xEtUzfcqpQeJhZAcCyxrsVLjxCQ.roa
File: xEtUzfcqpQeJhZAcCyxrsVLjxCQ.roa (raw, json)
Hash identifier: PA6mXqLoVfB1vl9Qdv2t3v0X7M3ZLEJapIRIGu4wxNc=
Subject key identifier: C4:4B:54:CD:F7:2A:A5:07:89:85:90:1C:0B:2C:6B:B1:52:E3:C4:24
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01960C75821649DE7E0E7B6DDA01859B0145
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/xEtUzfcqpQeJhZAcCyxrsVLjxCQ.roa
Signing time: Sun 06 Apr 2025 18:55:49 +0000
ROA not before: Sun 06 Apr 2025 18:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 46.254.48.0/24 maxlen: 24
46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:75:82:16:49:de:7e:0e:7b:6d:da:01:85:9b:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Apr 6 18:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c44b54cdf72aa5078985901c0b2c6bb152e3c424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:08:bb:4a:e9:4f:9d:18:42:a2:37:03:cd:
30:cb:d6:56:87:e6:d3:6c:db:b3:92:c5:a2:3c:0b:
13:6e:a6:38:e1:c5:e0:4c:07:bf:52:10:77:67:65:
7c:f4:82:0e:08:af:45:93:98:e0:9f:64:00:a9:07:
69:e5:04:91:4f:37:8e:80:ed:5b:80:33:42:6d:07:
9f:f1:bd:18:dc:b2:86:5f:6d:f8:2d:e9:d8:3e:1f:
87:98:fb:0e:6f:b2:75:4e:f0:72:c2:2f:d0:28:89:
64:2d:dc:ae:46:e6:65:6f:c9:e9:9e:79:d9:d8:c4:
6b:17:f7:ba:6f:e9:5e:a2:eb:fb:dd:85:a6:f6:f7:
92:79:e5:5f:8c:ec:bd:d8:5b:d5:0c:4b:a8:0d:08:
2e:ab:0c:69:2e:51:3e:aa:b1:f4:14:c2:26:26:1f:
22:f7:82:a9:69:e1:b7:21:0e:9b:94:e0:af:1f:29:
89:19:8d:67:3e:a8:59:27:08:5a:81:4a:3b:b4:9c:
e4:11:28:12:b2:25:6a:fb:08:f1:7f:89:e3:c5:1f:
73:a0:43:e3:7d:1a:6b:45:07:eb:e0:d7:ae:c2:38:
ae:09:c0:0a:a7:3f:2e:a7:76:2e:06:2f:b2:ed:2e:
21:35:f5:13:c1:fe:b4:dd:06:68:42:60:eb:be:ff:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4B:54:CD:F7:2A:A5:07:89:85:90:1C:0B:2C:6B:B1:52:E3:C4:24
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/xEtUzfcqpQeJhZAcCyxrsVLjxCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:d4:64:72:05:2a:b0:ed:ba:23:cb:e2:d0:85:00:94:3d:a4:
ce:19:91:eb:9e:59:6e:5c:d7:d3:7d:77:04:b3:79:6c:98:ce:
a0:bd:58:36:19:d8:91:00:3f:83:43:75:c5:5e:2a:72:7d:10:
ba:1c:7b:74:8b:5c:ef:8e:69:08:84:bb:61:89:f1:e0:b9:1b:
00:9e:c2:b1:94:2b:7b:31:da:cd:1d:9b:8d:2d:a9:01:9a:fd:
41:1d:a3:1c:86:f4:c4:fa:ca:07:83:cd:54:6f:e1:d9:7e:1c:
8e:95:e6:bc:17:e4:55:d7:da:79:0d:94:f6:7a:de:39:48:61:
42:c5:97:01:be:31:c1:9f:80:af:b5:ff:51:9a:22:b0:cd:12:
ba:f3:7c:1e:07:b8:89:ac:bc:1a:36:2a:86:6f:58:0f:59:62:
98:ae:6e:81:4a:2b:0b:ff:c4:99:3d:49:53:8c:31:11:7d:dc:
5e:44:38:12:4a:f3:98:ca:a2:b0:c1:4e:bd:8a:7d:37:95:be:
07:33:31:90:11:0a:42:ce:b7:01:f7:82:bd:24:3d:9e:5e:72:
1a:ac:68:2b:b7:c3:21:8a:f8:5e:aa:01:4f:fd:19:6c:2e:0a:
ad:32:e4:71:1c:01:2f:6e:b8:c4:f6:e6:87:74:c2:eb:52:69:
e1:6a:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:25 2025 by rpki-client