Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/NvB3sbtKygBuV_bHy4ubiaP6jUc.roa
File: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (raw, json)
Hash identifier: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=
Subject key identifier: 36:F0:77:B1:BB:4A:CA:00:6E:57:F6:C7:CB:8B:9B:89:A3:FA:8D:47
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0194266B3AE0A753659BFC41390AB56CBB0E
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/NvB3sbtKygBuV_bHy4ubiaP6jUc.roa
Signing time: Thu 02 Jan 2025 09:49:09 +0000
ROA not before: Thu 02 Jan 2025 09:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43584
IP address blocks: 46.16.160.0/23 maxlen: 23
46.16.164.0/24 maxlen: 24
46.16.166.0/24 maxlen: 24
91.197.140.0/24 maxlen: 24
91.197.141.0/24 maxlen: 24
91.197.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3a:e0:a7:53:65:9b:fc:41:39:0a:b5:6c:bb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36f077b1bb4aca006e57f6c7cb8b9b89a3fa8d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:62:1d:2d:57:17:1b:96:bd:00:b6:a8:a3:
ef:33:b0:c3:fc:85:7b:f8:16:a9:5c:38:47:9c:23:
b6:9b:14:85:80:68:fc:44:14:3c:60:d5:cc:53:3b:
77:19:37:02:e4:11:8c:5a:7f:08:26:d6:73:6d:07:
70:2a:c5:91:80:0b:c9:64:6d:fd:76:8f:fd:7d:4a:
66:de:ba:cc:28:a2:d2:60:75:4e:25:c1:69:f3:c4:
9f:76:eb:6c:be:cb:4d:05:93:08:b8:9c:c9:f9:c7:
c3:d3:54:27:7c:4b:28:a5:2e:a6:23:b1:9c:1e:b6:
ed:19:be:72:88:e7:0e:fa:bb:1b:8f:de:d0:b0:59:
9d:11:2b:27:fe:38:0f:7c:ab:e6:39:ae:99:cf:de:
7b:ce:e2:d5:47:c7:93:75:0e:81:a1:54:00:f0:07:
2a:d8:fc:66:92:27:39:45:a0:42:d5:6a:ef:76:f1:
db:c7:fc:43:7c:15:43:47:13:51:09:2a:1e:bc:f4:
37:b1:b3:73:86:ef:3b:f7:19:95:e7:c2:a6:69:a5:
cc:81:91:3e:27:0f:17:70:1c:cd:52:eb:09:ce:9d:
2b:33:37:99:4a:4b:5a:36:37:ca:bd:35:66:27:33:
a7:b9:26:f3:c5:6a:90:e5:8d:55:2d:92:51:d8:ba:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F0:77:B1:BB:4A:CA:00:6E:57:F6:C7:CB:8B:9B:89:A3:FA:8D:47
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/NvB3sbtKygBuV_bHy4ubiaP6jUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.160.0/23
46.16.164.0/24
46.16.166.0/24
91.197.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:88:6f:50:a3:0e:45:9e:07:23:2b:a6:03:c8:3b:38:05:c2:
f1:f0:12:00:6e:d2:90:e6:e4:3c:bc:e8:fc:3f:ec:95:76:fd:
a9:e0:b4:9a:3c:8c:bd:45:e1:ef:85:02:31:67:ba:e4:c1:a5:
c7:63:4c:88:85:7d:7b:ce:a7:44:bf:c8:8e:b2:13:df:23:5a:
a1:55:c4:b5:d8:49:5c:ab:24:de:80:c5:a4:b1:ef:ea:dc:45:
3e:ec:f8:62:af:72:f5:ad:f2:91:80:f3:48:cb:40:9f:3c:89:
3e:46:bc:50:f6:ee:f4:48:85:5a:23:79:fd:81:23:61:db:8b:
bd:17:77:48:f9:af:9e:83:c7:9e:4a:3b:a1:4b:2d:a5:a8:20:
c1:ce:5c:db:4d:79:61:1f:9a:a9:14:df:44:fe:71:a9:a4:c1:
d5:0e:e0:d8:0b:79:de:79:87:bc:8b:98:af:a9:6e:6c:48:b3:
29:a6:4a:73:63:3e:05:5c:8b:72:28:62:ca:7a:0c:3c:31:71:
9c:b2:db:ec:2e:3f:fe:1b:9b:66:08:ca:fe:c6:39:d3:ae:49:
99:19:87:78:bb:68:3a:6e:57:ac:2c:56:fe:30:58:86:3b:52:
0d:55:89:1a:18:e5:28:2b:d1:57:3e:08:30:ea:2b:18:4f:b7:
35:12:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:34:14 2025 by rpki-client