Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wEFBReYub_TeCbtnkjQHEDS6zaQ.roa
File: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (raw, json)
Hash identifier: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=
Subject key identifier: C0:41:41:45:E6:2E:6F:F4:DE:09:BB:67:92:34:07:10:34:BA:CD:A4
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019425FC5307AFF5E89CBADEBF00D90A5BDD
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wEFBReYub_TeCbtnkjQHEDS6zaQ.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41339
IP address blocks: 46.233.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:53:07:af:f5:e8:9c:ba:de:bf:00:d9:0a:5b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0414145e62e6ff4de09bb679234071034bacda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:54:40:40:13:6d:11:d8:30:e6:3a:7a:06:
63:02:c9:23:6d:81:72:38:1c:1e:ec:3d:96:a1:3c:
05:36:d1:e6:1a:5a:ef:c6:34:5c:1b:6e:85:3d:a2:
3c:f8:7b:cf:bd:17:62:ac:ab:95:66:4f:bf:fc:98:
1d:96:96:38:54:58:ce:ad:92:7c:67:9c:51:68:d3:
f8:90:07:38:2c:f9:ef:2e:3d:14:83:8b:8a:f0:5c:
f9:8e:ed:41:80:54:6a:05:93:ad:57:e7:98:63:40:
05:e5:b5:bf:41:e1:29:e3:80:b4:e8:a2:3e:e8:8a:
3f:50:a7:ee:5d:fa:cd:b6:80:20:10:16:7c:85:ef:
c8:67:25:c1:c4:a4:ec:3d:79:b6:06:0a:8d:e4:74:
ac:68:57:ad:d1:f3:e0:20:41:50:72:b6:43:e0:6d:
2e:72:5b:7f:5a:7c:70:ce:7f:9b:09:4d:3d:70:2f:
79:c3:a8:5f:e2:10:1b:34:1e:21:89:e3:87:5a:47:
86:f6:95:83:ca:8a:af:f0:b0:89:9c:b2:67:f6:1d:
df:12:6b:7d:21:fd:12:2c:92:6f:fd:eb:2a:a5:0d:
1f:9d:a9:ae:2e:0f:f2:2b:29:0d:de:2f:f0:0b:11:
45:dc:71:6c:71:5b:5f:5b:57:fe:32:7b:1c:22:ae:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:41:45:E6:2E:6F:F4:DE:09:BB:67:92:34:07:10:34:BA:CD:A4
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wEFBReYub_TeCbtnkjQHEDS6zaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.56.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:ea:4b:50:f6:9e:32:0c:56:7a:39:e8:2b:4f:20:ae:46:91:
39:8a:34:59:f5:0b:17:58:2b:aa:39:a2:90:d0:3d:83:11:c2:
8e:d7:62:6d:c8:10:50:4e:86:3b:6d:12:ca:eb:72:d6:a4:c6:
3f:e1:41:5b:bb:d0:0e:8d:72:b5:4e:11:7b:96:9a:b8:58:cc:
86:67:6a:02:be:69:51:84:d1:72:37:ff:27:9c:a7:2d:48:1f:
ae:0f:28:58:a9:26:12:20:1a:44:ac:e4:45:d1:e8:dc:20:f4:
30:4c:2c:cb:92:fd:29:42:25:d4:cd:8e:95:dd:e1:10:54:b7:
4d:99:d6:27:9f:6f:3d:71:c7:22:2c:47:a1:5c:43:94:0a:2d:
5f:a6:6e:d5:c9:92:ea:04:f4:41:6c:f5:4e:61:b8:cb:6e:d3:
fa:3b:fc:74:6a:a4:a4:ea:8a:3f:6d:13:39:0c:bb:99:96:9c:
6b:f2:37:20:dd:db:e5:65:1c:5c:9c:b2:48:96:bf:70:c7:4c:
e5:03:33:08:f4:f1:e9:a4:69:17:29:78:b7:1a:e9:35:8f:e8:
bc:b7:77:70:f0:87:8c:64:c9:c2:48:66:ad:a3:05:19:1b:ff:
8f:9e:94:aa:df:9c:c6:4c:f2:6e:69:8e:08:52:8f:cc:26:c2:
de:e0:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:35 2025 by rpki-client