Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/chSPcB-8PJwSsmzBV-10wqsxDLw.roa
File: chSPcB-8PJwSsmzBV-10wqsxDLw.roa (raw, json)
Hash identifier: O+lS3nkRm8C+lzL/Hin40zEYWRx8Gg/FA+5nWyAJNII=
Subject key identifier: 72:14:8F:70:1F:BC:3C:9C:12:B2:6C:C1:57:ED:74:C2:AB:31:0C:BC
Certificate issuer: /CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Certificate serial: 01974074FC8FBD736BEA2D341455C6E31416
Authority key identifier: A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/chSPcB-8PJwSsmzBV-10wqsxDLw.roa
Signing time: Thu 05 Jun 2025 14:18:18 +0000
ROA not before: Thu 05 Jun 2025 14:18:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51933
IP address blocks: 46.183.32.0/21 maxlen: 21
2a0b:2a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:74:fc:8f:bd:73:6b:ea:2d:34:14:55:c6:e3:14:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Validity
Not Before: Jun 5 14:18:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72148f701fbc3c9c12b26cc157ed74c2ab310cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:61:e5:d5:3c:ab:d1:3a:ce:f9:e2:06:1e:
a9:77:42:58:4c:dd:cc:9e:48:53:8e:fc:2c:97:de:
68:60:be:a2:e7:88:0b:ca:59:29:f3:b6:45:f6:8b:
c5:62:72:66:3d:7d:fd:14:a1:38:e3:64:c5:1b:6f:
49:72:44:97:b4:08:40:56:5a:b7:74:ad:3c:28:5f:
fe:50:ec:25:3d:84:52:69:b0:dd:4b:89:e0:5f:f2:
3d:1b:68:65:93:32:f6:c3:22:c0:7c:ae:87:32:8e:
a6:bd:57:32:c9:01:e5:1f:2a:37:c9:37:19:e7:18:
d8:74:56:68:a2:a9:f7:32:e5:07:00:9f:36:42:88:
13:f7:a7:41:3f:0a:7f:1b:3f:7e:44:a9:eb:8c:00:
c0:fe:80:0c:92:d0:8f:bf:dc:9d:ac:2a:6f:52:83:
4b:57:60:ac:94:2d:e9:33:cc:42:74:bb:3c:ea:b4:
57:34:79:ff:f6:8d:f4:d2:6c:0c:4d:cd:dd:d6:c1:
f9:88:30:51:b8:42:19:fd:2b:4f:00:6c:c0:12:80:
0b:eb:36:c4:b9:36:32:6c:1d:a1:42:db:27:f0:92:
61:9a:da:e7:5b:39:d9:bd:68:de:d0:dc:56:57:e2:
be:f4:5d:ee:60:fc:45:c9:79:1f:5f:be:5a:b0:ed:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:14:8F:70:1F:BC:3C:9C:12:B2:6C:C1:57:ED:74:C2:AB:31:0C:BC
X509v3 Authority Key Identifier:
keyid:A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/chSPcB-8PJwSsmzBV-10wqsxDLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.32.0/21
IPv6:
2a0b:2a00::/32
Signature Algorithm: sha256WithRSAEncryption
5d:24:00:df:d1:b4:11:43:fd:60:a8:af:93:c8:78:bc:cc:fe:
e2:3c:cb:37:6e:32:37:e7:25:3a:e2:24:4a:d3:93:e3:3f:3e:
d3:f2:23:d1:89:7e:16:90:58:a8:ec:fb:3d:11:b6:94:45:cb:
72:c0:cc:67:79:96:cf:18:fa:de:59:28:6d:09:7c:42:0b:86:
7a:7e:77:cd:65:70:05:b4:ef:95:41:26:56:87:ec:96:d3:7a:
8a:28:ef:be:a9:20:22:be:62:ea:5f:df:8f:ff:a3:51:b2:fd:
90:bd:ea:e7:6f:7a:c0:c6:32:36:5e:9c:53:d8:a1:28:1c:40:
4c:83:90:71:d8:c8:66:f9:d1:c8:db:53:7f:12:84:5d:a4:18:
07:42:36:a5:78:81:95:3c:b4:81:30:6e:28:71:df:e7:b2:db:
4b:59:9a:59:f9:be:55:28:58:cc:1b:d3:04:1d:70:a0:55:da:
71:75:16:2f:03:db:e6:d4:18:56:b1:9f:37:6c:18:74:f9:d5:
d6:98:db:df:ec:02:c3:cf:21:63:73:d9:d7:f2:80:63:31:af:
99:2f:7e:f7:07:e6:b5:9d:ff:61:13:a9:74:f8:36:34:54:cd:
8a:52:85:62:16:55:ae:f6:96:9b:e1:b9:9a:9d:00:17:b8:9b:
a1:5e:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:46:57 2025 by rpki-client