Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/iaYhX-wTSSW1QYw64E4AzhGwws8.roa
File: iaYhX-wTSSW1QYw64E4AzhGwws8.roa (raw, json)
Hash identifier: wTQucH27CFyiNY63Xms6GuDAYhKr9yvb+MoiHvTWRCY=
Subject key identifier: 89:A6:21:5F:EC:13:49:25:B5:41:8C:3A:E0:4E:00:CE:11:B0:C2:CF
Certificate issuer: /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Certificate serial: 0194266B37456E25217FC9EA2A70C7F532F0
Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/iaYhX-wTSSW1QYw64E4AzhGwws8.roa
Signing time: Thu 02 Jan 2025 09:49:08 +0000
ROA not before: Thu 02 Jan 2025 09:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50811
IP address blocks: 46.18.104.0/24 maxlen: 24
91.230.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:37:45:6e:25:21:7f:c9:ea:2a:70:c7:f5:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Validity
Not Before: Jan 2 09:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a6215fec134925b5418c3ae04e00ce11b0c2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:71:51:ce:6c:45:c2:52:39:b1:f6:a0:21:
1f:8a:95:7e:37:b2:1c:56:17:43:81:64:52:9e:b6:
9d:40:3a:38:89:d0:b0:c5:3e:10:fb:ad:b3:e3:e4:
b5:2c:9a:ca:fa:4f:b5:6d:78:38:df:ed:1f:1b:79:
6e:da:a3:20:bc:8d:dd:b9:a7:76:30:56:bd:39:cc:
27:92:49:1e:f2:e1:33:47:5f:a1:e8:60:9f:df:d0:
6e:09:3c:1c:ea:67:ac:1e:28:8a:27:58:77:e4:95:
b5:18:5c:3b:1a:85:7a:3d:b7:2e:8a:e0:0d:6a:19:
b4:1f:cd:63:76:10:af:d3:c6:ca:fb:d6:ae:84:ed:
4a:6f:e5:c4:ac:69:c2:ac:28:f1:be:ca:0c:2c:34:
43:1a:20:ae:c8:40:bb:e8:93:3f:d0:7a:18:90:89:
8f:2f:42:69:de:e0:82:7b:00:fa:7c:08:35:19:c2:
42:95:66:44:6e:64:93:52:a8:b0:59:59:2a:7c:97:
b5:37:10:9e:9b:5d:5b:f0:86:be:fb:14:a1:c8:2b:
9e:80:ac:29:f9:70:de:8c:12:9c:8e:7e:c5:95:91:
38:59:64:9d:d3:c4:e0:24:92:9a:09:b8:fd:d2:ca:
a9:a0:77:46:39:ea:97:60:34:42:d1:98:3b:a9:fd:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:21:5F:EC:13:49:25:B5:41:8C:3A:E0:4E:00:CE:11:B0:C2:CF
X509v3 Authority Key Identifier:
keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/iaYhX-wTSSW1QYw64E4AzhGwws8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.104.0/24
91.230.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d0:01:db:76:45:4b:14:68:9a:e4:c3:c8:15:cc:f9:cb:a1:
ed:67:c6:b8:25:5c:13:92:0d:b9:3a:94:48:61:2a:84:3b:8e:
38:4b:5c:24:77:18:71:20:86:bb:fa:7e:80:df:29:23:de:fc:
14:d7:2e:f9:e8:5a:1d:ab:4f:c7:e7:99:a4:a3:5f:4c:d2:de:
70:df:c6:84:c3:51:0b:f7:ee:28:ae:b2:94:68:77:7a:ff:4d:
6c:58:09:6a:c5:2f:ae:c4:b9:64:c0:59:a4:4e:00:37:a8:48:
a0:f3:d1:00:14:25:e9:c6:9b:b0:3f:a7:76:7e:bc:e5:3c:67:
c4:b2:87:a3:28:75:e5:b1:30:30:2c:0a:0f:64:05:00:a4:cc:
4a:f5:0f:75:a5:a7:68:89:0a:44:12:d0:2a:55:29:55:d6:2e:
24:6a:f2:28:ca:92:de:01:0b:0a:b7:3f:c4:97:52:81:ed:9a:
c9:bc:1d:54:12:79:f6:f6:dc:32:d3:b6:85:50:9c:ad:bf:82:
e4:24:a6:83:b1:38:9e:d0:e8:e0:ee:af:83:a2:22:dd:74:0d:
a5:3b:a7:47:51:5e:55:9d:1b:aa:76:bd:25:4a:ba:a6:88:06:
2b:af:fe:c1:a3:36:50:bd:c9:1e:44:2b:98:c4:69:a2:a5:fa:
3b:f3:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:31 2025 by rpki-client