Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uowZ7cPMsMV0PZp1u8suCF0i07A.roa
File: uowZ7cPMsMV0PZp1u8suCF0i07A.roa (raw, json)
Hash identifier: R1YBNS/ULSFtpIhe0iPEBxvG4Idsi/pVtFONQPDElR4=
Subject key identifier: BA:8C:19:ED:C3:CC:B0:C5:74:3D:9A:75:BB:CB:2E:08:5D:22:D3:B0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01963B3683A3672A0B5D2802F3E68D2A7AA8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uowZ7cPMsMV0PZp1u8suCF0i07A.roa
Signing time: Tue 15 Apr 2025 20:49:10 +0000
ROA not before: Tue 15 Apr 2025 20:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 46.3.64.0/20 maxlen: 20
46.3.80.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.3.128.0/23 maxlen: 23
46.3.176.0/20 maxlen: 20
46.3.216.0/21 maxlen: 21
46.232.0.0/24 maxlen: 24
46.232.16.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.232.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:36:83:a3:67:2a:0b:5d:28:02:f3:e6:8d:2a:7a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 15 20:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba8c19edc3ccb0c5743d9a75bbcb2e085d22d3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:54:35:58:a4:69:1b:27:ca:44:3e:44:d1:
fd:b3:e9:c2:aa:9d:3b:5d:41:df:f1:73:33:92:91:
ba:a1:e2:4a:d6:61:45:8d:db:fd:69:2f:6f:3f:95:
6a:43:68:f9:2f:b7:ce:e5:cb:42:2f:05:04:c5:2c:
35:72:f5:2c:18:45:a2:de:27:3c:69:4c:a0:98:2b:
cd:f0:a3:52:55:c4:35:d4:65:44:fa:3e:31:57:d6:
73:23:3e:d5:ed:ba:a7:f5:76:06:30:ad:45:55:f8:
ce:f5:37:b2:cc:6d:5f:7d:64:77:33:a9:8c:45:e3:
7b:0a:b5:54:4c:89:4e:29:3b:b8:60:bd:d6:f0:bb:
6a:85:bd:eb:52:fb:31:11:5b:6d:2e:77:fd:0b:15:
83:b7:1d:b7:18:0f:9d:6b:6b:f1:4a:e8:40:d9:ba:
f0:31:01:b8:96:2f:a6:7a:1b:02:c0:84:86:d2:94:
c3:f1:c3:72:67:e8:5f:be:48:e8:e3:b4:bc:25:de:
74:90:af:1d:ef:a4:29:59:4d:fb:94:68:a7:17:2a:
9b:98:71:84:4f:e4:63:8d:ba:f3:29:96:63:a7:97:
35:1c:ac:b6:52:7a:f7:22:00:91:af:aa:06:85:92:
64:53:b3:ee:9a:66:b7:b2:42:32:c3:16:3c:43:d3:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:19:ED:C3:CC:B0:C5:74:3D:9A:75:BB:CB:2E:08:5D:22:D3:B0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uowZ7cPMsMV0PZp1u8suCF0i07A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.64.0/19
46.3.128.0/23
46.3.176.0/20
46.3.216.0/21
46.232.0.0/24
46.232.16.0/22
46.232.32.0-46.232.127.255
Signature Algorithm: sha256WithRSAEncryption
57:6d:25:13:95:f3:71:26:d5:c2:13:52:5c:04:15:7a:d3:9c:
7f:dd:0b:d6:ed:ed:e4:3f:16:a1:f9:4a:e0:bb:81:ff:32:70:
78:e5:f1:02:f5:f9:7a:5b:e3:61:7f:4e:fd:fe:58:8c:a1:0a:
83:71:fa:44:97:ed:02:1e:ee:86:0d:63:32:0c:69:78:57:de:
2d:42:39:ba:ed:e4:50:b8:23:c6:04:7c:4f:6f:51:e2:c0:41:
95:e1:2a:70:0b:5a:47:f7:db:44:45:53:3a:2d:25:3b:b4:00:
45:6f:bf:34:9b:66:bc:3c:fd:5d:b6:8a:00:1e:21:73:c8:0b:
73:e0:a6:e1:70:ed:3f:61:e3:58:d7:1a:db:44:8f:aa:ce:51:
4d:3d:c5:1f:16:d1:6a:f4:8d:94:7b:87:25:aa:6e:63:45:1a:
85:2d:dd:73:e0:ac:aa:bf:8b:93:f7:39:c5:d7:62:3c:17:89:
a0:85:cc:67:1e:42:88:86:38:ca:3c:ca:fa:e5:3a:ba:72:99:
c9:c7:a2:69:50:79:19:d0:14:f2:fb:bb:a7:ed:e5:cf:c8:93:
30:52:0a:19:04:7d:f7:32:97:41:d8:b7:6d:49:19:02:89:14:
4b:0a:1c:2d:94:8c:38:03:c7:bc:de:81:10:69:1c:ad:80:63:
46:db:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:10 2025 by rpki-client