Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/uz4McPhf0ZJty4pFsDqtFJPUkMQ.roa
File: uz4McPhf0ZJty4pFsDqtFJPUkMQ.roa (raw, json)
Hash identifier: jXSmEgBurOdjHM+8Kd56IR1+to1H/cB1CMI91O3kaLk=
Subject key identifier: BB:3E:0C:70:F8:5F:D1:92:6D:CB:8A:45:B0:3A:AD:14:93:D4:90:C4
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D859C8CD982D75D7C08E9DAE06C889
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/uz4McPhf0ZJty4pFsDqtFJPUkMQ.roa
Signing time: Thu 02 Jan 2025 11:48:20 +0000
ROA not before: Thu 02 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209336
IP address blocks: 46.37.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:59:c8:cd:98:2d:75:d7:c0:8e:9d:ae:06:c8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb3e0c70f85fd1926dcb8a45b03aad1493d490c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:87:8c:d8:a1:70:d8:ca:43:f8:1c:b9:5b:
ff:3d:21:6f:82:0d:ec:32:73:4f:a2:60:e1:6e:4e:
e0:2e:c7:0e:0a:d4:e8:1b:39:c8:cd:84:fa:1d:5b:
35:3f:64:88:71:d4:18:da:fa:cf:79:46:67:58:9b:
cf:2e:87:80:5e:31:19:31:a5:bc:37:da:e9:86:a2:
33:df:67:63:39:13:55:f9:96:e2:a9:46:4d:57:44:
dd:53:a4:0e:cb:26:09:a9:d0:6b:41:0c:b3:74:fc:
dd:e5:0c:c6:34:1f:bb:d9:b2:0d:92:5b:6d:24:82:
b2:c0:3d:b1:82:9c:73:55:5c:76:45:32:36:9e:4f:
52:1e:a8:a4:54:09:6a:8b:a3:5e:d6:39:8d:0c:1d:
84:3d:29:37:9c:53:29:37:71:e1:3c:58:fc:1d:d8:
64:4b:bd:f9:33:a8:a1:14:4b:58:07:85:73:e5:ce:
90:ed:24:25:e4:70:27:9d:49:89:0b:8d:d8:3c:9e:
a5:ff:5c:2b:f3:12:33:05:2e:df:1e:93:06:a4:f9:
7c:13:e7:a8:7f:22:9a:a8:29:01:3a:09:d6:bd:22:
f1:4f:9f:93:da:3b:fe:c8:7e:d2:31:ca:01:df:63:
a0:8a:9c:74:0a:4e:3e:95:3a:e3:6d:bb:d1:23:32:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:0C:70:F8:5F:D1:92:6D:CB:8A:45:B0:3A:AD:14:93:D4:90:C4
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/uz4McPhf0ZJty4pFsDqtFJPUkMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.110.0/24
Signature Algorithm: sha256WithRSAEncryption
04:37:70:91:9d:8a:51:5f:a8:79:79:71:f2:94:57:f9:c9:8f:
5d:21:bf:83:e5:60:64:ba:19:1a:9d:d2:3a:9d:63:df:25:93:
71:b6:fb:f2:54:04:ef:7c:6e:d6:86:5b:a1:68:4f:86:74:d2:
b7:67:03:ee:24:78:09:fc:5d:4d:94:79:19:d5:3b:a5:22:fa:
1c:e8:3d:b7:97:a0:dc:4e:60:56:23:27:e0:55:f6:8e:a6:8e:
84:1f:9c:5a:98:94:1d:a3:75:60:e9:e3:98:6d:5c:ef:5a:90:
b1:77:08:3b:46:99:ea:65:f7:f6:1b:37:45:44:b8:53:a5:e7:
41:ed:55:01:95:0e:e4:8c:0f:e0:64:50:11:0f:f7:e3:ea:aa:
fa:a7:55:06:22:3f:65:eb:9d:43:d9:8c:1e:2e:d9:6a:40:e9:
85:35:d2:2b:d5:99:d1:f1:7f:00:4c:f4:ca:52:b3:5f:e4:0c:
02:f3:24:b2:ff:c5:fd:12:bc:46:0c:37:98:d2:c0:94:30:e6:
92:45:3c:1b:1c:9b:96:ab:79:d5:24:a8:73:19:f4:d7:8b:e8:
30:38:9d:32:f2:47:24:49:94:e0:b3:89:52:78:f5:92:40:10:
0c:9f:39:c6:f9:a3:51:9d:d0:1f:e4:f6:2a:12:2a:76:95:d8:
a8:15:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:55 2025 by rpki-client