Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa
File: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (raw, json)
Hash identifier: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=
Subject key identifier: 2F:79:12:EC:99:F5:CA:11:7D:4A:AD:41:D1:9C:61:9F:1C:BE:52:64
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 01942368FB8F5C41A8DEE9DF4DE792D5DE4D
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa
Signing time: Wed 01 Jan 2025 19:47:50 +0000
ROA not before: Wed 01 Jan 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34315
IP address blocks: 46.227.8.0/21 maxlen: 21
85.93.96.0/19 maxlen: 19
151.237.224.0/21 maxlen: 21
2a00:c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fb:8f:5c:41:a8:de:e9:df:4d:e7:92:d5:de:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 1 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f7912ec99f5ca117d4aad41d19c619f1cbe5264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:28:9e:8e:07:c3:6e:d9:88:b8:79:29:6f:
33:10:23:38:36:f3:a9:24:2d:5e:6d:c9:89:fb:a0:
eb:c9:35:c2:a1:4c:db:be:62:9b:83:ca:47:bd:3e:
b7:23:a5:dc:f7:5d:d6:02:7b:a9:ec:96:68:90:1f:
45:7b:89:44:2c:89:d5:f4:4b:54:65:52:cc:57:e8:
cd:4b:77:a0:c7:72:e2:f0:27:41:f5:5e:b0:9a:5d:
af:e4:c6:50:5d:60:a6:6b:26:30:21:81:41:2a:17:
27:3a:41:27:2f:aa:7e:b0:79:73:b3:63:58:d9:17:
09:91:8b:c4:95:96:05:c6:43:b4:34:27:e6:b0:27:
f5:f7:7a:38:54:9f:02:62:49:c5:2c:a7:61:e9:5f:
fc:a7:64:64:84:b6:1d:ad:ae:af:60:ce:8b:58:7e:
39:51:2d:7e:b0:6a:5d:b4:e2:07:7a:d6:47:f9:88:
9f:05:da:da:28:69:94:96:37:04:16:b5:fe:f7:15:
23:ca:e7:9d:c1:b0:5e:85:c1:55:60:56:e2:5e:28:
52:5d:e2:f6:23:11:0f:66:85:b2:5b:9f:83:5c:f4:
9b:f7:78:81:2d:ce:eb:ae:81:06:1e:0d:7d:e8:08:
f9:b2:75:94:22:69:23:0d:ba:ec:c2:bc:fa:0d:ff:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:79:12:EC:99:F5:CA:11:7D:4A:AD:41:D1:9C:61:9F:1C:BE:52:64
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.8.0/21
85.93.96.0/19
151.237.224.0/21
IPv6:
2a00:c40::/32
Signature Algorithm: sha256WithRSAEncryption
46:13:95:f5:bd:a7:0b:e0:00:37:d9:42:d3:62:0e:96:98:01:
09:68:08:ee:9e:2f:0e:4b:8d:1d:e8:e7:fb:45:34:a8:89:84:
ad:11:64:b4:8f:22:9e:9e:3b:d3:f9:69:38:e2:63:99:6a:1b:
a8:00:38:a3:69:6f:ff:ae:6c:1d:f3:85:d7:37:32:27:56:eb:
50:eb:ed:65:54:59:21:fa:c0:38:77:6f:15:ca:51:63:9d:e6:
8a:76:57:67:4e:98:e2:bb:c1:62:d8:7b:6e:86:ae:2f:2d:e5:
8f:6b:dc:53:7c:42:5e:6c:76:79:ba:bf:be:ec:54:60:dd:f6:
7a:99:a1:ff:1d:ec:82:9e:ba:8e:bc:d0:be:e7:de:ac:3e:91:
cc:75:88:9f:1a:ec:d1:0b:92:5d:ed:d4:29:1a:ca:12:a1:b3:
1c:8e:2f:e3:dd:06:6d:b5:eb:7f:71:59:d2:8b:73:84:65:ec:
8a:74:71:28:f6:4c:0a:5c:d2:74:61:17:d0:71:da:9f:3a:4d:
40:cc:f4:d7:82:0a:21:4a:59:f0:f9:8c:4e:f9:75:f4:3d:6d:
07:f4:37:ae:99:87:42:13:b1:26:34:30:2c:0c:bd:93:82:96:
8f:24:f5:59:ce:34:3d:7b:c1:12:74:12:58:96:91:fe:12:86:
be:62:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:13:21 2025 by rpki-client