Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8kxOGCrt1MS8QlnTcP97-f7QLqA.roa
File: 8kxOGCrt1MS8QlnTcP97-f7QLqA.roa (raw, json)
Hash identifier: 3+Om7M0eW4aIc238Xh7sSMgYbyMUJ/DKrUJM1HPg2Vk=
Subject key identifier: F2:4C:4E:18:2A:ED:D4:C4:BC:42:59:D3:70:FF:7B:F9:FE:D0:2E:A0
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019442751EA4B3DCC5A6A2C9E1F42C43C36E
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8kxOGCrt1MS8QlnTcP97-f7QLqA.roa
Signing time: Tue 07 Jan 2025 20:29:19 +0000
ROA not before: Tue 07 Jan 2025 20:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47959
IP address blocks: 46.23.110.0/24 maxlen: 24
46.23.110.0/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:75:1e:a4:b3:dc:c5:a6:a2:c9:e1:f4:2c:43:c3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 7 20:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f24c4e182aedd4c4bc4259d370ff7bf9fed02ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:65:3b:c8:5c:4a:f2:53:ba:f8:25:98:93:
7e:f6:c9:7d:4f:03:6d:a5:fb:3d:10:a3:7c:3b:8f:
4a:07:1c:65:5b:f0:8f:fd:70:9d:17:74:6f:01:8a:
be:60:5d:df:c4:6e:dd:06:61:2a:0e:9f:c5:96:cf:
b7:f9:48:e7:e9:0e:86:3c:c4:4f:3c:84:0c:81:09:
eb:cd:96:d4:19:4e:7e:a6:64:59:20:fb:16:84:1c:
6b:f7:e7:4f:b2:6f:75:a6:2c:74:85:50:c7:8c:76:
63:0f:ce:cf:88:1a:8f:1b:33:3d:50:0f:ac:2b:0d:
c6:f1:c1:2b:08:b0:c2:27:e2:31:80:0e:7a:fe:01:
8b:18:d1:b1:bb:85:25:ed:c0:a8:d6:57:57:ea:5d:
af:aa:da:76:a3:97:2d:f9:96:16:44:ab:43:5a:1b:
7a:be:c6:44:c1:d0:26:42:ec:8e:91:30:a2:c1:7c:
d2:0a:18:3d:50:bd:7d:12:e3:e0:b8:ea:1e:88:03:
91:13:3a:f0:cb:de:92:13:99:8d:a4:64:5e:62:f2:
84:88:07:79:7b:cc:01:5d:ca:ba:2e:5a:40:6c:91:
39:ce:1a:b2:eb:98:9d:cb:f8:52:ae:b1:ff:54:ad:
11:bd:ca:0b:ef:0f:f6:94:6d:ac:de:00:9d:9a:7b:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4C:4E:18:2A:ED:D4:C4:BC:42:59:D3:70:FF:7B:F9:FE:D0:2E:A0
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8kxOGCrt1MS8QlnTcP97-f7QLqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
21:35:ba:ae:dd:c6:b0:f3:78:ed:fe:24:bb:8a:78:ed:3c:33:
c1:4e:11:d1:d8:7f:97:b5:ac:f5:64:02:04:cf:18:c3:a3:6f:
1f:c9:2c:7a:cb:85:b1:06:d4:75:0d:df:e8:01:31:38:a1:3b:
7e:68:d4:14:39:50:cf:e1:d2:06:45:95:a0:60:6a:99:9e:0d:
84:e0:93:4e:d8:d3:ed:b3:65:dc:17:d5:43:5d:04:a1:8e:cd:
6d:51:ba:2e:8f:fe:16:ba:cd:d2:7b:79:2f:1f:35:23:8a:c8:
b5:4a:9a:75:d1:46:66:78:f6:31:b0:d5:53:aa:a3:97:04:61:
8e:53:b6:71:de:6d:bd:f5:27:80:da:b1:75:09:30:41:22:c9:
65:b5:0a:c4:3f:5c:84:f3:1e:a0:35:a0:63:25:d9:ae:37:79:
e0:b5:00:ff:25:ac:81:7d:fb:cb:25:8a:24:13:28:af:09:ed:
2b:ae:e6:e7:38:2a:9a:b7:3d:36:af:5a:4a:ba:8c:1f:a7:f3:
5a:97:cc:ef:56:ad:dc:4d:3e:b3:7c:5d:c0:2f:e5:2f:5a:57:
00:ef:23:2d:a2:e4:3a:5b:3b:17:d2:67:5b:4c:d6:d8:66:e8:
a8:8d:bf:81:cd:94:5c:f9:ce:3c:53:25:48:7e:c8:b9:fc:4e:
b9:49:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:02 2025 by rpki-client