Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1w35ylBYyiqS64H6CSTwAZihqa0.roa
File: 1w35ylBYyiqS64H6CSTwAZihqa0.roa (raw, json)
Hash identifier: 0OTuxwNpUsspsNOCpsiW2POvJW8bOCJPQjnJv/d/wNA=
Subject key identifier: D7:0D:F9:CA:50:58:CA:2A:92:EB:81:FA:09:24:F0:01:98:A1:A9:AD
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8868FB0DA4ECCDC491E9B3177832
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1w35ylBYyiqS64H6CSTwAZihqa0.roa
Signing time: Thu 02 Jan 2025 09:50:34 +0000
ROA not before: Thu 02 Jan 2025 09:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205060
IP address blocks: 46.61.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:88:68:fb:0d:a4:ec:cd:c4:91:e9:b3:17:78:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70df9ca5058ca2a92eb81fa0924f00198a1a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:fb:15:fc:04:1f:ab:3f:6c:d8:65:43:c5:
bd:f6:bb:58:6e:2e:9d:81:9c:2d:e1:5e:4b:a8:aa:
81:7f:ed:23:7d:f1:4d:db:f7:80:1a:27:e8:f6:b8:
f4:24:18:3b:71:17:ef:0a:6c:60:88:24:c6:c4:04:
3d:e3:15:06:73:a2:09:6d:84:af:c6:ff:17:86:d2:
ba:71:e9:53:f0:fb:0b:94:5f:e1:32:0a:08:92:5e:
19:c2:45:8f:38:77:43:1c:ee:71:e5:83:92:4c:f3:
7d:6c:e8:b4:7f:06:09:2a:b4:f7:96:c3:41:4c:91:
2e:5c:3a:87:c3:ab:87:63:dc:29:27:4c:df:9b:21:
6c:98:d2:30:59:24:c3:05:46:90:13:3a:30:3c:f9:
49:ec:1f:31:de:2c:73:12:1a:d8:c6:78:7f:26:87:
72:87:51:51:32:14:d7:a0:fc:f5:e9:4e:e7:36:9b:
1d:ce:25:47:9f:d0:67:2b:d8:c1:5e:ad:e0:c0:e9:
ec:5a:f2:7b:78:2d:04:52:e0:fd:a7:70:dc:21:e1:
d3:3c:d3:72:22:9a:2f:f0:76:1a:68:bb:df:35:f9:
e8:b4:01:3d:6f:c7:41:e6:cc:70:dc:1e:d9:d0:d0:
02:4a:0a:27:77:70:92:83:cc:f7:4a:5a:a0:4f:1c:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:F9:CA:50:58:CA:2A:92:EB:81:FA:09:24:F0:01:98:A1:A9:AD
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1w35ylBYyiqS64H6CSTwAZihqa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.61.209.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f9:0c:bb:30:43:26:95:d7:8a:cd:3d:86:fd:65:c6:86:56:
ca:66:a9:14:97:6c:40:bd:9d:24:3d:cd:45:99:96:19:25:b6:
38:29:10:68:9f:52:38:a2:e9:30:19:ef:6c:22:7f:fb:92:99:
e1:c2:dc:e2:1d:d8:1f:0d:c7:21:77:7b:18:60:5b:18:8a:ef:
1d:a6:a8:a7:81:e8:5e:0f:7d:45:06:22:2a:69:51:a7:0b:b3:
72:24:5e:59:ff:af:c5:1f:36:ac:d7:8d:36:9a:4d:6a:17:3f:
6f:78:85:82:a7:25:1e:0d:57:3a:53:eb:2d:2a:91:e0:b3:e8:
89:e1:51:3a:dc:ae:fe:49:06:84:83:40:36:41:96:7f:04:f6:
77:91:56:d9:4c:a0:64:81:3a:c6:0d:9f:73:1e:86:5b:90:f9:
7a:b1:81:ef:5c:db:e1:cf:65:73:d5:ad:98:6b:16:18:c1:53:
99:cd:67:64:54:be:5e:b0:d7:46:b8:64:16:f4:ca:8b:e9:d5:
86:61:43:5a:20:56:98:b5:dc:8b:91:5c:70:f4:54:09:31:41:
d2:87:c7:35:da:54:91:a7:6e:35:9d:1b:91:f2:bb:1d:c9:e3:
77:e6:56:b9:af:8f:43:fc:17:55:c5:90:bd:5e:84:c1:ea:b7:
f8:f2:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:51:35 2025 by rpki-client