Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/DIU4HLo0odnNllaYW94Ugml67ao.roa
File: DIU4HLo0odnNllaYW94Ugml67ao.roa (raw, json)
Hash identifier: elEgGwxKy2v1vcrJC1eNzcVW73q4S32+WPctUa6Z0K8=
Subject key identifier: 0C:85:38:1C:BA:34:A1:D9:CD:96:56:98:5B:DE:14:82:69:7A:ED:AA
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B678B2A5590B58CCFD56491734A5D3
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/DIU4HLo0odnNllaYW94Ugml67ao.roa
Signing time: Thu 02 Jan 2025 15:50:57 +0000
ROA not before: Thu 02 Jan 2025 15:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12507
IP address blocks: 46.151.144.0/21 maxlen: 21
46.151.144.0/23 maxlen: 23
195.49.200.0/21 maxlen: 21
195.49.200.0/22 maxlen: 22
195.49.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:78:b2:a5:59:0b:58:cc:fd:56:49:17:34:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c85381cba34a1d9cd9656985bde1482697aedaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:6c:83:22:83:21:82:39:49:47:ed:0e:28:
de:94:97:37:f8:e2:2f:43:7b:2d:6b:22:21:7d:69:
49:22:ab:76:9c:eb:25:c2:73:47:bd:19:48:27:e3:
bf:06:17:52:71:ec:9e:37:56:0c:4a:4d:43:46:21:
e7:f4:e7:d7:b8:b9:25:7c:45:58:b9:2a:10:5f:b2:
ad:30:39:75:a6:8d:16:36:19:28:cd:f7:d4:7d:08:
e2:33:61:37:be:d3:26:a1:9a:51:cc:78:6a:07:69:
70:da:f7:eb:7e:e6:2c:f4:0a:5e:dc:23:31:3a:e2:
77:33:c6:db:e8:5b:38:7f:2e:8e:08:e6:8e:8f:1b:
54:d5:6c:e3:fe:fc:e1:d4:b4:53:08:cd:22:3e:2e:
59:38:a1:c8:2e:78:91:af:77:8d:28:a4:4d:b5:65:
c3:5e:5c:4d:84:cf:e5:a5:a1:11:f1:2f:2b:83:fc:
f4:55:bb:5e:3f:f2:0a:bf:a0:ad:13:ff:fa:7c:3a:
8d:0e:0a:34:71:8c:b1:29:0b:7c:43:d4:5e:17:7d:
35:f6:89:b9:ba:41:5f:b9:ab:95:88:1e:ed:b0:cc:
89:a0:7e:b4:5c:7b:a0:4c:6b:4d:7b:54:35:39:0d:
1c:62:57:38:cb:31:59:01:bf:ff:b9:6a:74:a9:15:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:38:1C:BA:34:A1:D9:CD:96:56:98:5B:DE:14:82:69:7A:ED:AA
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/DIU4HLo0odnNllaYW94Ugml67ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.144.0/21
195.49.200.0/21
Signature Algorithm: sha256WithRSAEncryption
66:a3:41:e3:61:09:33:2c:66:0e:8e:69:b5:51:a6:c0:43:bf:
2d:4a:41:10:4f:3d:78:4c:28:d2:69:46:20:d1:30:2a:a9:e0:
68:f0:1e:15:a5:d8:50:80:35:c4:d8:cd:82:45:bd:8c:c5:3e:
9f:8f:a3:79:36:83:0c:ab:39:05:c9:01:43:af:57:d9:2e:fd:
26:39:84:ad:fd:7a:de:8b:f6:6c:ff:22:6a:23:35:66:11:fd:
5e:3a:11:5a:3d:11:b8:9b:68:69:da:92:24:ee:2f:8b:79:ca:
b7:ec:84:b1:ce:c4:2f:15:54:46:7a:9c:46:a7:5a:88:45:45:
1d:52:fd:bd:db:19:a5:d7:cc:9e:76:2a:e7:41:34:86:2f:ab:
ab:63:1a:c4:51:1c:8d:cf:5e:4d:83:8c:44:4d:24:21:c2:92:
9f:bd:5e:5a:3a:bc:92:bf:36:0c:96:cb:b6:36:f4:98:01:38:
f4:79:ba:7c:18:02:75:32:f7:c5:0c:53:df:8e:9d:9d:a1:1e:
c9:94:ff:1a:c3:eb:3b:f1:c4:09:50:f9:c3:f1:f0:1d:7b:44:
33:f0:0f:a0:22:c5:89:9c:40:8d:f5:b6:f2:84:90:ef:09:a9:
f2:8b:89:77:8d:e5:4a:51:68:d5:a9:3f:29:4c:0b:90:71:0c:
47:b7:ad:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:59:16 2025 by rpki-client