Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/d-sWN4azI8sU7mlb0U-920Rsmtc.roa
File: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (raw, json)
Hash identifier: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=
Subject key identifier: 77:EB:16:37:86:B3:23:CB:14:EE:69:5B:D1:4F:BD:DB:44:6C:9A:D7
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 01967B33207727D5AF4905B6F583789BE1D5
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/d-sWN4azI8sU7mlb0U-920Rsmtc.roa
Signing time: Mon 28 Apr 2025 07:01:10 +0000
ROA not before: Mon 28 Apr 2025 07:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 158.46.144.0/24 maxlen: 24
158.46.145.0/24 maxlen: 24
158.46.146.0/24 maxlen: 24
158.46.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:33:20:77:27:d5:af:49:05:b6:f5:83:78:9b:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Apr 28 07:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77eb163786b323cb14ee695bd14fbddb446c9ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:d5:c9:dc:14:ca:ee:ad:57:dd:a4:6c:e8:
2a:56:fc:05:a0:84:96:71:40:0f:95:a4:97:38:db:
e3:8c:c2:25:43:a7:dc:d8:a8:5a:fe:22:c9:44:ca:
2b:c8:a3:85:56:f8:27:2b:90:1a:5b:ec:7d:5b:e6:
ef:5c:ed:6a:07:79:68:c9:84:9a:1e:ab:fe:70:89:
da:71:cb:78:ec:2b:65:f1:dd:39:88:cf:64:5e:27:
9b:1c:3b:4e:a1:57:13:b0:0d:05:0b:9d:49:af:f5:
09:f4:44:48:c2:40:0c:a5:62:da:2f:35:40:be:64:
75:11:8f:88:d4:1f:56:46:1b:af:52:33:b3:e0:10:
6c:6d:a2:98:07:58:f2:ad:45:f2:63:25:e4:83:14:
44:78:12:80:a5:d1:ec:b7:e4:84:98:58:a9:62:fe:
ea:ad:76:9c:cd:5a:0e:45:33:7d:a2:61:7c:e6:da:
bd:ae:ed:72:6b:10:2b:fc:45:39:1d:bf:95:5c:f9:
42:c7:d7:3a:7a:fe:04:24:ee:61:33:7f:7b:88:0f:
a8:78:cf:54:57:b4:7b:28:34:dc:73:a2:5b:5a:9a:
9c:57:ee:4d:da:dd:cb:b4:cd:09:02:ec:a4:c7:75:
bf:b9:d7:8c:ad:c3:69:99:0d:fc:ed:5b:5b:32:74:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EB:16:37:86:B3:23:CB:14:EE:69:5B:D1:4F:BD:DB:44:6C:9A:D7
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/d-sWN4azI8sU7mlb0U-920Rsmtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.144.0/22
Signature Algorithm: sha256WithRSAEncryption
85:02:ad:05:ab:c5:a5:74:3d:ab:8b:53:05:bf:6b:df:c4:2f:
39:3d:d6:43:09:e3:44:4d:c1:d8:44:21:00:96:37:7e:85:4c:
19:6d:8b:f6:54:57:ec:8f:0c:00:4c:58:a9:40:64:e5:b5:b6:
a1:2e:0d:59:c3:c2:ea:72:83:e2:ae:e4:a9:ad:f7:5e:c5:5f:
31:c6:d2:cd:f6:cf:9e:77:75:78:6e:6a:a8:79:75:b1:df:d5:
ec:6c:6e:e1:2a:e9:85:0c:20:ea:0f:85:6b:e9:4d:a2:1e:71:
a9:f9:bf:d8:8f:d0:5e:73:af:51:8a:d8:aa:93:0a:44:95:5e:
5f:1f:0b:bb:8a:db:6c:1b:50:3d:36:84:45:9e:e7:94:1e:62:
43:39:38:1e:a8:25:72:f6:bf:15:08:ba:55:af:9b:a4:c8:32:
cc:38:89:97:e7:cb:d3:c6:8f:4c:eb:c0:4f:c3:57:e3:85:51:
25:dd:52:fe:6c:b5:0a:1f:8f:8c:f3:3c:c0:ff:59:ef:48:79:
a9:96:d8:6f:49:c2:54:ba:ed:70:a9:d8:dc:1e:27:c2:24:96:
2d:41:96:35:32:85:99:7e:55:4c:d9:44:59:49:ac:40:91:ae:
b9:64:6a:4b:75:02:c0:8a:02:d6:b4:6d:31:09:e0:15:ce:60:
b6:a3:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:48:21 2025 by rpki-client