Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tIAnE7olcf48QxrYYLP98BoNm20.roa
File: tIAnE7olcf48QxrYYLP98BoNm20.roa (raw, json)
Hash identifier: SgccbfmcOoOAqCbxUUBRnDTQCDmXYn2orIs/oZbYZEY=
Subject key identifier: B4:80:27:13:BA:25:71:FE:3C:43:1A:D8:60:B3:FD:F0:1A:0D:9B:6D
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01968057A7B373F6E5BAB423949DEDA6C31F
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tIAnE7olcf48QxrYYLP98BoNm20.roa
Signing time: Tue 29 Apr 2025 06:59:10 +0000
ROA not before: Tue 29 Apr 2025 06:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.220.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:57:a7:b3:73:f6:e5:ba:b4:23:94:9d:ed:a6:c3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Apr 29 06:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4802713ba2571fe3c431ad860b3fdf01a0d9b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:a5:d3:11:a9:0f:b9:b6:8e:ca:21:69:dd:
17:96:4a:b3:f1:5b:90:35:96:fa:54:bb:76:f1:67:
3c:15:c8:aa:ba:25:c3:27:47:4c:14:8c:80:6d:1e:
06:f2:6a:b1:57:87:d2:23:42:7c:00:2a:0f:b3:b1:
42:90:93:a6:a4:7c:98:5a:fb:e4:e5:2d:38:8b:43:
63:c1:53:73:5c:10:5b:3b:bf:36:e3:8b:1e:10:4c:
1e:24:09:65:ba:ae:fd:9f:ff:6e:fb:10:6c:51:38:
ba:c1:f8:79:4a:0c:32:17:cf:4f:63:9b:8e:1e:fe:
fa:11:7e:fc:11:82:76:5b:54:43:96:6e:97:0c:18:
47:b0:5c:2c:51:1e:68:34:70:4b:b3:44:5f:8d:ef:
b3:97:7b:f3:a4:d7:1e:81:d8:a9:c4:9a:1e:cc:c3:
66:67:13:24:58:cd:2a:1e:8f:76:4e:5c:4c:61:b1:
70:c2:2d:92:73:64:de:5b:b8:d3:ef:4d:e4:39:9a:
31:81:eb:d2:84:dc:1f:1b:0f:2c:03:48:cb:41:e7:
46:28:c7:9d:92:43:14:76:48:2b:13:2d:a7:c7:1d:
4a:ab:1f:fb:89:7a:01:cb:e1:9f:05:6e:56:b3:38:
72:07:8d:c6:a4:a5:83:7a:67:1f:64:f3:fd:be:55:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:27:13:BA:25:71:FE:3C:43:1A:D8:60:B3:FD:F0:1A:0D:9B:6D
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tIAnE7olcf48QxrYYLP98BoNm20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.103.0/24
46.20.106.0/24
46.20.108.0/24
46.20.110.0/23
185.160.194.0/23
185.169.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:f0:eb:9e:1d:2d:74:4f:6e:06:a0:71:69:47:6d:9a:8c:94:
6d:d2:df:c1:c5:aa:e8:2f:99:7b:03:15:ee:7d:f7:57:17:99:
7d:33:a0:f6:9b:89:00:b7:cc:62:72:50:5f:38:4f:58:62:14:
5b:17:49:e8:48:03:b3:9e:8a:8f:e6:89:59:18:06:09:26:d5:
98:58:5e:ce:3d:f3:8d:91:b0:db:e8:7c:4f:59:ba:1d:6a:1a:
43:a8:a7:83:2e:25:a3:03:d1:fe:b9:17:e3:ff:40:c1:d6:e9:
4e:b4:68:0c:d5:ca:ae:e3:f5:37:42:b2:0c:3f:52:61:11:61:
ad:4e:a7:04:af:06:cc:5c:4b:a3:25:af:46:35:d1:80:62:81:
c1:8d:cd:2f:00:f5:8e:9c:37:c1:92:ad:b9:49:5a:ca:68:08:
f7:cd:3a:4c:95:61:d0:12:07:3f:b9:37:f7:74:05:8a:d4:e2:
3e:00:db:03:ad:43:ad:de:1f:9c:46:cd:25:d3:eb:d0:ff:01:
22:0d:9a:75:1d:29:72:f8:bc:9d:06:17:be:15:d7:13:c8:c5:
38:79:28:e9:46:0c:45:da:a1:ff:88:97:83:03:28:e3:5b:2a:
4f:67:91:a1:04:de:fa:57:7c:60:83:a8:ae:09:e8:df:ae:e2:
38:a5:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:52:24 2025 by rpki-client