Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/yMil0VU9iMTJivoi_lPAt-4Ce_g.roa
File: yMil0VU9iMTJivoi_lPAt-4Ce_g.roa (raw, json)
Hash identifier: AOwv0RlV94x3NlTYd1oZANIiYY1kB3TCsu+XGZoajDs=
Subject key identifier: C8:C8:A5:D1:55:3D:88:C4:C9:8A:FA:22:FE:53:C0:B7:EE:02:7B:F8
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 0196A99586434C898D9489FB726EE2894C2C
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/yMil0VU9iMTJivoi_lPAt-4Ce_g.roa
Signing time: Wed 07 May 2025 07:11:10 +0000
ROA not before: Wed 07 May 2025 07:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31357
IP address blocks: 46.166.216.0/24 maxlen: 24
46.166.253.0/24 maxlen: 24
46.166.254.0/24 maxlen: 24
78.140.0.0/18 maxlen: 18
78.140.0.0/19 maxlen: 19
78.140.4.0/24 maxlen: 24
78.140.48.0/20 maxlen: 20
78.140.58.0/24 maxlen: 24
95.170.96.0/19 maxlen: 19
95.170.96.0/20 maxlen: 20
95.170.104.0/21 maxlen: 21
95.170.120.0/21 maxlen: 21
95.170.120.0/22 maxlen: 22
95.170.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:95:86:43:4c:89:8d:94:89:fb:72:6e:e2:89:4c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: May 7 07:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8c8a5d1553d88c4c98afa22fe53c0b7ee027bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:20:01:e2:03:43:a5:e9:d4:fd:a0:47:96:
ab:5e:a4:97:bd:72:41:59:70:69:61:b7:eb:30:eb:
8b:fe:77:aa:ad:1c:e4:47:60:cf:00:91:01:7b:fe:
cb:c7:42:8f:9b:73:34:d6:98:e3:24:4a:16:ea:d2:
5b:78:da:de:55:c3:8f:bd:98:0e:06:2b:bb:aa:06:
0f:6b:f7:33:16:17:6b:52:1b:64:5b:81:9b:ca:df:
87:4f:a6:b3:43:fb:0f:82:7d:cf:a8:50:81:c2:c0:
18:b3:96:0f:e6:02:aa:38:6a:f7:7b:8b:6a:40:6d:
c5:d6:73:7b:e9:3b:87:f7:0d:ea:7a:95:4d:72:07:
41:94:fc:e2:96:d6:5b:3d:6c:38:4c:f4:19:22:5f:
46:7f:86:df:a0:75:9b:23:5e:fd:23:f4:9e:ac:c3:
05:9d:a6:c8:92:2a:eb:13:03:32:26:b4:d4:f1:e4:
28:89:5b:79:36:9f:ea:51:de:76:5d:ee:66:25:e4:
43:0b:bf:7e:02:55:b1:1f:a8:6e:84:df:2f:9b:3e:
20:21:6c:6c:f3:02:7d:40:8e:fa:34:95:ab:8c:6e:
77:3e:c3:73:90:f9:40:88:c9:18:22:20:57:f9:bd:
87:40:38:d3:93:69:01:50:16:e2:1f:28:01:4e:78:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:A5:D1:55:3D:88:C4:C9:8A:FA:22:FE:53:C0:B7:EE:02:7B:F8
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/yMil0VU9iMTJivoi_lPAt-4Ce_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.166.216.0/24
46.166.253.0-46.166.254.255
78.140.0.0/18
95.170.96.0/19
Signature Algorithm: sha256WithRSAEncryption
50:85:29:fa:6f:f4:1b:58:96:fa:78:36:aa:66:2b:c6:48:59:
c3:dd:fa:2f:07:3a:82:08:b5:61:5b:98:de:cd:aa:42:e4:d4:
72:63:e6:26:aa:ab:49:75:76:56:a1:39:5c:83:62:cb:90:00:
3d:4a:b2:c2:59:03:1c:5e:08:b7:f5:09:36:bd:fa:1e:e3:7d:
ec:90:d1:6a:85:ae:5c:13:e9:6c:3a:34:90:27:42:3d:02:35:
be:5a:c5:5f:b2:8c:b7:31:94:ca:c3:b6:ec:94:31:4f:14:13:
44:4f:53:57:c1:52:05:72:ef:79:8d:6e:6e:d4:b1:cf:5b:f6:
b7:fc:d1:6a:9a:da:dc:a8:58:20:bc:9f:8c:40:4e:3d:d5:8d:
01:73:fc:fc:7a:aa:37:0f:04:48:d7:df:1b:a2:fb:87:05:83:
fa:05:57:74:81:39:21:b4:96:51:f7:8d:47:b5:af:4d:4f:0b:
4d:e1:1c:74:7a:98:68:ed:e8:1f:cd:f6:2e:47:57:fe:b4:fc:
38:9c:c8:e0:c6:5c:61:48:3e:08:f2:27:27:55:ee:a4:cb:43:
d8:43:ff:63:8c:84:d9:99:ea:c4:08:03:7b:67:a2:de:5a:a0:
0c:99:70:b2:dd:82:21:94:14:54:37:9d:04:50:52:3d:f8:9b:
f8:64:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:16:32 2025 by rpki-client