Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/RB71fE5v8RGGcKN579UUTlog13U.roa
File: RB71fE5v8RGGcKN579UUTlog13U.roa (raw, json)
Hash identifier: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=
Subject key identifier: 44:1E:F5:7C:4E:6F:F1:11:86:70:A3:79:EF:D5:14:4E:5A:20:D7:75
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 0196D22A01DAA661DEC9853934A51292181B
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/RB71fE5v8RGGcKN579UUTlog13U.roa
Signing time: Thu 15 May 2025 04:18:10 +0000
ROA not before: Thu 15 May 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202024
IP address blocks: 46.31.70.0/24 maxlen: 24
79.98.126.0/24 maxlen: 24
79.98.127.0/24 maxlen: 24
185.54.16.0/22 maxlen: 22
185.54.16.0/23 maxlen: 23
185.54.16.0/24 maxlen: 24
185.54.17.0/24 maxlen: 24
185.54.18.0/23 maxlen: 23
185.54.18.0/24 maxlen: 24
185.54.19.0/24 maxlen: 24
185.141.12.0/22 maxlen: 22
185.141.12.0/23 maxlen: 23
185.141.12.0/24 maxlen: 24
185.141.13.0/24 maxlen: 24
185.141.14.0/23 maxlen: 23
185.141.14.0/24 maxlen: 24
185.141.15.0/24 maxlen: 24
2a00:d30:16::/48 maxlen: 48
2a00:d30:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:2a:01:da:a6:61:de:c9:85:39:34:a5:12:92:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: May 15 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=441ef57c4e6ff1118670a379efd5144e5a20d775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:45:45:c1:da:c9:d4:8f:ab:4b:d1:bf:9f:
84:d1:35:6b:25:99:38:83:03:09:7f:7b:cf:36:1e:
5e:1a:d8:18:d4:b7:33:d3:0a:a9:59:a2:2e:7b:2c:
d4:b3:3d:b3:a9:b4:c1:d7:87:fa:f1:92:d4:e3:e5:
ba:13:3a:c3:c9:f9:36:e0:4a:0e:6a:6f:91:9b:7f:
b3:81:3a:41:df:d4:d9:bd:ee:8c:ec:c5:4e:ad:2d:
ff:fb:44:02:43:0a:b3:c6:69:21:49:77:4c:3b:6e:
6e:1f:d3:35:e9:4f:ed:9a:74:db:f4:ab:6b:9b:51:
20:8e:72:99:ce:e5:97:1d:61:48:21:e5:e1:47:af:
80:e1:30:d0:99:99:90:94:1b:62:e9:fa:73:61:c5:
0b:9a:ba:ff:48:75:06:a6:22:32:50:84:3a:c5:bb:
db:f5:20:57:fe:0b:76:13:3b:ff:ad:a1:50:21:9a:
6d:96:a2:c3:55:9f:ad:81:42:a1:e2:d6:76:20:f3:
ae:eb:40:08:8d:c1:b5:19:d8:b5:92:5d:2a:12:bd:
15:27:04:6a:a5:51:85:98:53:ca:a7:48:34:4a:de:
28:80:0e:68:5a:c7:a0:03:81:49:6c:85:29:50:45:
fc:17:86:b4:83:30:8b:9e:a4:6a:38:26:65:a1:92:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1E:F5:7C:4E:6F:F1:11:86:70:A3:79:EF:D5:14:4E:5A:20:D7:75
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/RB71fE5v8RGGcKN579UUTlog13U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.70.0/24
79.98.126.0/23
185.54.16.0/22
185.141.12.0/22
IPv6:
2a00:d30:16::/48
2a00:d30:18::/48
Signature Algorithm: sha256WithRSAEncryption
b8:05:b4:42:f7:10:6c:54:e6:04:0b:40:c2:83:a0:bf:c5:65:
9f:3a:37:cd:b5:47:57:85:cc:76:e8:96:8a:bf:95:5d:0d:c8:
34:ab:b3:0a:02:9e:07:52:6f:0c:4d:70:8f:c3:c2:d1:e6:1a:
0e:2e:cb:91:e7:9d:9f:4b:37:10:1b:58:d9:94:1b:86:a1:fd:
3c:ba:58:2c:bc:8d:ec:60:26:6e:51:04:72:fd:bf:03:fd:1a:
54:a2:ec:78:05:bf:b4:f9:1d:38:54:53:fd:da:8c:de:54:98:
c0:57:06:c2:6e:0b:fa:9b:b0:30:45:4e:55:cf:05:64:95:4f:
37:c2:b2:8b:ce:59:78:04:1e:05:1e:c8:48:4f:49:1f:9f:a8:
35:0b:9b:89:b9:e3:e0:8a:4a:cd:55:16:03:73:fc:f2:a7:bd:
15:11:b0:17:7e:61:0a:2e:e4:88:96:7a:54:15:ec:92:7a:c5:
51:7f:7b:4f:59:07:98:8c:23:99:2e:34:19:37:d4:e2:56:d0:
92:62:0c:33:7f:bf:73:23:6d:79:73:84:89:c8:9b:6a:1d:aa:
44:e3:e4:8c:0d:c5:80:7d:1f:f7:e0:a8:e2:29:d7:65:cc:bb:
e4:7d:5d:fc:47:63:5b:da:03:2a:ff:4a:0e:21:63:fc:03:42:
3d:c8:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:07:03 2025 by rpki-client