Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/IPImfFSLr48PnkrmzC6ajFmIFUc.roa
File: IPImfFSLr48PnkrmzC6ajFmIFUc.roa (raw, json)
Hash identifier: LSFbNNnWrIkDZvjlyfjRLLzoDQQbky2pRfDTNEQe95c=
Subject key identifier: 20:F2:26:7C:54:8B:AF:8F:0F:9E:4A:E6:CC:2E:9A:8C:59:88:15:47
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 0197586A1A7E8BEBDB1A4DF12793622C4AEE
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/IPImfFSLr48PnkrmzC6ajFmIFUc.roa
Signing time: Tue 10 Jun 2025 05:57:17 +0000
ROA not before: Tue 10 Jun 2025 05:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12297
IP address blocks: 46.71.0.0/16 maxlen: 24
87.241.128.0/18 maxlen: 24
178.160.192.0/18 maxlen: 24
178.160.245.0/24 maxlen: 24
178.160.248.0/22 maxlen: 24
178.160.251.0/24 maxlen: 24
178.160.252.0/22 maxlen: 24
212.73.64.0/19 maxlen: 24
2a00:f38::/29 maxlen: 48
2a00:f38::/32 maxlen: 48
2a00:f38:0:101d::/64 maxlen: 64
2a00:f38:0:111c::/64 maxlen: 64
2a00:f38:0:111d::/64 maxlen: 64
2a00:f38:0:111e::/64 maxlen: 64
2a00:f38:0:111f::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6a:1a:7e:8b:eb:db:1a:4d:f1:27:93:62:2c:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jun 10 05:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f2267c548baf8f0f9e4ae6cc2e9a8c59881547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:84:9c:fb:80:cd:f6:14:8a:0f:3e:55:e3:
3a:48:d8:49:8c:18:cf:10:0c:79:db:e5:8e:b9:41:
e6:d0:4e:e7:15:20:5a:42:74:88:92:9a:ec:17:8a:
51:d2:26:df:18:b3:ec:88:56:8f:a6:8e:91:c7:64:
17:d5:eb:47:96:93:cc:f4:55:01:b1:02:c8:9f:c4:
fd:17:6f:52:61:22:05:f1:a6:32:09:3d:fc:2c:38:
66:bb:3b:d2:66:95:27:97:52:1f:23:39:77:c4:fa:
c3:91:32:ba:1d:e9:af:1a:fe:23:48:e4:17:af:7d:
02:43:5f:ec:05:05:f6:90:21:80:28:41:6c:01:c1:
9c:f4:23:0a:b7:f6:2a:75:ed:9d:d1:eb:39:84:07:
9b:01:9b:15:8b:a8:5a:af:e2:d1:21:ca:4a:04:03:
f9:22:04:db:93:08:63:ce:0d:11:31:e3:0f:5e:ec:
ab:19:75:7a:ba:66:de:89:de:75:2d:67:1b:77:60:
fa:01:1f:e7:76:13:71:99:80:fc:0f:ac:c6:99:77:
86:45:25:b2:23:eb:b0:a1:49:0f:d4:ff:88:81:31:
8b:d8:cc:12:b7:6f:f8:bd:79:a1:0f:d5:c8:f3:8c:
f1:69:f2:2f:c8:b5:83:97:c1:38:da:4f:7d:f8:48:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:26:7C:54:8B:AF:8F:0F:9E:4A:E6:CC:2E:9A:8C:59:88:15:47
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/IPImfFSLr48PnkrmzC6ajFmIFUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.71.0.0/16
87.241.128.0/18
178.160.192.0/18
212.73.64.0/19
IPv6:
2a00:f38::/29
Signature Algorithm: sha256WithRSAEncryption
13:69:98:a3:35:ca:05:a4:e0:34:91:09:61:2b:72:fc:81:fd:
4c:67:30:1a:5f:7a:ba:ce:ee:7e:e8:e6:66:21:88:bb:14:b3:
d7:4b:4e:bf:2e:ad:c1:50:f5:e8:0c:6e:80:58:f6:2e:37:56:
4a:3f:d2:a4:1a:36:75:d8:9f:bf:b8:f6:e2:1f:ea:ba:d6:d0:
9d:7d:b3:9d:69:9d:0a:c3:58:a8:f4:fc:ca:08:cc:1b:5f:ca:
6d:9c:09:11:23:1c:65:c1:4b:70:ae:19:44:b6:6b:4b:ce:0f:
b8:4b:15:be:c4:17:99:6d:cb:b9:44:94:90:25:f7:3c:9e:51:
87:55:b3:81:8e:e1:b9:c3:05:19:a7:39:c8:b0:2b:47:d7:01:
5c:e5:26:fb:6d:94:62:25:56:5d:99:57:44:0d:5b:f4:b0:5c:
3a:fe:11:13:c5:7e:58:10:15:77:19:a5:cb:48:28:b9:91:7d:
e9:47:aa:67:d4:40:c1:e8:55:e8:c4:30:75:15:31:89:6b:57:
5b:cf:9c:ad:0f:b1:ef:eb:c5:71:7d:c3:ee:5e:87:c9:ad:b9:
dd:17:bb:86:e0:16:88:ed:e1:4e:fc:70:e8:6f:8f:be:c6:8e:
d4:e4:ed:db:86:3e:2c:76:4e:e9:e1:c1:d0:f8:f2:cc:30:40:
c6:76:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:34 2025 by rpki-client