Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/4anNvnqS_uath7Y6EK7D7BC3YzE.roa
File: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (raw, json)
Hash identifier: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=
Subject key identifier: E1:A9:CD:BE:7A:92:FE:E6:AD:87:B6:3A:10:AE:C3:EC:10:B7:63:31
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019426D9D53AC8D9E9819E51DC04EF0BEB0D
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/4anNvnqS_uath7Y6EK7D7BC3YzE.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39801
IP address blocks: 45.146.32.0/22 maxlen: 24
77.95.68.0/23 maxlen: 24
2a00:a4c0:c000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d5:3a:c8:d9:e9:81:9e:51:dc:04:ef:0b:eb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1a9cdbe7a92fee6ad87b63a10aec3ec10b76331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:10:e0:83:e1:d6:ac:9c:65:6f:f3:9c:fc:
77:75:00:a2:ca:4d:16:46:f1:d5:61:0a:8c:b9:44:
82:02:96:db:f6:a6:a2:2e:c5:1f:fd:62:fb:9b:be:
c9:fc:3b:82:55:ae:2a:97:3e:77:61:d3:03:08:d3:
5d:d9:a4:a7:5d:74:6f:49:48:ac:64:c2:ed:d0:cd:
3f:22:14:b5:13:d4:29:cf:33:a8:e3:75:40:d1:f7:
f8:b3:89:15:ab:c7:ce:81:c6:2d:78:58:d8:6d:2b:
ef:f8:d7:18:5b:ec:87:fe:8b:33:86:f5:0e:5a:96:
da:93:4f:d3:11:0f:d7:f0:ec:14:b2:71:e0:b7:4e:
cf:65:d6:c1:de:42:c0:54:c8:fc:42:d9:8d:89:51:
50:dd:fb:5a:7f:45:b9:ee:7a:9d:61:78:88:c7:e2:
e9:42:fe:26:98:85:8c:a8:81:fe:3c:89:8e:4c:96:
0b:71:84:2c:d2:4e:fa:cd:76:fe:d1:e5:fe:55:35:
93:65:07:de:21:74:6f:85:36:2b:8b:7f:a9:66:0f:
03:d5:16:e3:0e:8d:dd:93:2d:7e:5f:58:bb:e1:c2:
8b:50:f6:08:70:d6:9d:71:d9:62:75:45:c4:0d:05:
d4:9b:f1:13:0a:b2:13:0e:09:15:22:d1:d6:8b:db:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:CD:BE:7A:92:FE:E6:AD:87:B6:3A:10:AE:C3:EC:10:B7:63:31
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/4anNvnqS_uath7Y6EK7D7BC3YzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.32.0/22
77.95.68.0/23
IPv6:
2a00:a4c0:c000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:1b:77:8f:e6:22:f7:7d:16:fa:ab:53:e7:87:2e:c3:6f:3b:
a8:63:80:03:b2:f2:2a:1c:03:2e:5d:e9:78:fc:89:a2:9b:77:
10:3b:14:df:19:ec:03:a9:50:ed:24:7e:15:0c:fb:c3:9a:76:
e9:23:76:cc:ad:98:b6:81:3c:90:4d:62:c8:0e:ad:dd:e3:46:
31:16:a7:40:93:32:97:00:75:d1:d8:0c:d6:38:3c:d4:85:38:
5f:7d:e5:9f:51:60:7c:d3:66:60:06:4d:24:26:c9:1f:bd:7b:
c8:06:84:a6:34:28:0e:49:0c:ba:b9:96:93:55:23:24:a8:ae:
e7:e1:12:0c:df:78:9e:ac:59:49:50:7d:c8:fe:56:2f:54:c1:
50:19:43:97:0b:ed:dc:73:51:49:4e:a5:db:69:de:59:2a:fa:
2f:1f:1d:6f:8f:29:32:d7:1e:d9:9e:ac:a4:59:0f:1e:00:70:
f4:43:3d:54:5b:b6:50:67:60:f3:fe:61:1c:e9:b2:57:07:81:
f3:6b:35:b3:51:b2:fc:26:b4:96:b6:56:46:af:28:25:c8:4f:
63:f6:1f:00:55:6a:ae:0a:ce:35:48:43:ff:1f:d4:b7:f6:a6:
08:fd:41:c2:6a:9d:90:b4:70:f2:d9:93:06:f7:2c:a4:cb:e3:
ca:8e:49:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:24:58 2025 by rpki-client