Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/6_cwB_aNOhlx5E_GvZkyarRW0Z4.roa
File: 6_cwB_aNOhlx5E_GvZkyarRW0Z4.roa (raw, json)
Hash identifier: 7y4sh5xw48OqUBIdhgjLdNsXxahA8MbbBMgBPYk65Lk=
Subject key identifier: EB:F7:30:07:F6:8D:3A:19:71:E4:4F:C6:BD:99:32:6A:B4:56:D1:9E
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019643BC36F0B98184E662F3DBAA8E698E8C
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/6_cwB_aNOhlx5E_GvZkyarRW0Z4.roa
Signing time: Thu 17 Apr 2025 12:32:10 +0000
ROA not before: Thu 17 Apr 2025 12:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211995
IP address blocks: 46.22.225.0/24 maxlen: 24
46.22.226.0/24 maxlen: 24
46.22.227.0/24 maxlen: 24
46.22.228.0/24 maxlen: 24
46.22.229.0/24 maxlen: 24
46.22.230.0/24 maxlen: 24
46.22.231.0/24 maxlen: 24
46.22.232.0/24 maxlen: 24
46.22.233.0/24 maxlen: 24
46.22.234.0/24 maxlen: 24
46.22.235.0/24 maxlen: 24
46.22.236.0/24 maxlen: 24
46.22.237.0/24 maxlen: 24
46.22.238.0/24 maxlen: 24
46.22.239.0/24 maxlen: 24
46.28.237.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
109.237.112.0/20 maxlen: 20
109.237.112.0/24 maxlen: 24
109.237.113.0/24 maxlen: 24
109.237.114.0/24 maxlen: 24
109.237.115.0/24 maxlen: 24
109.237.116.0/24 maxlen: 24
109.237.117.0/24 maxlen: 24
109.237.118.0/24 maxlen: 24
109.237.119.0/24 maxlen: 24
109.237.120.0/24 maxlen: 24
109.237.121.0/24 maxlen: 24
109.237.122.0/24 maxlen: 24
185.55.36.0/22 maxlen: 22
185.55.36.0/24 maxlen: 24
185.55.37.0/24 maxlen: 24
185.55.38.0/24 maxlen: 24
185.55.39.0/24 maxlen: 24
185.77.3.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.233.35.0/24 maxlen: 24
194.164.222.0/24 maxlen: 24
213.142.158.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:bc:36:f0:b9:81:84:e6:62:f3:db:aa:8e:69:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Apr 17 12:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf73007f68d3a1971e44fc6bd99326ab456d19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:9d:01:dc:c5:e4:90:08:18:f8:a4:85:c5:
57:f4:07:d1:6b:2b:80:7b:56:3b:f3:f0:57:2e:54:
2b:65:d0:67:48:e5:86:fb:bb:43:8c:4f:fb:ed:01:
19:5a:db:5e:ac:d3:98:d4:95:46:5f:b3:c3:43:6b:
62:ce:62:18:df:e9:42:5e:4a:f7:41:95:d8:cf:30:
71:cd:ae:ad:2d:97:7a:f8:a9:91:30:5d:13:ec:14:
31:42:49:76:0c:14:a5:59:7f:1f:ba:16:c1:f4:7e:
43:a9:be:12:6a:cb:c7:04:77:85:1b:53:c0:a2:09:
57:24:c2:2e:73:83:33:73:83:59:80:eb:fc:31:bb:
5c:5c:56:1d:3e:40:69:9f:28:51:86:ec:d8:5c:c8:
16:a6:eb:72:03:db:5d:47:54:ac:87:65:ed:e6:05:
fa:1f:65:27:b8:a2:a3:3e:c2:ba:3f:9a:20:f1:29:
3d:08:b1:70:ac:0a:99:6c:30:4d:ea:4a:67:f2:4a:
1a:39:2e:81:28:9b:70:7c:b6:bb:24:1c:91:50:d9:
15:7e:93:08:56:7f:5d:02:a9:6a:5b:9e:b4:95:94:
9a:60:b7:c5:15:c2:63:65:e2:54:30:74:c1:a3:72:
85:88:27:3e:76:0e:80:e3:ea:b3:f8:a5:59:3f:f4:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:30:07:F6:8D:3A:19:71:E4:4F:C6:BD:99:32:6A:B4:56:D1:9E
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/6_cwB_aNOhlx5E_GvZkyarRW0Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.225.0-46.22.239.255
46.28.237.0/24
93.114.130.0/24
109.237.112.0/20
185.55.36.0/22
185.77.3.0/24
185.136.207.0/24
185.233.35.0/24
194.164.222.0/24
213.142.158.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
a1:18:92:d5:ee:a8:ca:77:9e:e4:cd:2a:7b:b6:29:a2:59:dc:
7b:c9:dc:76:b9:80:a4:e3:bb:8a:a4:ef:e3:47:97:71:a9:c9:
9b:da:0f:bf:f9:f8:35:67:ef:9d:be:94:e3:4a:3a:3a:8c:d1:
3a:58:0d:cb:28:b7:1f:c2:84:6e:2d:f4:2f:75:1b:c2:27:ab:
b0:a1:94:77:3d:7a:5c:63:21:ee:5c:e7:a9:f7:32:68:a4:98:
96:cb:fe:c3:29:0f:1b:4f:0b:00:f1:e4:23:17:d6:82:8c:f5:
f4:3f:5c:0b:2e:78:66:0f:3d:04:a2:6b:e4:34:7d:ba:ba:a8:
cb:05:e1:8e:5a:0f:fa:6e:00:57:15:ae:ad:57:2d:f1:55:64:
55:e7:2b:02:36:33:ff:09:ff:c0:1b:33:65:b9:fa:fe:13:e5:
8f:93:3f:26:2f:cf:ee:93:3c:98:3a:ed:d5:42:5f:af:72:bd:
8d:1b:7d:d6:96:51:e6:3f:01:ba:15:6f:36:5f:d5:76:46:63:
bd:74:e5:97:24:7a:da:d1:f8:a7:81:0e:c3:8e:2f:4c:19:05:
26:1e:48:08:55:27:f0:6b:99:d5:81:17:68:67:0a:94:1b:f8:
58:b1:b1:1f:cd:cf:e1:84:e8:b0:ee:c5:df:b9:a0:26:3e:95:
88:30:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:12 2025 by rpki-client