Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3COYIOTO4sCpxZAxKUTfqsgFhgI.roa
File: 3COYIOTO4sCpxZAxKUTfqsgFhgI.roa (raw, json)
Hash identifier: 4qs/+9+PAO4XRHs0wV3tOlY1uXt946Lgb+WOP1Qk7/4=
Subject key identifier: DC:23:98:20:E4:CE:E2:C0:A9:C5:90:31:29:44:DF:AA:C8:05:86:02
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019667E1738B72526BC32B42647E547E37E5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3COYIOTO4sCpxZAxKUTfqsgFhgI.roa
Signing time: Thu 24 Apr 2025 12:59:10 +0000
ROA not before: Thu 24 Apr 2025 12:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 46.34.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:e1:73:8b:72:52:6b:c3:2b:42:64:7e:54:7e:37:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 24 12:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc239820e4cee2c0a9c590312944dfaac8058602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:bf:95:05:b8:b3:89:46:d1:67:83:b8:e0:
4e:5c:36:58:b0:33:b8:3e:e8:10:5a:9a:90:36:4d:
19:1c:0f:c9:a9:e4:e5:f2:dc:90:f0:75:1f:f9:0e:
82:c4:71:05:b5:72:c0:ae:2b:6c:3f:c0:94:a7:a1:
b4:26:74:0e:35:e3:55:8b:24:0d:38:92:0f:c7:6a:
68:32:c6:f8:07:d8:fd:ef:d2:f0:b8:ba:04:9c:91:
e1:15:2d:59:77:68:62:5d:94:b9:e2:de:24:ac:d1:
da:77:66:46:da:0f:af:5a:de:b6:4b:2c:0f:03:60:
04:6b:2a:76:6b:11:86:da:30:b2:66:1a:c2:d9:6f:
3e:6c:39:90:2d:5f:ca:e2:1e:cf:f8:9f:46:c7:7b:
db:a7:2a:f3:49:7b:8c:ea:58:ab:25:f0:96:56:2e:
cd:17:01:a2:4b:29:ab:ea:34:ee:2c:2e:17:5f:67:
82:ec:9f:72:6e:f1:6e:84:48:1e:c1:df:f5:88:1a:
27:ad:98:ea:8f:a3:20:5c:55:1d:95:78:4d:58:23:
e0:65:f0:b8:9d:77:b1:ce:ad:06:34:37:c9:f2:00:
04:bb:19:4b:dd:66:7b:d3:0a:82:40:8a:4b:a5:b7:
37:3d:24:7f:61:f1:d0:eb:54:ca:4b:57:bf:d1:9d:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:98:20:E4:CE:E2:C0:A9:C5:90:31:29:44:DF:AA:C8:05:86:02
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3COYIOTO4sCpxZAxKUTfqsgFhgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.50.0/24
Signature Algorithm: sha256WithRSAEncryption
00:21:99:13:a2:b0:b5:ab:72:ce:67:45:f3:5b:46:b1:86:8f:
1c:52:6d:3e:f5:a1:82:3d:98:46:d9:0b:8d:c0:70:65:19:1b:
20:98:71:cb:0a:a3:b5:a4:a9:2c:8b:cc:f5:f4:0c:32:83:37:
73:8c:9d:33:63:7c:75:fd:98:ad:7c:96:fd:02:9f:7e:5a:b0:
6a:40:d0:81:47:3d:c2:22:d9:81:fb:a6:89:8e:a3:6c:df:46:
5a:30:04:44:cf:74:98:96:f2:31:d2:5e:13:ba:26:05:d0:a7:
9f:4e:e1:d5:c5:b9:f5:d9:e0:9b:d2:54:b0:ea:65:37:f3:c5:
95:e5:6d:e7:7d:6c:14:f8:23:4f:2f:8c:22:5e:2d:c4:11:82:
14:a8:53:8b:f0:03:5b:e7:1f:5f:73:19:0e:c8:27:bb:84:aa:
1b:a4:f0:83:fb:d9:42:13:9b:db:9e:7f:ad:e5:30:7e:a8:c6:
3c:18:0f:12:94:d0:bb:ca:8a:b1:94:fc:19:d7:19:94:8a:fa:
a1:15:40:f6:82:a7:53:7b:63:6d:ea:76:c0:dc:d9:94:da:9e:
21:ac:f9:42:2f:d0:84:8d:cc:16:56:ff:9d:db:15:5f:a3:d7:
5f:6e:ac:d1:1d:5c:46:5c:4c:d4:f6:63:a8:d6:68:bf:f9:7b:
9c:37:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:11 2025 by rpki-client