Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa
File: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (raw, json)
Hash identifier: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=
Subject key identifier: B5:65:A8:3B:A4:3D:C5:6F:6A:CF:1B:35:2D:39:24:F6:8E:EA:93:07
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 01966C24C2A05809E06ED3A8098F264B6A60
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa
Signing time: Fri 25 Apr 2025 08:51:10 +0000
ROA not before: Fri 25 Apr 2025 08:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58018
IP address blocks: 46.36.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:24:c2:a0:58:09:e0:6e:d3:a8:09:8f:26:4b:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Apr 25 08:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b565a83ba43dc56f6acf1b352d3924f68eea9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:e0:86:d6:3e:61:c4:d5:1d:2c:5b:ec:8c:
ca:0e:d3:d5:01:85:41:f2:95:5d:05:89:38:46:b0:
7e:36:31:93:e4:64:9f:8c:a3:98:e7:17:5a:f0:a9:
e2:54:93:5d:07:9e:b9:42:cf:66:e3:84:e3:b9:f2:
8c:a8:49:20:28:d1:11:c2:32:78:b2:42:17:75:8e:
f5:d5:3d:92:34:ab:4b:07:4f:20:da:6c:39:3b:64:
58:60:2f:d0:0b:40:15:04:df:a6:c4:57:4c:94:63:
ce:ba:4c:67:24:84:88:2c:00:95:0a:79:e6:e3:20:
61:f4:20:ec:6c:5b:3a:6b:4a:44:02:99:d8:92:09:
d0:be:7c:ad:b6:60:97:8a:e5:56:b8:f3:29:95:2c:
63:a3:1d:85:0a:e0:00:d8:01:fe:32:c7:9e:51:fc:
9b:bb:aa:f6:9d:f5:92:cb:64:eb:49:0a:6e:38:d3:
fc:9a:29:4f:b9:d8:4e:66:dd:d9:e9:1f:19:9f:cf:
14:1b:31:23:2b:2e:8d:48:1c:12:d6:30:c8:e8:c3:
01:21:53:75:a6:b4:30:c9:00:c0:24:3c:08:a6:c0:
55:58:37:a4:59:a6:a4:cb:5d:50:7e:64:d6:3f:55:
ee:df:30:86:2d:e9:ff:6a:9c:86:17:69:1b:84:32:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:A8:3B:A4:3D:C5:6F:6A:CF:1B:35:2D:39:24:F6:8E:EA:93:07
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.200.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fb:7c:e6:5f:c5:ea:99:05:a3:6a:cd:39:38:ec:ef:96:3b:
40:66:bd:22:68:b3:7d:01:fd:cf:4c:5b:bb:8a:b6:b6:0e:84:
5b:09:04:bb:48:39:31:17:19:12:87:e7:5c:50:19:6b:cd:62:
5b:1a:37:89:bf:5a:10:43:d0:e3:65:fd:81:1a:37:60:23:f0:
30:49:53:7e:f2:55:42:78:71:7c:85:e0:de:a5:38:1a:95:58:
42:21:89:c0:fe:50:66:e9:11:7a:3e:dd:94:a8:d5:69:09:a9:
54:b3:e3:bb:03:66:2a:32:d0:74:ba:49:bc:5c:50:fb:fe:a9:
3e:c6:9f:88:7c:b6:b2:1c:84:c3:05:de:d3:73:d2:d7:39:78:
ff:f2:ce:39:c2:62:0e:b2:aa:0a:17:61:a3:dc:8c:37:24:c2:
1e:82:8b:8d:3a:1d:e3:a0:eb:ba:b9:c2:b3:73:12:2e:69:7b:
51:e1:1e:f5:a1:fb:bc:e2:59:fb:b5:a3:1b:22:be:fc:38:4b:
04:69:67:67:45:fc:a6:ed:c5:69:d6:36:b4:00:a4:f5:64:97:
4e:b4:2e:0e:78:de:d4:d1:01:55:17:d7:ab:92:b3:8b:0c:b5:
2a:c1:65:24:4f:f1:bd:9d:e7:91:03:47:eb:fc:f9:3e:11:a5:
d7:ec:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:18:36 2025 by rpki-client