Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/sb0FALxIbHnVMKNeUVY67V9Ofyc.roa
File: sb0FALxIbHnVMKNeUVY67V9Ofyc.roa (raw, json)
Hash identifier: PTkTWPgbKIZQBVgbQiOFAv8/mplZVHonUJC0S1TVJPA=
Subject key identifier: B1:BD:05:00:BC:48:6C:79:D5:30:A3:5E:51:56:3A:ED:5F:4E:7F:27
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0192231542D74AC166A20CCFE97FB7A6BB8C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/sb0FALxIbHnVMKNeUVY67V9Ofyc.roa
Signing time: Tue 24 Sep 2024 08:10:48 +0000
ROA not before: Tue 24 Sep 2024 08:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47814
IP address blocks: 46.19.204.251/32 maxlen: 32
46.19.205.0/24 maxlen: 24
46.19.206.0/24 maxlen: 24
80.81.44.0/24 maxlen: 24
80.81.46.0/23 maxlen: 23
83.223.139.0/24 maxlen: 24
83.223.149.0/24 maxlen: 24
94.101.224.0/24 maxlen: 24
94.101.228.0/24 maxlen: 24
94.101.233.206/32 maxlen: 32
94.101.234.0/24 maxlen: 24
94.101.238.0/24 maxlen: 24
217.69.115.0/24 maxlen: 24
217.69.117.0/24 maxlen: 24
217.69.118.0/24 maxlen: 24
2001:1bf8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:15:42:d7:4a:c1:66:a2:0c:cf:e9:7f:b7:a6:bb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 24 08:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1bd0500bc486c79d530a35e51563aed5f4e7f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:0f:32:05:32:a5:28:b2:f3:db:f7:5a:fb:
c2:47:46:c8:a3:40:9f:39:9e:a9:14:1f:f2:13:34:
c4:60:f9:91:9e:b3:0f:06:32:f4:06:99:42:c5:7e:
aa:b3:f5:ba:d5:22:89:90:b0:c4:9e:03:d1:b3:2d:
3c:93:86:36:af:75:26:2a:9c:cb:ae:36:85:c0:f4:
7a:61:41:86:49:2c:4f:17:53:ac:78:78:95:00:7a:
17:3a:3a:0d:b7:57:d2:2b:31:4e:39:67:b1:1a:1c:
b0:0d:b7:34:b0:2e:5a:6a:58:74:3e:3c:46:39:31:
92:98:83:79:8e:8d:ba:bc:55:a0:66:6f:71:67:52:
9d:fc:fd:19:d4:fa:58:da:de:3f:d7:2e:d4:2b:d3:
64:4c:75:a3:db:fd:7f:44:36:76:f7:48:a5:3c:d5:
29:fa:93:e6:ef:5e:ee:b4:d7:db:75:61:03:d5:d0:
24:db:57:4f:47:53:c2:c5:8a:6f:53:ee:ff:55:bb:
74:18:db:a3:7b:cb:ae:51:d7:01:af:34:55:bc:1d:
f8:21:8a:a6:d7:f1:88:01:c2:c8:cf:85:9e:82:44:
46:a9:39:5b:ed:87:9f:21:0e:03:38:d2:96:d0:fa:
4d:b7:0f:02:a4:90:06:f1:2f:a8:2a:97:90:66:7f:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:05:00:BC:48:6C:79:D5:30:A3:5E:51:56:3A:ED:5F:4E:7F:27
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/sb0FALxIbHnVMKNeUVY67V9Ofyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.204.251/32
46.19.205.0-46.19.206.255
80.81.44.0/24
80.81.46.0/23
83.223.139.0/24
83.223.149.0/24
94.101.224.0/24
94.101.228.0/24
94.101.233.206/32
94.101.234.0/24
94.101.238.0/24
217.69.115.0/24
217.69.117.0-217.69.118.255
IPv6:
2001:1bf8::/29
Signature Algorithm: sha256WithRSAEncryption
19:1f:c1:5c:2e:fd:45:c5:00:59:3f:4e:1e:71:b3:f3:e9:27:
12:9b:09:69:19:f2:58:32:96:6a:ce:fd:6d:25:87:c1:25:61:
a5:03:65:d6:b1:25:c9:6c:b2:fc:62:2f:58:72:79:13:1a:3d:
11:e6:88:f9:38:d7:d1:14:98:29:84:b4:a8:a1:72:4d:2e:5e:
e5:30:33:22:09:41:05:4e:34:5d:11:ee:52:8d:64:2a:68:8c:
92:c6:12:e4:09:aa:68:f0:1b:36:3e:a7:10:81:84:15:9b:fe:
8b:4d:2f:a6:d4:31:96:86:52:f5:4a:5b:98:38:25:24:9f:d6:
87:63:50:35:c0:c5:2e:9f:38:42:cf:df:f0:0d:89:0f:1f:b9:
81:15:bf:bc:ac:3d:26:f0:4a:03:49:64:33:a4:77:3d:54:d0:
f3:d8:c3:19:fb:90:42:4b:6c:db:de:d5:97:c8:54:a5:12:59:
bc:35:30:4f:47:96:d5:db:2e:69:79:34:77:c9:db:5e:91:7e:
7f:83:8d:99:ad:4f:8a:21:79:91:ed:3a:59:8b:53:d0:6d:7a:
c4:a4:b7:b3:b4:e5:7b:e1:8a:cd:01:e0:7d:e6:bc:ed:9e:54:
1c:98:df:d4:d1:3f:00:fa:cf:79:4b:fe:4f:0f:33:a4:ed:47:
8d:7e:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:22:56 2024 by rpki-client on console-ams.rpki-client.org