Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/gSYSp_qLMLd6ZR4I06QZX6c0wEw.roa
File: gSYSp_qLMLd6ZR4I06QZX6c0wEw.roa (raw, json)
Hash identifier: cmvyFFzMBPKFRY8V4ec/ZQDIyXUguqm0sXccgAlKmpA=
Subject key identifier: 81:26:12:A7:FA:8B:30:B7:7A:65:1E:08:D3:A4:19:5F:A7:34:C0:4C
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 018CC56E011BAE81F5D844DD84E5DF7D85EC
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/gSYSp_qLMLd6ZR4I06QZX6c0wEw.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48618
IP address blocks: 46.246.32.0/23 maxlen: 24
46.246.10.0/23 maxlen: 24
2a00:1a28:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:01:1b:ae:81:f5:d8:44:dd:84:e5:df:7d:85:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=812612a7fa8b30b77a651e08d3a4195fa734c04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:a3:10:7e:b3:a1:1e:bd:4b:d8:76:f0:75:
29:c3:90:ad:db:55:82:10:c0:6a:0b:56:7a:0a:8b:
44:a4:dc:19:73:de:db:00:91:27:4a:14:ba:e7:16:
4f:f2:69:d4:9e:a2:ed:b0:8d:1b:3e:87:8b:39:b9:
4e:79:7a:cd:ec:b1:05:6e:1f:d1:6b:d4:33:b8:97:
82:e0:07:03:48:96:9a:25:f7:60:53:22:87:28:6c:
a6:f6:fd:74:72:3a:b7:bd:fc:57:6b:7f:19:e8:63:
47:a4:d7:d6:fc:b0:8c:7e:a1:69:1e:eb:3c:96:e0:
06:8c:f2:5c:07:f0:55:1f:2e:93:15:74:28:15:d2:
93:e3:f5:aa:3c:06:aa:66:04:fd:d4:a9:d9:a2:b2:
bc:61:cd:3c:c3:ee:98:b1:18:cc:d0:39:7e:67:d0:
3a:a7:1f:ba:5f:7a:c3:fc:73:64:4e:80:71:7d:86:
e3:6e:1a:b4:76:ce:78:3b:14:06:54:d5:06:2e:f2:
2a:7e:65:23:cc:e3:9d:79:d3:d1:29:be:0e:da:0d:
e7:51:ce:a6:d1:bd:fc:cf:d6:09:34:fd:84:fa:b8:
93:9d:59:56:46:12:47:5b:db:f9:61:8e:de:77:6a:
90:9d:c9:4f:63:75:bb:b0:e8:67:22:66:a2:6a:b2:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:12:A7:FA:8B:30:B7:7A:65:1E:08:D3:A4:19:5F:A7:34:C0:4C
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/gSYSp_qLMLd6ZR4I06QZX6c0wEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.246.10.0/23
46.246.32.0/23
IPv6:
2a00:1a28:100::/48
Signature Algorithm: sha256WithRSAEncryption
42:4b:6b:47:fa:f5:52:db:ca:5c:9f:9d:8b:04:16:b6:04:35:
82:54:b4:1b:72:23:08:a7:ff:05:10:34:21:29:2c:b2:c1:4a:
4e:2f:78:78:ad:26:5b:9a:41:8b:71:0a:4c:24:6b:53:c8:f9:
96:ff:e4:1a:f3:dc:80:7d:c5:c6:69:31:82:9e:62:ca:bb:53:
54:78:33:7f:31:9e:4e:2e:50:34:88:11:ca:6b:f2:1a:ae:f0:
97:2f:cb:d5:2c:01:93:ec:76:af:68:ec:00:e0:74:75:30:96:
9d:fc:da:52:c3:c6:5f:23:eb:47:52:a1:fa:75:67:4c:84:5c:
fa:dc:70:a9:00:21:78:bd:6d:e0:f0:29:e1:28:6f:e3:ba:67:
a7:a4:e9:0d:27:4b:0a:1b:22:7d:3b:5d:ff:2b:3e:9d:4f:64:
4b:dc:ab:f7:a2:25:58:b4:30:ac:7a:bb:df:07:0d:a1:dd:d4:
46:13:31:a9:1c:a3:73:f0:89:0c:04:41:9e:98:57:ff:e0:9e:
cc:f3:34:39:0d:0f:0e:06:b7:23:2d:64:6c:ab:6a:8f:45:8d:
31:eb:e8:31:75:6c:93:6e:14:f4:0e:74:2f:da:29:c2:1d:e8:
7c:4c:29:1d:6d:fa:a3:db:00:9f:7a:de:b7:4f:51:93:94:ab:
14:7c:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:41:43 2024 by rpki-client on console-ams.rpki-client.org