Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/c8332vziiVId0SZE79NpnR1EAso.roa
File: c8332vziiVId0SZE79NpnR1EAso.roa (raw, json)
Hash identifier: RDCWPy01s9g0GUSegBUa5QbE4vo9FwCco2V3dT4450Y=
Subject key identifier: 73:CD:F7:DA:FC:E2:89:52:1D:D1:26:44:EF:D3:69:9D:1D:44:02:CA
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 018FC35F6ED864253F232FD550B313E282BE
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/c8332vziiVId0SZE79NpnR1EAso.roa
Signing time: Wed 29 May 2024 08:02:42 +0000
ROA not before: Wed 29 May 2024 08:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64476
IP address blocks: 46.247.136.0/23 maxlen: 23
46.247.138.0/23 maxlen: 23
46.247.140.0/24 maxlen: 24
46.247.141.0/24 maxlen: 24
85.190.64.0/24 maxlen: 24
85.190.65.0/24 maxlen: 24
85.190.67.0/24 maxlen: 24
85.190.68.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.88.0/22 maxlen: 22
87.121.208.0/21 maxlen: 21
185.161.168.0/22 maxlen: 22
185.231.8.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.169.0/24 maxlen: 24
185.253.170.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:500::/40 maxlen: 40
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:5f:6e:d8:64:25:3f:23:2f:d5:50:b3:13:e2:82:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: May 29 08:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73cdf7dafce289521dd12644efd3699d1d4402ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:01:25:d4:d9:90:79:f6:a1:9a:63:62:a8:
d0:9c:c4:d8:f4:2a:6e:71:ce:3e:d8:68:91:fc:a8:
fc:73:d6:24:f4:f5:8a:f7:f9:57:75:79:df:7a:4e:
03:27:93:0b:ec:46:d9:4a:c0:86:16:3b:85:39:10:
4d:8a:ab:91:a7:d2:9d:32:c7:83:62:8c:36:94:1e:
ba:fb:ce:ad:88:19:25:4e:2d:86:36:f3:a4:19:f3:
f7:6e:91:43:c3:c7:a8:d5:bd:90:89:24:02:ff:0c:
5a:7e:75:13:da:14:d2:0f:c3:d1:62:9b:58:23:19:
d1:8e:be:4a:7b:a1:17:e9:33:c0:d5:d6:e6:44:d0:
1b:94:89:b0:ce:9a:a0:b6:96:79:c5:68:a2:82:ab:
b6:c2:14:27:bb:a0:38:10:97:3b:7e:ae:f1:46:5c:
4a:75:ea:dd:da:10:60:8d:f6:50:67:84:4b:ac:9a:
39:5b:d0:e0:90:78:d6:75:40:ea:e6:55:49:a0:ca:
83:d4:94:c3:02:9c:84:a7:7f:2d:da:21:bc:2f:62:
30:5c:e4:ba:f6:02:25:0b:65:5f:73:cd:68:9a:96:
51:b5:63:be:45:6c:ef:ca:a0:c8:e0:71:73:06:bf:
3c:95:e1:e0:57:c3:f7:6d:02:93:29:00:20:17:a4:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:F7:DA:FC:E2:89:52:1D:D1:26:44:EF:D3:69:9D:1D:44:02:CA
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/c8332vziiVId0SZE79NpnR1EAso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/23
85.190.67.0-85.190.68.255
85.190.84.0/23
85.190.88.0/22
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e805:210::/44
2a0a:e805:500::/40
2a0a:e805:610::/44
2a0a:e805:710::/44
Signature Algorithm: sha256WithRSAEncryption
24:16:ba:93:fb:da:b3:a9:d6:ab:79:14:d5:eb:d2:2d:cf:ed:
aa:b7:a8:53:2a:ee:35:58:01:09:0e:ef:f7:90:a8:ad:b7:17:
af:55:34:62:f7:87:4b:29:cc:a8:bc:fd:7b:54:29:a3:3a:a7:
2f:35:35:2c:98:09:63:78:f5:1e:3c:e7:7d:88:35:cf:cf:bc:
f1:9d:bb:23:fb:f7:7e:a6:29:61:2c:fe:86:f2:9f:95:08:53:
e8:c0:35:df:54:4f:ba:b8:23:45:90:82:7f:fb:3f:2a:31:5e:
60:9e:61:b2:45:cc:55:d1:a0:eb:42:99:61:87:85:e1:b7:c0:
1c:86:63:44:fc:a8:98:66:38:23:7d:1a:c7:f1:6a:f6:e7:54:
e2:5f:db:af:3d:63:d0:a9:fc:31:f7:2a:0e:27:c0:a7:2b:74:
89:42:0c:e4:cf:2b:64:d2:aa:ed:0f:93:db:90:48:53:27:24:
df:5c:70:e6:15:df:86:f3:ff:3c:e7:a3:8c:fa:41:cc:1f:bc:
aa:52:ce:1c:8f:84:df:8d:a0:d8:8c:bf:0d:87:2c:af:d0:a5:
36:46:d4:b9:8c:e6:67:35:1f:d6:0c:f4:85:49:1d:db:62:fb:
0c:f0:fc:04:1b:ac:a3:95:11:45:0a:73:d1:2c:a9:00:9b:a1:
54:78:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:17:11 2024 by rpki-client on console-fra.rpki-client.org