Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ppFFSdvlJSrA1YPhZ0g6f2cv0K8.roa
File: ppFFSdvlJSrA1YPhZ0g6f2cv0K8.roa (raw, json)
Hash identifier: EUA2qNT42UtK7xh1mGKDYMthctX+asIlFomL7NYSF6s=
Subject key identifier: A6:91:45:49:DB:E5:25:2A:C0:D5:83:E1:67:48:3A:7F:67:2F:D0:AF
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018E8565961F096AA357ED6BB914DB8FFCFD
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ppFFSdvlJSrA1YPhZ0g6f2cv0K8.roa
Signing time: Thu 28 Mar 2024 14:10:11 +0000
ROA not before: Thu 28 Mar 2024 14:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
91.195.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:65:96:1f:09:6a:a3:57:ed:6b:b9:14:db:8f:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 28 14:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6914549dbe5252ac0d583e167483a7f672fd0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:02:19:19:72:78:4b:a6:bb:5f:e9:2c:74:
3d:d8:b8:c0:40:77:23:1d:2c:4f:18:03:fe:90:92:
39:60:89:f7:31:e8:b0:7e:1e:21:7d:1c:d1:40:c9:
c4:22:24:b2:4f:f4:ea:a2:1a:9b:f6:f4:89:f6:08:
04:eb:61:9a:0e:6e:fe:f7:dd:b2:fa:ec:3b:2d:75:
5f:cb:58:c5:5f:a7:3b:24:72:8f:69:92:57:f2:f3:
f0:fa:e8:82:a6:48:fa:4c:0d:ed:c8:54:d4:cb:67:
d4:1f:01:e1:ec:47:35:5c:96:9f:62:ad:ac:ea:35:
f4:71:a5:25:70:62:a5:32:af:de:36:a9:eb:00:7c:
89:8e:3f:f8:53:ce:8b:43:1b:9b:19:f3:0e:0a:98:
34:8f:02:d4:c7:ff:fc:07:b4:c2:28:34:3c:49:e2:
dc:1a:35:2a:39:3d:90:36:c3:f6:07:2c:6f:3c:e3:
28:c0:46:c1:0a:7e:47:a5:4f:1d:80:59:ed:ad:58:
67:0d:86:68:33:bf:c1:0e:11:af:24:b2:8c:e9:bf:
c0:1c:f5:89:f2:6b:72:01:da:78:1c:a5:8d:a3:c3:
f7:c7:f9:42:42:a1:d0:8b:17:35:c8:eb:d7:e1:16:
72:bf:84:ce:ef:15:78:32:f6:2a:1e:e5:ee:94:6e:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:91:45:49:DB:E5:25:2A:C0:D5:83:E1:67:48:3A:7F:67:2F:D0:AF
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ppFFSdvlJSrA1YPhZ0g6f2cv0K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
91.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
01:09:0c:87:cd:3c:c5:cb:31:25:17:80:0d:bb:90:95:b1:78:
55:99:c7:4d:e7:f4:01:56:5f:70:45:76:37:71:39:af:36:f2:
52:62:f9:9c:cf:aa:50:6e:68:be:71:c6:0a:55:a2:ed:5b:e7:
42:af:51:25:9b:8a:97:20:52:b9:2d:d8:df:eb:81:29:b5:74:
04:4a:87:51:06:f6:df:01:c3:61:71:f7:07:a4:80:0e:a4:b8:
f0:df:d0:9b:b0:34:b6:6d:00:32:2c:98:86:22:32:6b:ee:b3:
b8:7b:80:53:94:cb:5a:e1:7f:53:ce:ad:c8:1a:c6:7b:35:0c:
94:d4:2d:8b:f6:6c:f2:62:fd:60:c1:89:7a:cb:ca:d3:03:c0:
54:c8:5f:03:49:3b:ff:e4:60:43:b3:4f:f8:c3:ff:f1:fb:ed:
70:ba:c3:40:78:62:84:af:a3:0f:e9:44:f8:98:dd:fd:6c:bf:
62:10:5b:76:95:1c:18:5a:63:88:c5:fe:00:e2:e0:7b:77:e2:
33:24:53:26:fc:22:8b:46:f8:c1:dc:56:31:cf:53:43:ef:4a:
31:b2:04:78:c6:0d:2e:86:cc:da:e1:7e:c6:f1:56:4b:40:b1:
17:1d:86:fa:4b:d5:c1:3c:12:0c:f1:34:7c:49:b8:72:59:1e:
44:14:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:46:26 2024 by rpki-client on console-ams.rpki-client.org