Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/9g3BYjennP5wMxo6EQx2Nsju0Hs.roa
File: 9g3BYjennP5wMxo6EQx2Nsju0Hs.roa (raw, json)
Hash identifier: +sUHfeWLv40+hk/T4pUzwyPhi3e2H4qJD+lT3TyCDRU=
Subject key identifier: F6:0D:C1:62:37:A7:9C:FE:70:33:1A:3A:11:0C:76:36:C8:EE:D0:7B
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 01921FD0774F238BE6F12AF9A333BC48A89F
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/9g3BYjennP5wMxo6EQx2Nsju0Hs.roa
Signing time: Mon 23 Sep 2024 16:56:48 +0000
ROA not before: Mon 23 Sep 2024 16:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49821
IP address blocks: 46.175.12.0/24 maxlen: 24
185.236.64.0/21 maxlen: 21
185.236.64.0/22 maxlen: 22
185.236.68.0/22 maxlen: 22
2a0d:9f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:d0:77:4f:23:8b:e6:f1:2a:f9:a3:33:bc:48:a8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Sep 23 16:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f60dc16237a79cfe70331a3a110c7636c8eed07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:83:d6:a3:93:77:d2:aa:61:6f:5d:90:40:
f7:9a:fa:c5:9a:29:45:00:b3:5c:03:db:aa:bc:85:
3f:f2:50:71:75:d6:b5:19:39:f3:3c:26:c2:e4:a3:
be:fc:eb:da:b1:c0:41:23:31:89:fc:4e:db:f3:9d:
4d:63:7c:17:74:ab:56:87:1f:40:72:1d:d0:21:46:
2b:92:d9:99:1f:80:1d:8d:27:0c:9e:6f:ba:1c:47:
72:a5:66:82:d5:12:e4:f1:69:26:22:87:72:59:d1:
6a:de:f3:3b:6b:ea:f7:1f:5b:3f:31:67:f9:f1:67:
f3:4e:a3:15:2d:85:67:9c:cc:c4:0e:83:4f:58:30:
8a:53:41:66:41:40:59:bd:df:c7:d4:4a:d0:55:53:
20:35:87:37:06:91:11:c9:06:d0:b9:ff:21:da:30:
30:fb:fe:32:63:26:9c:f9:27:1d:0c:f7:df:91:20:
ae:e0:24:4e:21:15:e7:01:ef:c9:1a:c9:20:ce:93:
b0:c4:92:ab:e6:5e:1c:a5:84:af:a2:03:e5:b4:8d:
45:7a:88:9c:0a:a4:f1:4f:aa:c4:35:f3:16:ab:eb:
8b:3f:59:fc:3d:96:40:c0:49:f2:cf:41:ff:61:51:
b0:0f:fe:5c:c3:00:f4:2a:b7:bd:7a:b3:66:83:a5:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:C1:62:37:A7:9C:FE:70:33:1A:3A:11:0C:76:36:C8:EE:D0:7B
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/9g3BYjennP5wMxo6EQx2Nsju0Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.12.0/24
185.236.64.0/21
IPv6:
2a0d:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
c6:84:61:26:89:4d:3e:ea:34:19:95:ff:db:8a:23:7a:97:a9:
87:c4:cc:8a:4e:ed:df:92:90:7d:df:92:9a:a9:98:f7:23:2d:
99:0b:30:55:cc:27:16:26:a2:34:cc:42:23:4e:ec:57:4f:94:
2e:ef:4c:15:06:3d:9d:0d:ab:97:44:c3:9a:2f:d1:f6:e1:71:
d3:5a:e3:d5:e9:0d:41:a6:59:3e:a5:a1:ec:b3:13:9a:94:30:
74:f0:00:80:25:1f:f7:4c:db:54:27:43:8c:6b:a8:5e:2b:dd:
09:cd:fc:23:96:f8:82:7e:63:df:92:ff:43:36:14:d8:9a:d3:
24:9e:d6:26:59:c0:33:13:0e:5c:dd:a7:8f:82:c7:2e:9f:fc:
e4:10:79:36:23:b0:f1:8f:00:88:12:f2:6e:12:9e:8c:2f:c6:
1f:df:ec:68:11:7e:17:ef:ae:bd:04:a1:ea:e0:68:9a:39:78:
e0:90:13:8d:ff:63:1f:9f:bf:97:ae:ae:93:a3:56:93:36:e8:
0e:f3:4c:90:04:17:f3:e7:c6:d6:32:fa:7e:6a:ea:89:68:b3:
66:a0:d6:7b:fb:33:9f:40:1d:3d:fc:51:b4:90:a2:9d:42:0d:
16:2c:e3:6f:e2:03:64:97:14:76:c7:22:74:16:5e:ed:08:42:
56:e2:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:38:15 2024 by rpki-client on console-ams.rpki-client.org