Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/Feep44lGWE1AZ9xIVX7k5KsGrfQ.roa
File: Feep44lGWE1AZ9xIVX7k5KsGrfQ.roa (raw, json)
Hash identifier: ovq8cw8SYMVV4NI/OS4RfLZRb/R6DAEIg+f23788WqE=
Subject key identifier: 15:E7:A9:E3:89:46:58:4D:40:67:DC:48:55:7E:E4:E4:AB:06:AD:F4
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 018CC7950C5F08F566A61C24B9C3FD822B91
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/Feep44lGWE1AZ9xIVX7k5KsGrfQ.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197522
IP address blocks: 46.149.176.0/24 maxlen: 24
46.149.177.0/24 maxlen: 24
46.149.178.0/24 maxlen: 24
46.149.179.0/24 maxlen: 24
46.149.176.0/20 maxlen: 20
46.149.180.0/24 maxlen: 24
46.149.181.0/24 maxlen: 24
46.149.182.0/24 maxlen: 24
46.149.183.0/24 maxlen: 24
46.149.184.0/24 maxlen: 24
46.149.185.0/24 maxlen: 24
46.149.186.0/24 maxlen: 24
46.149.189.0/24 maxlen: 24
46.149.190.0/24 maxlen: 24
46.149.191.0/24 maxlen: 24
46.149.187.0/24 maxlen: 24
46.149.188.0/24 maxlen: 24
2.57.204.0/22 maxlen: 22
2.57.204.0/24 maxlen: 24
2.57.205.0/24 maxlen: 24
2.57.206.0/24 maxlen: 24
2.57.207.0/24 maxlen: 24
2a09:dc46::/32 maxlen: 32
2a09:dc47::/32 maxlen: 32
2a09:dc44::/32 maxlen: 32
2a09:dc45::/32 maxlen: 32
2a09:dc42::/32 maxlen: 32
2a09:dc41::/32 maxlen: 32
2a09:dc40::/32 maxlen: 32
2a09:dc43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0c:5f:08:f5:66:a6:1c:24:b9:c3:fd:82:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15e7a9e38946584d4067dc48557ee4e4ab06adf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:c5:ef:43:9f:d3:b9:69:d9:de:4b:87:15:
8a:76:d9:69:e7:2d:20:7b:d2:32:6f:5c:b9:fe:b5:
3c:99:79:53:97:8a:0e:39:a7:f4:1b:00:d9:32:38:
3f:52:3e:d9:64:e7:99:d6:7b:36:75:11:88:d4:11:
de:13:e0:df:6f:9a:ec:ef:4c:66:47:aa:50:48:c9:
04:99:42:b4:38:42:6b:84:7c:86:6b:9d:d6:d7:22:
4c:c5:ea:19:bb:cd:e1:77:02:e8:c6:89:4b:8b:29:
98:cd:d0:15:e8:bf:b1:9c:a8:b4:da:75:1c:39:15:
1e:13:55:ff:2b:49:a9:64:67:f2:c1:6e:13:c4:78:
03:ce:3a:e8:ec:61:88:aa:51:b8:ed:81:a1:76:73:
50:a6:17:de:52:53:fc:b1:d0:62:a2:b3:09:bf:e6:
9d:5d:ef:0c:40:2c:de:3e:03:d2:91:86:c3:a6:ba:
5f:35:0b:75:58:92:cc:46:98:7b:5e:b1:48:6f:3f:
bf:e9:99:b9:6d:30:54:b8:8f:6e:d5:7b:21:bd:b8:
cf:e5:63:62:8a:9f:88:d9:02:56:39:b8:04:4a:e7:
00:61:c3:06:36:97:f6:5c:fb:60:77:bf:32:89:bb:
2b:a3:98:89:35:32:06:d0:cc:e3:9d:ac:0f:84:bc:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E7:A9:E3:89:46:58:4D:40:67:DC:48:55:7E:E4:E4:AB:06:AD:F4
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/Feep44lGWE1AZ9xIVX7k5KsGrfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.204.0/22
46.149.176.0/20
IPv6:
2a09:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
94:8e:bf:b8:06:d1:d6:c8:99:0d:1f:50:1c:36:96:e3:d9:ff:
30:51:10:b1:ad:98:9d:02:89:cf:42:10:91:2a:58:2f:a5:6f:
9e:a9:15:03:00:e9:c8:55:26:46:ee:51:c9:52:02:62:89:bb:
a7:1a:94:29:c4:ef:b9:7d:33:86:dc:ce:0e:a5:2f:a9:4a:60:
dd:71:0e:57:91:15:ef:85:5e:2f:ca:f2:e3:3e:fe:a6:d8:1f:
68:38:33:c7:17:d8:02:f6:40:4e:25:24:52:f1:68:99:6a:71:
a1:24:03:60:ff:52:07:ae:32:cb:a4:6e:0e:a1:41:65:5c:af:
19:21:01:e2:4a:68:6c:5a:d7:85:68:e4:ab:5b:8d:44:f4:38:
6e:bb:06:53:cb:87:2e:bd:cb:a2:da:cd:6c:6d:12:14:06:a9:
85:09:43:69:40:46:17:e1:c5:b5:d5:1b:67:e1:05:2c:f7:dd:
0a:1e:a7:53:17:00:12:21:a0:a0:ae:9c:44:39:c8:7f:77:3e:
0d:bd:b4:5b:ed:f2:5b:1b:1d:bb:17:85:6e:0c:d4:30:4d:ba:
60:67:89:d8:55:44:47:2e:bd:7d:82:3e:2d:15:8e:11:43:d1:
f0:f6:0d:29:5a:19:ba:d3:46:8e:44:9f:43:c5:fa:5f:18:e7:
28:61:ba:a6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzHlQxfCPVmphwkucP9giuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTYyZWM3NzY0NjJiNzZlNjNhZTgxNTViYjI3YjlkOGM3
ZTdmZGUwHhcNMjQwMTAyMDAzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWU3YTllMzg5NDY1ODRkNDA2N2RjNDg1NTdlZTRlNGFiMDZhZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsnF70Of07lp2d5LhxWKdtlp5y0g
e9Iyb1y5/rU8mXlTl4oOOaf0GwDZMjg/Uj7ZZOeZ1ns2dRGI1BHeE+Dfb5rs70xm
R6pQSMkEmUK0OEJrhHyGa53W1yJMxeoZu83hdwLoxolLiymYzdAV6L+xnKi02nUc
ORUeE1X/K0mpZGfywW4TxHgDzjro7GGIqlG47YGhdnNQphfeUlP8sdBiorMJv+ad
Xe8MQCzePgPSkYbDprpfNQt1WJLMRph7XrFIbz+/6Zm5bTBUuI9u1XshvbjP5WNi
ip+I2QJWObgESucAYcMGNpf2XPtgd78yibsro5iJNTIG0MzjnawPhLyESwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBXnqeOJRlhNQGfcSFV+5OSrBq30MB8GA1UdIwQY
MBaAFDSWLsd2Rit25jroFVuye52Mfn/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTIt
NGYzYmVhOWZiOTVjLzEvRmVlcDQ0bEdXRTFBWjl4SVZYN2s1S3NHcmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTItNGYzYmVhOWZiOTVj
LzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCAjnMAwQE
LpWwMA0EAgACMAcDBQMqCdxAMA0GCSqGSIb3DQEBCwUAA4IBAQCUjr+4BtHWyJkN
H1AcNpbj2f8wURCxrZidAonPQhCRKlgvpW+eqRUDAOnIVSZG7lHJUgJiibunGpQp
xO+5fTOG3M4OpS+pSmDdcQ5XkRXvhV4vyvLjPv6m2B9oODPHF9gC9kBOJSRS8WiZ
anGhJANg/1IHrjLLpG4OoUFlXK8ZIQHiSmhsWteFaOSrW41E9DhuuwZTy4cuvcui
2s1sbRIUBqmFCUNpQEYX4cW11Rtn4QUs990KHqdTFwASIaCgrpxEOch/dz4NvbRb
7fJbGx27F4VuDNQwTbpgZ4nYVURHLr19gj4tFY4RQ9Hw9g0pWhm600aORJ9Dxfpf
GOcoYbqm
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:06:00 2024 by rpki-client on console-ams.rpki-client.org