Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4M9yg_dsm1v4BydHszIDPWrsjbA.roa
File: 4M9yg_dsm1v4BydHszIDPWrsjbA.roa (raw, json)
Hash identifier: 1cCwWr5q98F1kJnZXlj6cY8mYpj2DUdYWrPng07jaNo=
Subject key identifier: E0:CF:72:83:F7:6C:9B:5B:F8:07:27:47:B3:32:03:3D:6A:EC:8D:B0
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC493885205E5781F781C9E1B78B0E74D
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4M9yg_dsm1v4BydHszIDPWrsjbA.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 104.232.36.0/24 maxlen: 24
45.67.141.0/24 maxlen: 24
2a07:c6c0:36::/48 maxlen: 48
2a07:c6c0:37::/48 maxlen: 48
2a0c:3ac0::/48 maxlen: 48
2a07:c6c0:35::/48 maxlen: 48
2a07:c6c0:38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:88:52:05:e5:78:1f:78:1c:9e:1b:78:b0:e7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0cf7283f76c9b5bf8072747b332033d6aec8db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:32:d7:3a:c4:df:47:8f:4e:50:66:73:02:
de:f1:fd:c1:95:c9:cb:80:48:fb:7b:35:45:1c:43:
bf:3f:bd:e0:1d:6a:f0:6a:a7:93:af:c8:08:9c:d5:
da:06:c6:94:c8:0e:37:6c:2e:c2:af:fd:a2:d2:06:
33:52:8f:0d:39:80:1c:ae:09:0c:c6:a9:ac:6b:1a:
75:28:cc:2d:ab:a1:31:2b:11:83:62:78:0a:51:c6:
6f:43:b4:20:c9:02:78:8f:67:1b:5a:37:0d:c5:bb:
7f:01:71:83:50:96:70:71:bc:19:5d:91:63:17:35:
37:16:d0:21:61:be:45:b2:80:07:01:7e:55:e6:f3:
75:a6:76:07:be:87:6d:6e:a8:71:40:3c:03:d7:17:
8a:a6:e7:27:db:fc:9f:8c:49:14:8d:a9:45:b5:e9:
74:bc:ac:e4:1f:b7:ef:9e:8c:a0:d7:37:ff:3a:1f:
d6:ba:e6:38:6c:76:22:63:37:32:09:36:81:2e:a7:
4b:7a:5a:2c:f0:16:a2:b8:2e:58:da:00:d4:d6:92:
d8:48:98:6e:90:8f:31:ac:f4:d4:87:eb:57:29:d3:
cb:41:25:a1:f9:ad:b0:17:70:8d:5d:5a:32:70:74:
30:5a:b8:50:ef:b3:a2:48:83:4b:13:4c:bf:04:cd:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CF:72:83:F7:6C:9B:5B:F8:07:27:47:B3:32:03:3D:6A:EC:8D:B0
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4M9yg_dsm1v4BydHszIDPWrsjbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.141.0/24
104.232.36.0/24
IPv6:
2a07:c6c0:35::-2a07:c6c0:38:ffff:ffff:ffff:ffff:ffff
2a0c:3ac0::/48
Signature Algorithm: sha256WithRSAEncryption
47:d8:46:7b:06:f2:97:b3:9b:6a:54:3e:32:55:a3:22:fa:af:
20:53:44:fc:41:b9:5c:3b:62:86:80:e0:b6:9f:92:20:9c:cb:
29:88:77:84:48:72:48:10:85:4b:8a:f8:78:72:3d:af:d1:ed:
a4:d3:c0:40:f1:ac:97:05:0d:c1:c5:cc:4d:56:1a:4f:c2:69:
74:92:e3:81:8f:21:5b:50:1f:a1:ae:82:eb:46:99:92:cf:b2:
74:6b:e6:ea:a5:b3:18:11:0a:58:6f:a3:aa:28:4a:34:d0:95:
3f:d4:ea:3b:03:a3:4c:86:27:16:2a:fd:87:e2:4b:73:50:74:
4d:e2:63:bf:43:71:23:18:b9:c5:40:f3:63:b9:cd:80:6e:82:
d2:fc:a3:ff:4a:53:70:be:ff:33:c7:25:33:3e:65:0c:6d:da:
65:aa:df:dc:e6:21:79:68:93:56:5e:b7:d3:88:83:e9:ea:a2:
f3:50:f7:5b:5e:64:f4:3a:57:93:96:15:e0:c4:90:95:db:71:
66:10:d6:d0:f5:a8:89:8c:62:52:8b:48:e9:5b:3c:3d:ce:b2:
94:07:22:d3:3e:51:20:f2:69:5d:f3:1f:0b:24:c7:f5:7a:2d:
0e:e0:8a:cf:fc:a1:ab:9d:31:0a:3c:f8:23:e4:ec:1e:a1:4f:
cf:8b:56:d8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAYzEk4hSBeV4H3gcnht4sOdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMTAxMTAzMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGNmNzI4M2Y3NmM5YjViZjgwNzI3NDdiMzMyMDMzZDZhZWM4ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqky1zrE30ePTlBmcwLe8f3BlcnL
gEj7ezVFHEO/P73gHWrwaqeTr8gInNXaBsaUyA43bC7Cr/2i0gYzUo8NOYAcrgkM
xqmsaxp1KMwtq6ExKxGDYngKUcZvQ7QgyQJ4j2cbWjcNxbt/AXGDUJZwcbwZXZFj
FzU3FtAhYb5FsoAHAX5V5vN1pnYHvodtbqhxQDwD1xeKpucn2/yfjEkUjalFtel0
vKzkH7fvnoyg1zf/Oh/WuuY4bHYiYzcyCTaBLqdLelos8BaiuC5Y2gDU1pLYSJhu
kI8xrPTUh+tXKdPLQSWh+a2wF3CNXVoycHQwWrhQ77OiSINLE0y/BM23SQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFODPcoP3bJtb+AcnR7MyAz1q7I2wMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvNE05eWdfZHNtMXY0QnlkSHN6SURQV3JzamJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTASBAIAATAMAwQALUONAwQA
aOgkMCMEAgACMB0wEgMHACoHxsAANQMHACoHxsAAOAMHACoMOsAAADANBgkqhkiG
9w0BAQsFAAOCAQEAR9hGewbyl7ObalQ+MlWjIvqvIFNE/EG5XDtihoDgtp+SIJzL
KYh3hEhySBCFS4r4eHI9r9HtpNPAQPGslwUNwcXMTVYaT8JpdJLjgY8hW1Afoa6C
60aZks+ydGvm6qWzGBEKWG+jqihKNNCVP9TqOwOjTIYnFir9h+JLc1B0TeJjv0Nx
Ixi5xUDzY7nNgG6C0vyj/0pTcL7/M8clMz5lDG3aZarf3OYheWiTVl6304iD6eqi
81D3W15k9DpXk5YV4MSQldtxZhDW0PWoiYxiUotI6Vs8Pc6ylAci0z5RIPJpXfMf
CyTH9XotDuCKz/yhq50xCjz4I+TsHqFPz4tW2A==
-----END CERTIFICATE-----
Generated at Sat Jun 1 10:10:36 2024 by rpki-client on console-fra.rpki-client.org