Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/46JMDzgygP8yVSQnUwnu_ScpyHQ.roa
File: 46JMDzgygP8yVSQnUwnu_ScpyHQ.roa (raw, json)
Hash identifier: u6yXT49rOvOPXdloG/Btq422oOntzmV18qOsV5UcTxo=
Subject key identifier: E3:A2:4C:0F:38:32:80:FF:32:55:24:27:53:09:EE:FD:27:29:C8:74
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 018E235E0D583EA052EA2EC2D91ACB8B3801
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/46JMDzgygP8yVSQnUwnu_ScpyHQ.roa
Signing time: Sat 09 Mar 2024 13:19:10 +0000
ROA not before: Sat 09 Mar 2024 13:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215845
IP address blocks: 77.247.108.0/24 maxlen: 24
185.53.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:23:5e:0d:58:3e:a0:52:ea:2e:c2:d9:1a:cb:8b:38:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Mar 9 13:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3a24c0f383280ff325524275309eefd2729c874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:f9:bf:fc:04:56:83:37:07:bd:1e:75:6e:
e6:6e:88:f5:e0:b7:5f:1a:04:3d:b0:ce:96:87:8f:
3f:ed:82:07:bd:be:37:db:81:18:e9:e4:7b:39:c7:
e2:d8:ef:d0:a4:d3:cf:2d:00:64:c7:42:b6:28:18:
5c:48:ce:2f:85:a8:4b:66:3e:2d:93:96:ef:53:7d:
15:0b:9b:2b:c0:05:5f:f3:0a:0f:e0:a6:ad:be:89:
43:91:aa:49:70:4b:c5:9c:3a:84:b6:3e:6f:3a:d8:
64:45:02:a4:22:c1:5b:3a:d0:e5:0a:e3:b9:72:ed:
f5:3c:3f:1d:01:fd:f5:a6:52:e0:4c:5f:23:ab:72:
64:9d:8a:9a:26:97:ba:22:57:6b:3e:01:d4:67:25:
e2:21:71:6b:ee:3a:a9:49:0c:10:e6:99:49:92:ca:
ba:8a:0c:e9:8a:e0:34:9f:4e:10:a1:55:6b:8f:5e:
6a:f3:d9:96:d4:22:71:b9:b6:49:2a:c9:be:d9:df:
87:91:ff:be:33:64:30:63:99:51:e1:86:3e:d5:c2:
b6:7d:93:6a:31:a2:c9:04:fe:a8:17:92:dd:82:99:
76:e6:51:bf:55:bc:84:4f:dc:bb:2f:ba:71:ad:f6:
45:74:60:e8:fd:3e:57:70:18:e0:16:67:49:29:45:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A2:4C:0F:38:32:80:FF:32:55:24:27:53:09:EE:FD:27:29:C8:74
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/46JMDzgygP8yVSQnUwnu_ScpyHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.108.0/24
185.53.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:52:f6:e7:d3:2c:f4:87:7d:70:32:79:2d:d4:28:2e:fd:b1:
e2:b4:ac:90:f1:c7:3e:3b:55:b7:a4:a9:73:ea:fe:8d:20:09:
76:cc:ee:e8:ed:9b:79:d0:8b:6b:e9:ed:6b:6d:2d:8c:f5:8f:
2a:c5:73:6e:53:13:35:c7:9a:27:d0:f8:46:4a:7a:ff:e8:af:
c1:94:f6:6d:60:f6:48:8b:a2:5c:35:67:d5:a9:73:4d:ae:2f:
d9:3f:99:3e:a9:41:93:3d:7a:f5:f2:70:a7:ad:4e:13:af:b2:
2f:84:65:c1:2b:24:ce:de:67:ac:0d:cb:3b:ea:d1:ca:49:f0:
e8:65:ca:51:59:96:7a:61:a3:fb:8d:3c:49:3f:73:4e:18:ca:
6a:55:3c:52:26:96:2a:eb:20:ca:b4:ea:1d:79:cb:6c:dd:55:
0d:b6:ad:ef:58:bf:89:16:33:ce:43:ee:8d:4c:22:47:94:35:
a8:93:70:e7:07:c9:04:49:d0:67:d6:63:61:b8:58:73:0d:13:
3c:93:db:f4:9c:20:c0:23:bd:28:57:b7:f6:ce:0d:3b:38:df:
b1:6a:78:27:06:e7:7b:ef:ed:6b:c5:56:b8:15:63:ab:3f:db:
94:56:bc:c3:20:ca:e3:63:7b:a8:34:1d:87:10:8b:d8:61:b8:
70:7b:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:57:54 2024 by rpki-client on console-fra.rpki-client.org