Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/mLQy0Fz-_lZmyCyuGn2N8OyJnV0.roa
File: mLQy0Fz-_lZmyCyuGn2N8OyJnV0.roa (raw, json)
Hash identifier: AxhO1Pfbyv98DjnKavMLfLHH4Hz0EemNifv54n7VqMc=
Subject key identifier: 98:B4:32:D0:5C:FE:FE:56:66:C8:2C:AE:1A:7D:8D:F0:EC:89:9D:5D
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC3A078AD64184BFBCA29050C4A691
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/mLQy0Fz-_lZmyCyuGn2N8OyJnV0.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 46.244.111.0/24 maxlen: 24
46.244.110.0/24 maxlen: 24
46.244.109.0/24 maxlen: 24
46.244.108.0/24 maxlen: 24
46.244.108.0/22 maxlen: 24
46.244.115.0/24 maxlen: 24
46.244.114.0/24 maxlen: 24
46.244.114.0/23 maxlen: 24
46.244.97.0/24 maxlen: 24
46.244.19.0/24 maxlen: 24
46.244.18.0/23 maxlen: 24
46.244.18.0/24 maxlen: 24
92.240.144.0/22 maxlen: 24
92.240.151.0/24 maxlen: 24
92.240.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3a:07:8a:d6:41:84:bf:bc:a2:90:50:c4:a6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98b432d05cfefe5666c82cae1a7d8df0ec899d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:21:06:5d:5f:f2:58:0f:48:f9:ad:28:07:
5b:07:6e:da:89:e1:37:e3:4c:55:aa:c0:f5:40:24:
26:0c:4d:ab:06:75:56:db:a2:16:87:3e:af:fd:03:
be:40:f2:95:cb:31:65:1e:c5:4b:25:1a:70:c3:8f:
66:95:40:42:5f:21:9e:6a:51:ce:0a:23:14:33:51:
1e:1e:b7:cd:c0:bd:e4:2e:37:78:de:9e:fd:db:ba:
d9:38:9c:91:49:5b:e5:40:75:63:d5:44:db:51:ad:
ac:65:bd:e2:57:ec:98:df:3d:ec:b6:ea:d9:d2:c1:
47:32:78:23:a0:dc:68:96:cc:a5:99:c7:79:ef:79:
31:ad:73:e7:a8:19:af:d0:86:84:8a:df:00:f0:ad:
be:39:98:11:1c:17:5c:2b:0a:b4:40:54:92:57:01:
dc:fc:40:3f:70:1f:5f:8d:a5:63:47:13:11:6d:0f:
81:84:a6:6b:6f:d4:cf:70:56:bd:81:3e:73:86:ef:
b4:11:a9:19:f4:03:be:f2:72:6a:35:a6:4f:3f:21:
3d:60:c7:2d:20:ee:71:c7:84:ae:33:49:d8:93:e8:
60:f4:94:a1:b9:f3:91:d0:e7:34:8d:5c:4f:03:42:
8d:76:21:75:5d:1c:1f:6b:a1:ab:56:a0:ad:4e:80:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:32:D0:5C:FE:FE:56:66:C8:2C:AE:1A:7D:8D:F0:EC:89:9D:5D
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/mLQy0Fz-_lZmyCyuGn2N8OyJnV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.18.0/23
46.244.97.0/24
46.244.108.0/22
46.244.114.0/23
92.240.144.0/22
92.240.149.0/24
92.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3a:53:0a:d1:6c:1e:7c:9d:8c:b7:46:0e:6c:75:f4:80:2f:
96:aa:bf:05:9f:7d:16:b3:03:90:aa:a6:a0:3e:68:a8:29:96:
c0:84:dc:04:ca:cb:e4:ea:26:05:9d:0a:15:10:12:b8:6b:d3:
de:d8:ec:b8:8a:18:44:eb:61:45:44:64:53:00:ba:9c:ec:a4:
57:7b:d1:8a:ec:94:23:3e:21:74:05:87:a0:3e:f2:2b:ed:35:
f6:e4:17:65:ea:5e:de:a3:1d:c3:ff:e5:79:7e:6c:bf:a7:64:
62:2e:d2:78:6a:b4:11:3c:1a:4b:12:6f:ed:31:cb:a9:89:b6:
ba:7d:4c:3e:05:e5:80:a5:f7:b0:ee:f4:c5:80:25:6b:fa:5e:
a2:68:49:ac:82:7f:fc:00:c9:f5:e3:d3:f8:40:67:1b:7a:6a:
76:be:04:86:8c:7d:e1:5b:d2:44:88:f5:25:d6:2d:68:30:0c:
e9:ff:b1:ba:59:97:a9:88:cc:ad:d7:3c:25:c7:7f:69:5b:5c:
c8:ef:f6:36:6b:4a:71:4c:d3:78:df:b6:6b:45:2d:9a:8c:b3:
d2:b5:5d:dc:5d:e2:bb:8f:7f:bd:1a:6a:e6:6d:05:2b:49:bb:
10:52:3a:a0:83:85:21:df:cd:c0:57:2f:1b:a8:08:b1:92:9b:
44:ad:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:09:43 2024 by rpki-client on console-ams.rpki-client.org