Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/jDIK_Wvi40-c54GMqhUzcrZ6fyw.roa
File: jDIK_Wvi40-c54GMqhUzcrZ6fyw.roa (raw, json)
Hash identifier: J4POzUiARMEYtE99pB4I1dJMaoOINPs8qZx3Aa6OmRw=
Subject key identifier: 8C:32:0A:FD:6B:E2:E3:4F:9C:E7:81:8C:AA:15:33:72:B6:7A:7F:2C
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 018CCA2ABDD3D925F4F1E3127A7F2BE8245E
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/jDIK_Wvi40-c54GMqhUzcrZ6fyw.roa
Signing time: Tue 02 Jan 2024 12:34:07 +0000
ROA not before: Tue 02 Jan 2024 12:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51682
IP address blocks: 46.16.251.0/24 maxlen: 24
46.16.252.0/22 maxlen: 22
46.16.248.0/24 maxlen: 24
46.16.252.0/24 maxlen: 24
46.16.248.0/22 maxlen: 22
46.16.249.0/24 maxlen: 24
46.16.253.0/24 maxlen: 24
46.16.250.0/24 maxlen: 24
46.16.254.0/24 maxlen: 24
46.16.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:bd:d3:d9:25:f4:f1:e3:12:7a:7f:2b:e8:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jan 2 12:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c320afd6be2e34f9ce7818caa153372b67a7f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0e:1d:eb:45:f5:7b:68:55:5f:93:a9:bb:81:
bd:21:30:6f:05:83:5b:98:fb:94:66:b2:ab:d0:2a:
de:17:c6:33:05:56:fd:0c:67:df:0a:a0:bd:3a:40:
2d:be:47:31:fb:86:9a:a3:1b:81:3d:64:f8:0f:f5:
c4:34:dc:f3:81:45:cc:55:7e:25:40:e9:16:61:d9:
37:72:f3:08:0c:c2:0b:a0:13:a2:3c:25:29:d8:76:
2b:5f:13:a0:c7:ec:39:6b:2c:c4:ad:78:a4:b7:f0:
d0:6f:00:79:f8:26:42:9e:6f:cb:68:ce:f2:2f:c4:
4e:25:c9:5f:c7:0a:11:22:1b:f2:91:76:fc:5c:9f:
44:3c:2e:20:56:63:48:2e:80:ee:69:ee:35:21:72:
e9:8f:f4:78:33:be:77:41:b8:f1:5b:ec:dd:ad:10:
93:7a:6b:06:7b:dd:a9:18:ee:00:e3:3e:eb:60:0a:
91:de:7e:f1:32:b3:54:87:5c:e5:cf:b5:63:26:70:
62:45:25:d9:7a:d9:5b:2e:e6:b3:d2:29:bb:c5:d6:
d5:13:77:da:f1:68:12:23:64:ff:83:70:e7:91:ec:
92:77:6c:03:e2:42:be:8b:a2:d0:3c:93:9f:0c:db:
17:e9:31:2d:98:21:24:21:b7:46:e6:d7:50:5f:e7:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:0A:FD:6B:E2:E3:4F:9C:E7:81:8C:AA:15:33:72:B6:7A:7F:2C
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/jDIK_Wvi40-c54GMqhUzcrZ6fyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.248.0/21
Signature Algorithm: sha256WithRSAEncryption
87:fc:99:29:88:99:92:1d:79:5e:0f:de:31:36:30:5c:a1:3e:
6e:80:6e:e8:6d:e7:72:aa:33:7d:43:04:31:4d:72:76:73:f4:
8a:2f:ca:5f:a5:ec:6b:2c:78:c9:da:7e:6a:23:77:ae:09:ab:
19:02:7b:00:58:8c:ac:11:c8:9c:5f:00:1d:eb:b8:f4:59:f2:
99:98:1f:a3:26:c2:83:11:6b:19:9a:ef:0e:83:0c:54:3a:d4:
8e:f4:5b:b3:03:25:d3:5c:c8:8b:9c:a5:ad:4d:5c:3d:68:0e:
1f:86:cd:82:1a:92:d9:cb:7d:a8:b4:ad:3a:9a:c4:01:1f:65:
16:ef:7f:70:e2:cc:d1:8a:20:fb:66:d6:d4:b8:4a:20:4d:e6:
00:44:84:cd:6c:6b:b2:d2:3c:43:62:87:b7:cb:df:12:72:5f:
b1:31:18:5d:b5:4e:11:cd:bf:15:65:f8:52:a8:67:e6:a3:e0:
24:7c:c7:9e:c0:09:e3:7a:73:79:8f:f4:e1:46:07:13:47:ef:
ac:b0:c6:36:e3:ee:a1:54:d4:4c:8e:31:61:64:70:ba:5c:23:
54:b5:88:dc:90:aa:fa:be:59:b0:e3:77:77:1f:c6:6b:d3:ae:
6e:20:60:27:59:55:a2:35:cd:43:54:a5:b8:aa:48:ab:9e:ee:
32:f9:db:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKr3T2SX08eMSen8r6CReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NjZhZGRmOWNhMGRlNDlhNmVlZjQ5ODU4Mzg0ZjU0ZjQ3
YTU2ZjAwHhcNMjQwMTAyMTIzNDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzMyMGFmZDZiZTJlMzRmOWNlNzgxOGNhYTE1MzM3MmI2N2E3ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g4d60X1e2hVX5Opu4G9ITBvBYNb
mPuUZrKr0CreF8YzBVb9DGffCqC9OkAtvkcx+4aaoxuBPWT4D/XENNzzgUXMVX4l
QOkWYdk3cvMIDMILoBOiPCUp2HYrXxOgx+w5ayzErXikt/DQbwB5+CZCnm/LaM7y
L8ROJclfxwoRIhvykXb8XJ9EPC4gVmNILoDuae41IXLpj/R4M753QbjxW+zdrRCT
emsGe92pGO4A4z7rYAqR3n7xMrNUh1zlz7VjJnBiRSXZetlbLuaz0im7xdbVE3fa
8WgSI2T/g3DnkeySd2wD4kK+i6LQPJOfDNsX6TEtmCEkIbdG5tdQX+e2hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwyCv1r4uNPnOeBjKoVM3K2en8sMB8GA1UdIwQY
MBaAFGVmrd+coN5Jpu70mFg4T1T0elbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTIt
M2YyOGI2YWRiZGE5LzEvakRJS19Xdmk0MC1jNTRHTXFoVXpjclo2Znl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTItM2YyOGI2YWRiZGE5
LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhD4MA0G
CSqGSIb3DQEBCwUAA4IBAQCH/JkpiJmSHXleD94xNjBcoT5ugG7obedyqjN9QwQx
TXJ2c/SKL8pfpexrLHjJ2n5qI3euCasZAnsAWIysEcicXwAd67j0WfKZmB+jJsKD
EWsZmu8OgwxUOtSO9FuzAyXTXMiLnKWtTVw9aA4fhs2CGpLZy32otK06msQBH2UW
739w4szRiiD7ZtbUuEogTeYARITNbGuy0jxDYoe3y98Scl+xMRhdtU4Rzb8VZfhS
qGfmo+AkfMeewAnjenN5j/ThRgcTR++ssMY24+6hVNRMjjFhZHC6XCNUtYjckKr6
vlmw43d3H8Zr065uIGAnWVWiNc1DVKW4qkirnu4y+dv1
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:55:14 2024 by rpki-client on console-fra.rpki-client.org