Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/fZy0bBIeBkep5lNh4xptaHNgTvc.roa
File: fZy0bBIeBkep5lNh4xptaHNgTvc.roa (raw, json)
Hash identifier: Ej+2caQzLCPLdPDl32okZ8/KjtUIW1/Z8hUzURtVseg=
Subject key identifier: 7D:9C:B4:6C:12:1E:06:47:A9:E6:53:61:E3:1A:6D:68:73:60:4E:F7
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 018CC3B71467DFACCD47B0E2EA315EB99B6A
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/fZy0bBIeBkep5lNh4xptaHNgTvc.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49463
IP address blocks: 46.21.112.0/24 maxlen: 24
46.21.114.0/24 maxlen: 24
46.21.116.0/24 maxlen: 24
46.21.112.0/20 maxlen: 24
46.21.127.0/24 maxlen: 24
185.7.160.0/22 maxlen: 24
31.216.16.0/20 maxlen: 24
5.179.120.0/21 maxlen: 24
2a02:27d0::/32 maxlen: 48
2a02:27d0:1671::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:14:67:df:ac:cd:47:b0:e2:ea:31:5e:b9:9b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d9cb46c121e0647a9e65361e31a6d6873604ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:37:4e:94:d5:0e:ec:32:e2:98:34:ba:dd:
c6:e5:4d:c3:be:57:30:ae:a9:01:d5:93:2f:43:32:
c5:f8:94:59:b7:b1:24:ea:17:b5:6b:38:68:f3:e0:
9b:05:39:dc:cb:0d:a5:e3:8c:df:bf:71:81:10:d3:
c2:55:63:37:0c:2c:b9:95:b6:07:b7:06:dc:54:f8:
93:d3:97:e4:35:eb:0f:b4:4a:a5:cd:f0:f4:59:b3:
c8:ea:18:f7:1a:79:28:d3:90:a4:f5:1c:02:93:e0:
98:b9:4d:5a:7c:6b:bb:46:d9:76:4f:59:5e:19:6a:
64:52:58:19:c7:ae:62:1a:c2:ab:e8:52:67:e2:4c:
eb:d4:d0:43:80:ad:d1:11:48:14:f2:8c:27:e8:68:
b6:8a:3e:f9:0e:75:ae:0d:a0:3d:1b:46:cc:3f:66:
4f:12:07:19:09:ae:a2:ff:f6:16:63:e1:c4:86:10:
b0:32:22:8d:b4:ad:f4:71:29:9c:17:e3:2a:f7:04:
58:d2:00:c7:bd:17:ba:04:dc:bc:f8:52:93:2f:e7:
00:dd:62:02:d9:68:08:70:e2:f9:89:10:29:8a:1e:
f0:7a:d3:65:5f:66:2a:d8:46:23:60:4d:35:be:a2:
53:55:6c:2f:ec:ce:72:91:55:17:53:26:44:9f:9c:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:B4:6C:12:1E:06:47:A9:E6:53:61:E3:1A:6D:68:73:60:4E:F7
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/fZy0bBIeBkep5lNh4xptaHNgTvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.120.0/21
31.216.16.0/20
46.21.112.0/20
185.7.160.0/22
IPv6:
2a02:27d0::/32
Signature Algorithm: sha256WithRSAEncryption
27:d9:16:6c:16:05:c5:b4:62:4d:2b:75:b5:62:78:f5:93:f4:
44:a2:53:cf:92:fc:89:54:7b:87:8b:17:46:d0:c0:09:94:a0:
9d:78:ea:39:45:3e:43:94:9a:40:8e:34:4d:06:47:88:72:d7:
c0:12:b9:54:14:fa:13:68:1f:52:5c:80:dc:7d:49:4a:9d:a1:
d7:66:48:17:7a:95:d2:b0:87:68:08:2d:51:7a:8a:4c:f2:bb:
ae:7e:9c:ec:ed:11:b4:6b:4c:ba:1c:bd:0f:2c:bf:fb:4e:21:
ea:0c:52:2c:c4:6d:c0:4b:ca:38:1f:b5:81:d2:b5:93:f5:6c:
86:47:10:92:0c:eb:a1:9b:35:23:b7:1e:69:1b:22:ee:83:5f:
20:03:f7:58:6d:ff:61:56:ac:70:93:ab:f5:e4:c5:08:01:44:
60:24:42:38:8f:47:f6:81:41:22:15:4d:a9:b7:dd:ba:c2:9d:
17:6e:2d:98:1c:b6:6d:18:b0:fe:73:9a:af:0e:cf:68:2f:c5:
ec:61:3d:ea:69:8f:36:2c:31:07:2d:f5:ba:e5:dc:8d:f5:09:
de:bd:94:d4:8e:c0:eb:62:2c:28:45:9b:9e:12:41:d6:b9:fe:
8d:21:c6:0d:17:90:42:ab:44:12:d2:5b:2e:43:65:26:2b:e6:
0d:f7:b9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:06 2024 by rpki-client on console-fra.rpki-client.org