Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wayRtePli7LWXsNODaliv9xOfAk.roa
File: wayRtePli7LWXsNODaliv9xOfAk.roa (raw, json)
Hash identifier: HJLGVRHK2LrcKE303aDOfaJtW0Om0y/4G1icur0N84M=
Subject key identifier: C1:AC:91:B5:E3:E5:8B:B2:D6:5E:C3:4E:0D:A9:62:BF:DC:4E:7C:09
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019352A55FDC546B4D51F026054E3E7FB1CE
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wayRtePli7LWXsNODaliv9xOfAk.roa
Signing time: Fri 22 Nov 2024 06:53:09 +0000
ROA not before: Fri 22 Nov 2024 06:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49183
IP address blocks: 46.173.160.0/22 maxlen: 22
46.173.160.0/24 maxlen: 24
46.173.161.0/24 maxlen: 24
46.173.162.0/24 maxlen: 24
46.173.163.0/24 maxlen: 24
46.173.164.0/22 maxlen: 22
46.173.164.0/24 maxlen: 24
46.173.165.0/24 maxlen: 24
46.173.166.0/24 maxlen: 24
46.173.167.0/24 maxlen: 24
46.173.168.0/22 maxlen: 22
46.173.172.0/24 maxlen: 24
46.173.173.0/24 maxlen: 24
46.173.174.0/24 maxlen: 24
46.173.175.0/24 maxlen: 24
94.231.176.0/24 maxlen: 24
94.231.177.0/24 maxlen: 24
94.231.178.0/24 maxlen: 24
94.231.179.0/24 maxlen: 24
94.231.180.0/24 maxlen: 24
94.231.181.0/24 maxlen: 24
94.231.182.0/24 maxlen: 24
94.231.183.0/24 maxlen: 24
94.231.185.0/24 maxlen: 24
94.231.186.0/24 maxlen: 24
94.231.187.0/24 maxlen: 24
94.231.188.0/24 maxlen: 24
94.231.189.0/24 maxlen: 24
94.231.190.0/24 maxlen: 24
94.231.191.0/24 maxlen: 24
2001:678:d94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:a5:5f:dc:54:6b:4d:51:f0:26:05:4e:3e:7f:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Nov 22 06:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ac91b5e3e58bb2d65ec34e0da962bfdc4e7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:92:03:9b:ba:f6:9e:08:98:86:ab:73:b1:
a4:44:b0:a0:67:42:88:6c:68:1d:5c:05:19:b8:0b:
08:5b:a1:0c:20:9e:f8:2b:75:55:c1:5f:5d:6c:de:
c2:82:cd:14:ab:0b:54:73:e8:2a:95:14:ba:c7:96:
83:90:d2:86:b4:9a:95:34:ac:8c:ed:a7:d0:d7:dc:
99:ff:7b:9e:36:44:37:f0:a7:a6:3e:55:3e:fc:b3:
a6:3d:80:a4:c8:95:ea:26:d1:94:5f:c4:4c:05:72:
cc:47:af:0f:2d:ae:6c:f3:30:0f:a4:a5:f7:43:0f:
50:a5:c3:eb:54:49:93:46:80:b4:fe:83:3e:25:76:
6a:08:eb:9b:d5:43:df:e6:84:44:5a:84:4f:f8:a2:
8d:da:a6:3b:a9:a7:66:64:e3:a9:84:42:09:56:68:
3f:a3:26:73:11:10:52:bd:e0:01:dc:c1:59:7f:e0:
b3:e2:ae:b5:7b:cf:20:c6:fb:5a:3f:02:70:34:18:
6b:d7:3d:02:21:78:af:43:93:17:5c:6b:b5:6f:56:
7b:4c:41:87:9d:66:f3:90:fb:e8:51:c0:ba:24:34:
fd:2f:46:d7:ff:b3:1e:40:d1:14:f0:b8:19:d7:2c:
77:da:4b:4e:07:d8:c8:a0:8c:5d:c4:f5:5b:81:f9:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AC:91:B5:E3:E5:8B:B2:D6:5E:C3:4E:0D:A9:62:BF:DC:4E:7C:09
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wayRtePli7LWXsNODaliv9xOfAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.160.0/20
94.231.176.0/21
94.231.185.0-94.231.191.255
IPv6:
2001:678:d94::/48
Signature Algorithm: sha256WithRSAEncryption
72:91:29:66:f5:49:f9:f2:a0:96:04:75:3f:a0:30:01:23:fe:
08:04:34:06:b3:db:be:b1:b0:1a:e8:02:f1:93:97:6d:a0:2d:
79:11:16:d4:25:22:ad:79:cd:92:5a:0e:58:81:fe:07:da:8e:
b7:4c:2f:1e:b8:3a:a2:d4:7b:ef:29:c1:c2:31:05:c5:7e:39:
60:de:7d:25:aa:ab:5e:b3:59:42:12:b7:ed:70:11:7e:32:62:
af:d0:42:a4:05:56:a7:d8:d2:80:5f:80:46:59:0e:a9:93:3e:
0d:71:4e:27:36:ad:62:3f:94:cb:5d:79:f4:2f:65:4f:54:a5:
bf:17:3c:01:59:31:8c:29:cd:df:84:e1:41:31:4c:1d:89:68:
17:01:e1:a3:59:9d:7b:a1:26:71:46:ab:08:b3:1f:3c:45:7f:
e9:a1:db:54:16:fa:d5:3e:ab:27:57:67:64:9e:e4:11:5b:ff:
09:71:44:ac:86:c3:13:d7:d2:8d:1b:ce:b2:9c:47:54:f5:d7:
d0:bc:96:69:29:de:44:bb:f9:76:d0:df:29:bf:44:aa:32:ed:
fd:b1:a5:c1:3b:7d:4a:53:73:8b:a9:87:b2:7b:5b:ba:83:21:
53:16:a0:94:81:08:82:65:a4:f9:c0:9a:45:80:20:9d:bb:68:
2d:21:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:31 2024 by rpki-client on console-fra.rpki-client.org