Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pIquVAbd47lP2VQ6cDbsawHsIOc.roa
File: pIquVAbd47lP2VQ6cDbsawHsIOc.roa (raw, json)
Hash identifier: eV/flRjDD0+Dt/c4F9fLMSlej9fLHmZDmBcmcfrvZNA=
Subject key identifier: A4:8A:AE:54:06:DD:E3:B9:4F:D9:54:3A:70:36:EC:6B:01:EC:20:E7
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492D0560563846D395102A7D22B81B4
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pIquVAbd47lP2VQ6cDbsawHsIOc.roa
Signing time: Mon 01 Jan 2024 10:30:05 +0000
ROA not before: Mon 01 Jan 2024 10:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12660
IP address blocks: 77.237.77.0/24 maxlen: 24
46.209.40.0/22 maxlen: 22
46.209.40.0/23 maxlen: 23
46.209.42.0/23 maxlen: 23
46.209.80.0/22 maxlen: 22
46.209.80.0/21 maxlen: 21
46.209.84.0/22 maxlen: 22
46.209.0.0/24 maxlen: 24
46.209.1.0/24 maxlen: 24
46.209.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d0:56:05:63:84:6d:39:51:02:a7:d2:2b:81:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a48aae5406dde3b94fd9543a7036ec6b01ec20e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:a6:d0:67:34:ac:4b:e2:43:31:22:fe:6e:
25:5e:46:43:4e:d7:ff:76:2b:c9:2a:b9:92:92:1e:
02:78:6b:d0:13:eb:10:27:b0:e8:c2:25:e6:e0:38:
5d:aa:ea:b2:03:5a:59:ef:ea:0d:4d:91:a8:6f:22:
75:94:96:7f:c4:ae:4f:5e:ef:f4:fd:ad:88:3e:22:
1d:1b:82:51:7e:a0:ab:9e:c5:7a:ef:0c:42:19:d1:
f1:86:64:b1:0f:57:97:8c:77:81:7f:0c:65:ac:e8:
7d:c2:ed:a3:2e:ca:93:36:4e:97:95:55:45:06:05:
0c:50:ea:86:e1:2b:bb:a4:7f:7e:68:aa:30:79:4f:
80:9a:f6:37:e0:bf:d6:8e:6b:ae:c2:a0:de:12:17:
ea:c7:f7:7b:2c:8f:4a:a2:78:87:b9:2e:ed:b5:b2:
3d:e2:71:eb:03:68:f1:a4:2c:e9:5b:dc:e4:07:69:
96:dd:cf:8f:2d:42:3f:49:e0:b8:ee:68:ec:51:e6:
5b:22:73:60:55:9e:ea:a6:3e:99:4b:67:b5:8d:67:
5f:99:6a:d6:6c:6c:e7:e3:1e:85:dd:8e:fd:4f:c0:
aa:24:e5:b4:77:12:60:1b:b7:2e:30:ca:69:ed:46:
14:05:87:1c:44:5a:e2:d1:99:c0:53:74:9f:63:2a:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:AE:54:06:DD:E3:B9:4F:D9:54:3A:70:36:EC:6B:01:EC:20:E7
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pIquVAbd47lP2VQ6cDbsawHsIOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.0.0/23
46.209.40.0/22
46.209.80.0/21
77.237.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5b:f4:f7:7e:97:02:09:12:67:3c:99:1c:b4:c2:9e:0a:18:
c0:cd:90:1a:fa:87:5a:62:81:8a:b7:86:32:3e:ca:94:7e:70:
84:f5:2f:34:1d:2d:2b:b3:b9:7f:88:7d:53:60:02:5e:41:eb:
eb:7c:5f:5f:6c:0e:5b:de:bb:4f:78:af:0d:2e:96:4c:0e:ad:
6a:27:af:84:b8:cf:73:90:0c:a7:93:01:b6:56:e1:96:d2:4f:
9f:5e:d1:2d:d4:0a:f3:f5:61:85:d0:da:ae:b4:7f:b4:77:30:
4b:b0:0f:2b:90:bc:c3:d4:4e:4a:33:a1:79:72:51:a3:4e:59:
d6:11:cf:be:ca:c1:9e:81:72:e4:da:41:92:96:64:20:5f:36:
56:87:a9:ac:92:77:49:37:28:fd:19:98:0c:b2:ea:c0:1c:89:
35:ac:c4:35:4c:3d:bf:c8:3f:84:27:54:dd:16:5b:ba:4c:98:
e9:d3:f7:d2:2a:cb:2b:89:1c:25:b8:1f:78:8a:6d:d2:a2:34:
22:af:dd:62:5a:8d:11:b3:d8:e2:b4:4f:41:56:ba:c1:9e:de:
d9:cd:42:3e:96:7b:2e:d9:bd:a0:f8:bd:32:4c:fd:be:41:65:
92:ab:22:6d:21:0d:63:35:42:0d:91:ba:da:dd:07:6f:dc:fd:
d6:c5:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:46:26 2024 by rpki-client on console-ams.rpki-client.org