Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/4oNccMT8ZeQzjYzFiW0EU23HNQ4.roa
File: 4oNccMT8ZeQzjYzFiW0EU23HNQ4.roa (raw, json)
Hash identifier: PgCl7Il3+eV+ufJ+nGPbZ+mbFBF/FksfJg8kWo4nFBg=
Subject key identifier: E2:83:5C:70:C4:FC:65:E4:33:8D:8C:C5:89:6D:04:53:6D:C7:35:0E
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01904FF3C86C857DFC42968EAB3597BD820C
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/4oNccMT8ZeQzjYzFiW0EU23HNQ4.roa
Signing time: Tue 25 Jun 2024 15:11:34 +0000
ROA not before: Tue 25 Jun 2024 15:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31246
IP address blocks: 46.39.160.0/19 maxlen: 19
83.240.0.0/17 maxlen: 17
95.82.128.0/18 maxlen: 18
185.51.240.0/22 maxlen: 22
213.155.224.0/19 maxlen: 19
2001:4cc8::/31 maxlen: 31
2a01:4240::/32 maxlen: 32
2a0a:cac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:f3:c8:6c:85:7d:fc:42:96:8e:ab:35:97:bd:82:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jun 25 15:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2835c70c4fc65e4338d8cc5896d04536dc7350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:59:31:e3:91:43:c4:df:96:c1:18:fd:dc:
ea:fa:56:41:f6:67:d7:6b:72:56:da:20:b2:de:e8:
7f:16:10:2e:8e:67:bd:bf:18:33:10:50:f9:7c:82:
4b:4a:4d:dc:3b:aa:e5:d3:be:ff:dd:4a:01:75:48:
27:1a:53:c8:ea:6e:18:ba:c7:f9:29:5e:f1:71:48:
bb:c6:dc:93:0b:1a:a1:ef:76:b4:a1:f7:22:7e:89:
fe:d2:e4:e0:ef:da:c6:19:e6:80:e9:9e:4e:ef:a5:
b5:f6:91:3c:d7:14:8c:4f:c0:08:fd:f9:6d:cd:f6:
dc:b0:75:e0:05:a9:df:eb:24:32:85:37:dc:75:23:
13:84:96:fc:8c:9f:91:49:60:03:7b:f2:85:d3:78:
b2:0a:21:eb:00:3b:a2:c5:92:7e:db:1a:87:ae:6e:
b1:26:cb:64:14:39:ae:3c:e6:28:29:9e:c0:4e:b1:
d7:db:75:1f:b0:23:1d:ef:5f:7c:8e:99:44:58:98:
f2:f5:91:25:da:bf:1a:55:81:ed:d4:6e:9c:0b:2f:
61:39:52:75:90:f8:6a:62:33:09:f6:69:f0:5a:72:
33:a9:31:32:de:80:eb:e1:17:75:ed:e3:91:b9:aa:
bb:7d:05:47:58:b9:9f:71:84:dd:7c:53:49:df:0e:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:5C:70:C4:FC:65:E4:33:8D:8C:C5:89:6D:04:53:6D:C7:35:0E
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/4oNccMT8ZeQzjYzFiW0EU23HNQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.160.0/19
83.240.0.0/17
95.82.128.0/18
185.51.240.0/22
213.155.224.0/19
IPv6:
2001:4cc8::/31
2a01:4240::/32
2a0a:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:77:e7:8b:cb:6f:4a:af:09:bd:ab:7b:43:16:dc:03:26:36:
93:97:69:b6:5e:62:b6:05:5e:b5:37:4a:44:20:34:29:8c:c6:
93:29:9a:ce:04:e3:92:51:b2:56:51:01:31:ce:0b:26:a2:02:
6b:84:f4:7f:7e:54:86:25:b5:2d:ae:25:ea:30:0a:c2:1a:bf:
a4:1a:e9:e3:a3:54:d7:f6:e6:fc:61:f6:e4:9a:b0:04:93:9e:
c5:6b:82:a5:17:2c:8f:38:15:16:dc:93:69:20:f1:19:e1:16:
f6:e8:1b:80:53:1f:72:96:45:ff:2d:ae:13:82:c0:97:af:44:
a9:10:ab:9b:57:ca:54:2d:2b:60:c7:70:ec:18:d2:0e:28:01:
16:ed:e3:c3:5d:45:0d:1a:ef:e6:b5:3a:de:dc:26:4b:c8:03:
70:b5:e7:a0:33:a1:eb:bf:67:43:1e:d4:f9:74:2c:f3:49:90:
e4:06:4e:38:b9:c7:35:16:51:b4:65:34:88:8b:2c:e9:da:a7:
b5:5c:0b:dd:7a:33:50:2c:86:1f:9d:e8:9e:20:b5:54:79:51:
d9:ab:f6:29:f2:ba:76:4f:8f:18:2e:84:a6:cb:78:b4:84:1e:
79:5d:13:cc:0c:f5:4c:52:1c:a7:dd:ce:57:55:cc:07:9c:b8:
f9:48:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 15:24:25 2024 by rpki-client on console-fra.rpki-client.org