Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/DuXmkntd0nzY-tcNdToHs8v9Q3Q.roa
File: DuXmkntd0nzY-tcNdToHs8v9Q3Q.roa (raw, json)
Hash identifier: xTDVvKPpTCatQJTeG25xRZS68lRUUCgEgEf3dMh6W6c=
Subject key identifier: 0E:E5:E6:92:7B:5D:D2:7C:D8:FA:D7:0D:75:3A:07:B3:CB:FD:43:74
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 018F332644F3BD575746E5DFE386F6A21BF1
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/DuXmkntd0nzY-tcNdToHs8v9Q3Q.roa
Signing time: Wed 01 May 2024 07:54:56 +0000
ROA not before: Wed 01 May 2024 07:54:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204106
IP address blocks: 46.20.202.0/23 maxlen: 23
46.20.202.0/24 maxlen: 24
46.20.203.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
2a13:1b00::/29 maxlen: 29
2a13:1b00:1::/48 maxlen: 48
2a13:1b00:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:26:44:f3:bd:57:57:46:e5:df:e3:86:f6:a2:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: May 1 07:54:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee5e6927b5dd27cd8fad70d753a07b3cbfd4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:b3:ca:a9:5d:af:83:68:e5:9e:f9:ee:63:
41:3e:6a:78:07:b2:1c:3d:de:72:80:c4:6b:6d:8f:
93:1f:d9:d0:fa:fe:ba:8f:0e:fd:7f:14:ac:42:59:
0b:8d:67:9f:40:85:39:55:78:92:98:25:75:15:78:
32:1d:3f:9f:17:7d:f4:54:d8:08:d3:3b:a7:31:29:
2c:fb:31:b5:62:f0:63:bf:b4:9b:60:3f:ea:0c:26:
b4:e5:ef:bb:81:d8:94:32:7f:59:45:93:ac:dd:9c:
09:f6:90:3a:05:39:44:f1:ce:95:50:13:74:ea:2e:
2b:31:76:0d:98:26:33:38:88:43:9c:26:be:2e:71:
bf:0d:6a:b3:54:df:ed:78:e7:09:b7:81:3a:2c:46:
08:3b:33:94:bf:98:00:ac:b1:68:cf:ca:5d:da:20:
86:fb:04:54:93:b5:29:59:2e:b5:af:f6:95:73:b5:
5c:f1:a9:1e:bf:d1:4c:60:6c:88:e9:28:bc:7b:ea:
d5:6a:79:d0:f9:bb:43:3c:9b:37:a7:8c:73:0d:91:
e3:0b:db:c5:66:72:42:17:67:1a:a0:b7:57:55:49:
91:15:4e:22:9d:17:b7:d6:fe:8d:20:63:fa:4a:ec:
fe:bc:b3:67:28:f1:17:7c:28:48:b9:bb:c0:da:63:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:E6:92:7B:5D:D2:7C:D8:FA:D7:0D:75:3A:07:B3:CB:FD:43:74
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/DuXmkntd0nzY-tcNdToHs8v9Q3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/23
77.247.198.0/24
IPv6:
2a13:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
05:c6:e6:38:13:7f:40:fa:4e:0e:c5:1e:6d:d3:78:76:5a:b9:
a6:f2:76:2e:d4:0b:6e:05:d1:78:e8:f4:7a:84:d1:0a:1e:df:
d6:f6:e3:b2:d1:a8:20:1c:2c:a7:5a:2e:28:89:3e:c4:aa:b7:
06:4e:40:b3:94:b5:26:4f:c4:fd:d8:e9:01:a4:33:01:70:90:
b9:eb:9c:9b:fd:93:0a:38:a2:90:8a:16:03:55:50:ac:42:2c:
30:d1:0c:10:d7:6d:45:ba:d1:74:ed:90:5d:8f:66:84:62:8c:
b7:1f:59:87:ce:a8:04:6e:83:c8:ef:be:7c:1b:38:eb:e8:33:
50:fa:6f:96:74:83:ff:16:75:bc:47:1a:f5:fe:cb:b3:7f:d0:
22:bf:a4:3e:99:50:60:81:a2:34:19:c1:d5:34:82:7c:d8:bc:
ec:d0:c5:0a:5b:3b:13:1c:05:fe:60:05:1f:b8:1c:ce:02:bd:
ab:3d:8e:3d:de:78:55:e2:d1:b8:8f:7f:35:fb:7f:b3:48:17:
7e:0a:d3:39:3e:08:f4:31:b8:5e:5f:36:e4:18:04:54:23:7d:
da:5c:67:4d:2d:a1:f5:71:5f:4a:ad:67:6e:2c:37:de:fc:55:
c6:f8:bf:a7:54:5e:6f:3b:c7:13:c1:38:93:26:56:76:a8:69:
24:f1:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:25 2024 by rpki-client on console-fra.rpki-client.org