Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/1fDxXQZlqZpwPxusZ2EMRDhnnZM.roa
File: 1fDxXQZlqZpwPxusZ2EMRDhnnZM.roa (raw, json)
Hash identifier: hV0BNW/fhv2xYlEDXeAzT3oKF4B8LYgNMMmigLb6BYU=
Subject key identifier: D5:F0:F1:5D:06:65:A9:9A:70:3F:1B:AC:67:61:0C:44:38:67:9D:93
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 018CC94D760C73B075D407ADB45B3C36BF2D
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/1fDxXQZlqZpwPxusZ2EMRDhnnZM.roa
Signing time: Tue 02 Jan 2024 08:32:26 +0000
ROA not before: Tue 02 Jan 2024 08:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43142
IP address blocks: 185.8.64.0/22 maxlen: 22
185.8.64.0/23 maxlen: 23
185.8.64.0/24 maxlen: 24
185.8.66.0/24 maxlen: 24
185.8.67.0/24 maxlen: 24
185.8.65.0/24 maxlen: 24
46.227.16.0/24 maxlen: 24
46.227.16.0/21 maxlen: 21
46.227.16.0/23 maxlen: 23
46.227.17.0/24 maxlen: 24
46.227.22.0/24 maxlen: 24
46.227.21.0/24 maxlen: 24
46.227.23.0/24 maxlen: 24
46.227.18.0/24 maxlen: 24
46.227.18.0/23 maxlen: 23
46.227.20.0/24 maxlen: 24
46.227.19.0/24 maxlen: 24
46.227.20.0/22 maxlen: 22
91.194.96.0/22 maxlen: 22
91.194.97.0/24 maxlen: 24
91.194.96.0/24 maxlen: 24
91.194.96.0/23 maxlen: 23
91.194.98.0/24 maxlen: 24
91.194.98.0/23 maxlen: 23
91.194.100.0/23 maxlen: 23
91.194.100.0/24 maxlen: 24
91.194.101.0/24 maxlen: 24
188.214.102.0/24 maxlen: 24
188.214.102.0/23 maxlen: 24
188.214.103.0/24 maxlen: 24
2a01:6e00:7::/48 maxlen: 48
2a01:6e00:2::/48 maxlen: 48
2a01:6e00:10::/48 maxlen: 48
2a01:6e00:6::/48 maxlen: 48
2a01:6e00:9::/48 maxlen: 48
2a01:6e00:4::/48 maxlen: 48
2a01:6e00:8::/48 maxlen: 48
2a01:6e00:3::/48 maxlen: 48
2a01:6e00:1::/48 maxlen: 48
2a01:6e00:5::/48 maxlen: 48
2a01:6e00:8000::/33 maxlen: 33
2a01:6e00::/33 maxlen: 33
2a01:6e00::/32 maxlen: 32
2a01:6e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:76:0c:73:b0:75:d4:07:ad:b4:5b:3c:36:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jan 2 08:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5f0f15d0665a99a703f1bac67610c4438679d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:39:94:5e:32:84:97:f4:f1:a7:a5:78:a2:
b0:ae:9c:6c:05:d4:66:f4:7f:7b:ba:87:0f:57:74:
5e:75:4c:5d:be:7c:a9:4f:06:9a:d6:ff:0a:52:87:
4e:de:03:15:ab:d4:cd:b4:5e:78:0b:12:32:97:94:
20:ca:98:b8:fe:f5:48:69:e4:8f:3c:75:89:22:42:
1c:cb:c5:77:96:2d:9d:b2:dd:9f:8d:17:7b:81:d7:
bc:83:d3:fd:f2:ad:30:6d:80:35:3b:99:e8:4d:0c:
f8:a6:ae:e2:41:3f:29:6b:b5:1c:41:1e:a7:09:39:
6f:e0:8e:8d:cd:0f:d1:28:b1:2f:ab:e9:40:76:d0:
b8:f4:91:a2:1d:02:2a:db:45:6d:bc:00:c1:9b:e1:
5b:0d:18:5b:24:01:e4:32:9c:25:9b:af:52:e2:a5:
42:6d:6f:46:1b:40:37:cd:0a:88:83:ef:ec:b1:c7:
2b:ea:d2:0c:cc:96:80:49:49:3e:da:8c:47:79:f5:
29:8c:be:68:7f:5b:70:56:74:a1:1a:b8:ea:03:fc:
6c:f6:ea:85:93:e2:62:37:eb:dd:c5:99:4d:14:3d:
4a:d2:1d:f5:8c:87:a4:b4:b2:f8:8f:30:ff:17:02:
f1:08:91:fc:e1:8d:38:23:6b:22:5d:b1:09:96:43:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:F1:5D:06:65:A9:9A:70:3F:1B:AC:67:61:0C:44:38:67:9D:93
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/1fDxXQZlqZpwPxusZ2EMRDhnnZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.16.0/21
91.194.96.0-91.194.101.255
185.8.64.0/22
188.214.102.0/23
IPv6:
2a01:6e00::/32
Signature Algorithm: sha256WithRSAEncryption
2d:38:21:4c:10:69:44:a4:17:4a:44:78:23:80:98:7f:e4:08:
2c:58:24:a4:0c:d3:64:aa:f3:41:ba:0e:52:31:51:3a:7d:2f:
45:f8:63:f2:30:ec:78:f3:fe:ef:bb:06:73:63:88:15:b8:da:
65:d6:b1:47:2f:52:bf:9d:1f:19:3d:49:7b:a2:57:a9:94:2e:
d8:73:a0:18:a2:cf:20:14:4e:c2:bb:a9:3c:5b:4f:e6:84:e4:
e6:70:b2:f6:a3:54:24:51:ec:a6:79:9f:dc:a6:24:be:c2:c5:
fa:08:19:8a:cc:13:07:2f:87:e9:74:b0:84:21:7f:b4:e0:80:
9d:d8:11:23:20:0a:ae:2d:2d:e4:76:84:14:5c:1f:63:e8:d3:
ba:81:67:91:44:fa:cf:90:aa:1c:01:a8:ae:53:1b:7f:7d:5b:
a0:7d:f1:9e:b3:d3:f4:32:cf:c4:c6:86:24:f0:cc:aa:b2:24:
2f:69:af:bb:6a:4c:28:f9:cc:f0:af:46:27:51:e8:06:8e:9d:
4d:28:b4:59:31:27:0c:c4:af:74:e2:18:1f:f6:45:3b:8f:71:
ac:a5:f8:17:71:ab:73:b3:f8:ae:79:47:ec:94:54:93:c7:55:
1e:e7:2f:ca:52:5a:6c:28:74:73:4a:9f:60:34:a8:f7:33:ae:
3d:f6:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:52 2024 by rpki-client on console-ams.rpki-client.org