Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/2CNEuR9Q5tJiLKaPrg7yGAKXtCQ.roa
File: 2CNEuR9Q5tJiLKaPrg7yGAKXtCQ.roa (raw, json)
Hash identifier: 6P70QgEiEF/C5FsCIDFJaRYR8vTP+jVYLLyuzw/rPYA=
Subject key identifier: D8:23:44:B9:1F:50:E6:D2:62:2C:A6:8F:AE:0E:F2:18:02:97:B4:24
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 018CED52DFF5369A8D80C51E38DAF1E48614
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/2CNEuR9Q5tJiLKaPrg7yGAKXtCQ.roa
Signing time: Tue 09 Jan 2024 08:24:40 +0000
ROA not before: Tue 09 Jan 2024 08:24:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 77.243.208.0/20 maxlen: 20
46.31.176.0/22 maxlen: 22
46.31.182.0/24 maxlen: 24
46.31.180.0/23 maxlen: 23
185.91.143.0/24 maxlen: 24
185.91.142.0/24 maxlen: 24
185.91.141.0/24 maxlen: 24
185.91.140.0/24 maxlen: 24
2a00:df80:1::/48 maxlen: 48
2a00:df80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:52:df:f5:36:9a:8d:80:c5:1e:38:da:f1:e4:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jan 9 08:24:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d82344b91f50e6d2622ca68fae0ef2180297b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:0d:87:3a:fa:9b:2c:95:c7:d4:59:86:88:
42:17:7f:16:de:00:00:79:a8:60:7a:eb:82:30:5c:
9c:aa:fb:66:54:2b:82:5a:28:49:e9:15:f6:fc:46:
58:9b:83:6c:da:81:23:6e:5a:b1:95:81:ce:41:87:
9c:92:9f:53:a3:ea:73:fb:be:cf:03:3b:85:5d:d6:
4f:b7:5a:56:62:56:b3:a8:43:5a:fc:4b:c0:74:be:
b2:b1:e8:c4:13:ac:64:15:ac:c1:cb:e8:34:f8:c0:
6e:53:32:28:7d:46:8b:e0:1c:56:f8:af:0e:04:a3:
14:6b:9d:3d:22:71:dc:5b:cc:dd:f8:84:1f:f9:1c:
12:66:76:14:ad:0f:bd:a3:41:3d:53:e9:10:15:3e:
1a:eb:e4:65:c2:74:c3:64:20:ed:32:86:90:32:3e:
9c:0f:9a:be:37:ef:ed:ea:a0:5b:2f:6c:75:af:bd:
e9:74:ac:b3:25:6d:de:c9:31:9b:37:a9:ac:50:71:
8f:27:80:90:ee:f5:a0:eb:be:dd:bf:b4:2e:69:37:
47:73:ae:0b:b2:78:19:16:d1:fc:d5:ad:69:be:ac:
12:d5:7c:d6:c2:7a:ae:41:2d:c8:15:15:5c:4b:f2:
b2:9b:1d:c6:9f:92:58:15:6b:81:cc:03:a8:17:ec:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:44:B9:1F:50:E6:D2:62:2C:A6:8F:AE:0E:F2:18:02:97:B4:24
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/2CNEuR9Q5tJiLKaPrg7yGAKXtCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.176.0-46.31.182.255
77.243.208.0/20
185.91.140.0/22
IPv6:
2a00:df80::/47
Signature Algorithm: sha256WithRSAEncryption
78:22:c4:0c:66:4d:35:b1:38:bf:d4:a2:e6:2a:08:03:9a:c1:
3f:ae:9f:16:29:99:19:4c:a0:ff:8f:5a:a4:2d:a3:ad:ef:fd:
a8:fe:5b:ad:30:1a:9f:a9:6b:fe:a2:34:60:c0:f3:8f:af:97:
2a:56:1d:83:85:9f:06:35:48:b3:1c:88:55:35:a5:85:7e:de:
96:5b:eb:a2:d3:85:90:b3:55:88:34:df:4d:62:be:4c:3a:86:
20:cf:3f:f9:34:3b:cf:53:59:d9:e8:63:5d:c8:f2:08:f3:dc:
08:ed:61:31:6e:52:0b:9d:3e:fd:12:c9:42:e1:42:14:3f:8c:
8f:e4:e8:68:58:50:a1:3f:f9:5f:b2:1e:cf:d9:16:6d:c9:91:
95:9d:ee:8c:d9:ba:2e:89:ec:c4:a1:02:6b:ad:94:e8:a5:97:
97:1d:dc:be:d5:c5:23:1c:02:87:0e:82:ec:24:df:74:04:b7:
9f:5d:55:4c:26:7f:c7:28:e7:5c:df:d7:32:93:4c:64:a5:44:
1b:82:2a:43:5f:ac:96:40:98:6d:79:57:e4:68:f6:db:c8:01:
a3:5d:48:fa:a4:03:58:90:bc:f7:d8:ed:76:50:d5:15:12:e2:
1a:00:8a:ea:23:c3:f5:a1:3c:9b:11:10:30:98:38:2f:a5:1a:
f9:87:ca:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:57 2024 by rpki-client on console-fra.rpki-client.org