Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/F_CeWyC6qCo5BSDjWHSUVURmMgM.roa
File: F_CeWyC6qCo5BSDjWHSUVURmMgM.roa (raw, json)
Hash identifier: gTSwGw7TIcZIvZuvqZSZXAJhQ3k25tPj3d7fec8Y1xI=
Subject key identifier: 17:F0:9E:5B:20:BA:A8:2A:39:05:20:E3:58:74:94:55:44:66:32:03
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 01934DB41DD958F6D57A3A8196789F943B2E
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/F_CeWyC6qCo5BSDjWHSUVURmMgM.roa
Signing time: Thu 21 Nov 2024 07:51:09 +0000
ROA not before: Thu 21 Nov 2024 07:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64476
IP address blocks: 46.247.136.0/23 maxlen: 23
46.247.138.0/23 maxlen: 23
46.247.140.0/24 maxlen: 24
46.247.141.0/24 maxlen: 24
85.190.64.0/24 maxlen: 24
85.190.65.0/24 maxlen: 24
85.190.67.0/24 maxlen: 24
85.190.68.0/24 maxlen: 24
85.190.71.0/24 maxlen: 24
85.190.72.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.88.0/22 maxlen: 22
87.121.208.0/21 maxlen: 21
185.161.168.0/22 maxlen: 22
185.231.8.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.169.0/24 maxlen: 24
185.253.170.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:500::/40 maxlen: 40
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:b4:1d:d9:58:f6:d5:7a:3a:81:96:78:9f:94:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Nov 21 07:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17f09e5b20baa82a390520e35874945544663203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:83:10:38:b7:09:a1:d1:50:29:30:46:92:
cb:dd:db:73:d3:a0:0e:d5:ba:86:20:59:04:5b:64:
0e:c4:a1:ce:9f:b0:40:c0:b4:0c:2d:7e:f4:87:85:
bd:c8:ee:d1:f6:0a:59:dd:18:f7:f1:48:3e:4c:88:
d0:de:bf:1b:59:ed:4e:68:35:ab:36:5e:ff:f6:35:
d0:62:18:d0:01:38:50:72:11:ee:6f:12:f8:3a:02:
40:5a:bf:38:c5:79:67:ef:d9:42:98:af:84:88:66:
dc:76:ee:0d:88:94:d3:ed:18:2e:19:83:5d:58:b8:
c3:34:c9:13:e1:56:a4:3d:e7:4d:67:f5:73:99:f0:
7a:e5:2e:b0:d8:a3:c7:db:3b:97:43:92:c6:97:3e:
98:d9:59:a2:fc:26:92:90:93:2a:60:a1:c0:ab:7a:
51:4d:1b:c6:53:fb:9e:0c:b1:f3:f2:a5:bf:aa:18:
37:a6:4b:e7:9b:b8:d2:d5:d8:ff:b0:e6:3f:2f:85:
eb:bb:b9:81:cf:be:50:ce:1c:3b:f7:c0:e7:ef:a3:
72:9d:f1:06:ff:b6:1d:2e:8e:1c:ff:e5:24:be:cd:
b9:04:69:91:23:62:75:12:a0:bd:e5:55:80:33:5b:
18:64:56:98:29:65:5a:ac:31:56:c5:34:b5:09:bf:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:9E:5B:20:BA:A8:2A:39:05:20:E3:58:74:94:55:44:66:32:03
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/F_CeWyC6qCo5BSDjWHSUVURmMgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/23
85.190.67.0-85.190.68.255
85.190.71.0-85.190.72.255
85.190.84.0/23
85.190.88.0/22
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e805:210::/44
2a0a:e805:500::/40
2a0a:e805:610::/44
2a0a:e805:710::/44
Signature Algorithm: sha256WithRSAEncryption
48:41:0e:80:9b:fb:79:25:97:bf:25:d3:e3:df:e8:75:ba:e7:
8d:0a:a1:3c:fe:65:c9:39:e0:08:39:25:df:67:7f:45:65:36:
70:5f:0a:cd:fb:34:4b:9c:9d:87:f5:9c:3e:13:4b:90:ae:3b:
b3:58:7c:0c:a2:34:ea:bc:e7:a6:84:67:87:fd:c4:02:94:c9:
e9:c8:90:29:bd:4f:ef:e1:8f:e3:7f:75:f0:1b:8d:10:5b:bc:
ca:44:4d:ec:61:ef:30:71:94:15:4e:e3:4f:8d:f5:45:7d:f9:
c6:b5:90:94:f4:5b:78:e5:3f:ac:c7:eb:14:f3:c9:86:e6:3a:
11:d4:fe:37:5d:63:30:a9:14:4f:0e:ef:25:07:bf:48:2e:4f:
b9:4a:8c:00:8a:e4:72:1a:e9:47:68:ce:36:10:32:e3:2a:25:
49:c9:24:5d:a9:e1:cb:e6:62:8b:fb:01:ad:06:b4:9c:12:5d:
3e:d3:d4:80:53:0d:5a:57:90:e1:cd:6e:94:d5:07:86:31:7a:
ef:cb:4a:c5:8b:84:25:af:63:9e:1d:de:da:da:ea:99:c1:0b:
c4:36:cf:a5:86:25:b5:7f:03:a8:37:5b:55:df:64:64:a4:04:
63:c5:67:0c:c4:e7:2f:eb:42:a7:be:15:26:23:50:6c:b6:79:
bf:6d:30:6a
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZNNtB3ZWPbVejqBlniflDsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTBkOGUxNTY0ZTQwMzEyYzlkZGYyMWJhMmFhMDNiYTU1
OWVhZDYwHhcNMjQxMTIxMDc1MTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2YwOWU1YjIwYmFhODJhMzkwNTIwZTM1ODc0OTQ1NTQ0NjYzMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10uDEDi3CaHRUCkwRpLL3dtz06AO
1bqGIFkEW2QOxKHOn7BAwLQMLX70h4W9yO7R9gpZ3Rj38Ug+TIjQ3r8bWe1OaDWr
Nl7/9jXQYhjQAThQchHubxL4OgJAWr84xXln79lCmK+EiGbcdu4NiJTT7RguGYNd
WLjDNMkT4VakPedNZ/VzmfB65S6w2KPH2zuXQ5LGlz6Y2Vmi/CaSkJMqYKHAq3pR
TRvGU/ueDLHz8qW/qhg3pkvnm7jS1dj/sOY/L4Xru7mBz75Qzhw798Dn76NynfEG
/7YdLo4c/+Ukvs25BGmRI2J1EqC95VWAM1sYZFaYKWVarDFWxTS1Cb8OuQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFBfwnlsguqgqOQUg41h0lFVEZjIDMB8GA1UdIwQY
MBaAFG8Q2OFWTkAxLJ3fIboqoDulWerWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYt
YjZhOGY4ZTgwZjdiLzEvRl9DZVd5QzZxQ281QlNEaldIU1VWVVJtTWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYtYjZhOGY4ZTgwZjdi
LzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzBaBAIAATBUMAwDBAMu
94gDBAEu94wDBAFVvkAwDAMEAFW+QwMEAFW+RDAMAwQAVb5HAwQAVb5IAwQBVb5U
AwQCVb5YAwQDV3nQAwQCuaGoAwQCuecIAwQCuf2oMCkEAgACMCMDBwQqCugFAhAD
BgAqCugFBQMHBCoK6AUGEAMHBCoK6AUHEDANBgkqhkiG9w0BAQsFAAOCAQEASEEO
gJv7eSWXvyXT49/odbrnjQqhPP5lyTngCDkl32d/RWU2cF8Kzfs0S5ydh/WcPhNL
kK47s1h8DKI06rznpoRnh/3EApTJ6ciQKb1P7+GP43918BuNEFu8ykRN7GHvMHGU
FU7jT431RX35xrWQlPRbeOU/rMfrFPPJhuY6EdT+N11jMKkUTw7vJQe/SC5PuUqM
AIrkchrpR2jONhAy4yolSckkXanhy+Zii/sBrQa0nBJdPtPUgFMNWleQ4c1ulNUH
hjF678tKxYuEJa9jnh3e2trqmcELxDbPpYYltX8DqDdbVd9kZKQEY8VnDMTnL+tC
p74VJiNQbLZ5v20wag==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:26:55 2024 by rpki-client on console-fra.rpki-client.org