Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/0ASnvhQLoFaM9-jrUt0dq2m5JKg.roa
File: 0ASnvhQLoFaM9-jrUt0dq2m5JKg.roa (raw, json)
Hash identifier: 0y1squijEOLZAns0qYPK89rKNkj8q/buBFssWX2JgRg=
Subject key identifier: D0:04:A7:BE:14:0B:A0:56:8C:F7:E8:EB:52:DD:1D:AB:69:B9:24:A8
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 01936A690EB215C0A6E2C2FE24E148D1F758
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/0ASnvhQLoFaM9-jrUt0dq2m5JKg.roa
Signing time: Tue 26 Nov 2024 21:38:10 +0000
ROA not before: Tue 26 Nov 2024 21:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39545
IP address blocks: 46.247.0.0/18 maxlen: 18
46.247.0.0/19 maxlen: 19
46.247.104.0/21 maxlen: 21
46.247.110.0/23 maxlen: 23
46.247.112.0/20 maxlen: 20
77.89.128.0/18 maxlen: 18
77.89.145.0/24 maxlen: 24
89.105.96.0/19 maxlen: 19
2a00:f18::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:69:0e:b2:15:c0:a6:e2:c2:fe:24:e1:48:d1:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Nov 26 21:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d004a7be140ba0568cf7e8eb52dd1dab69b924a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:6a:a4:8e:27:d6:ac:a2:26:50:65:9c:cf:
83:b0:3f:a2:61:d6:5d:f1:5b:03:02:50:2a:df:3c:
5b:e9:ca:60:40:43:36:9d:3d:6a:a9:5f:14:29:07:
5e:5a:1f:4b:86:38:e1:ab:44:d8:d5:b7:08:ff:1d:
4f:39:7b:0c:eb:a5:70:d0:bc:9c:cf:ac:e2:c3:a8:
b6:15:3e:0d:93:8a:e5:b2:9b:95:cd:d7:db:e7:3a:
28:31:31:ec:56:88:a7:9c:91:69:fe:61:56:18:01:
3c:05:32:50:c5:e7:3b:37:07:fc:8a:66:96:4d:ab:
0e:ee:bd:b4:79:d3:e8:96:54:62:3b:a9:3a:27:0d:
a6:0d:55:54:44:d7:32:8d:86:b8:c2:a6:14:8c:b5:
45:5e:41:51:ab:67:c5:18:af:0e:f8:72:c7:aa:fe:
2c:27:b3:a2:31:de:e5:ca:4f:4a:18:48:60:cd:36:
23:4b:98:75:a7:e2:07:9c:f1:0e:9e:25:d5:6b:3a:
ab:54:e9:8d:99:a1:15:80:63:ae:14:ef:f7:a9:37:
2d:58:9e:fb:11:cc:2d:5d:64:71:2a:de:a6:e1:ce:
ae:f2:8c:4c:63:8f:2f:65:e3:2b:3a:0b:73:86:86:
a5:67:b7:ec:30:f7:7f:33:8f:7c:af:6e:a8:92:93:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:04:A7:BE:14:0B:A0:56:8C:F7:E8:EB:52:DD:1D:AB:69:B9:24:A8
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/0ASnvhQLoFaM9-jrUt0dq2m5JKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.0.0/18
46.247.104.0-46.247.127.255
77.89.128.0/18
89.105.96.0/19
IPv6:
2a00:f18::/32
Signature Algorithm: sha256WithRSAEncryption
86:e5:64:2d:9b:fc:e3:ac:ac:24:62:eb:00:ae:a4:49:ac:05:
b1:e0:b1:34:c8:bb:a5:da:3d:42:af:df:bd:d3:ca:16:92:b7:
66:4f:1e:78:89:57:01:ad:f1:84:0f:b5:04:1e:96:25:17:eb:
59:74:06:03:10:96:31:c5:37:02:78:64:55:75:85:d0:12:0d:
36:e5:61:1d:67:44:9d:7f:03:8f:50:89:8e:ea:c4:46:bc:eb:
bb:42:02:77:43:1a:98:34:69:ef:dc:ac:39:9a:a1:04:5f:03:
ab:18:5f:fc:73:80:5b:1d:b9:b9:c2:29:03:ff:73:c3:6c:58:
dc:f3:71:53:f7:b9:68:86:6e:1a:c3:09:1c:e8:96:7d:c0:0e:
60:87:d6:92:9b:bb:54:54:5f:3f:5b:7e:7e:d3:7a:51:05:8b:
ef:f0:76:6e:a2:4c:76:19:2e:93:b9:98:79:71:cd:60:6f:ec:
85:8c:e1:91:b8:7c:5c:81:2c:11:7f:ec:a9:06:1e:25:c8:7a:
42:13:8c:f7:6f:d7:1e:30:b3:00:7d:ac:64:b0:38:43:46:48:
9e:83:e3:27:77:7f:55:cf:41:ca:99:52:f8:a6:78:68:4e:35:
2b:13:1e:ee:a6:0c:99:58:36:21:dc:83:b4:13:a5:b4:0c:ac:
14:f9:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:24 2024 by rpki-client on console-ams.rpki-client.org