Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/dkJcskYXiDK3AXMOyO3pn67U_u8.roa
File: dkJcskYXiDK3AXMOyO3pn67U_u8.roa (raw, json)
Hash identifier: Tn6vB1DcFzFrfAt8eLpBOGjdXBjwfyAkgkaPFpEnrgI=
Subject key identifier: 76:42:5C:B2:46:17:88:32:B7:01:73:0E:C8:ED:E9:9F:AE:D4:FE:EF
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 018CC6B79D6AA0559DE462F50BC89A85E697
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/dkJcskYXiDK3AXMOyO3pn67U_u8.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39545
IP address blocks: 46.247.104.0/21 maxlen: 21
77.89.128.0/18 maxlen: 18
46.247.0.0/18 maxlen: 18
77.89.145.0/24 maxlen: 24
46.247.112.0/20 maxlen: 20
89.105.96.0/19 maxlen: 19
2a00:f18::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9d:6a:a0:55:9d:e4:62:f5:0b:c8:9a:85:e6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76425cb246178832b701730ec8ede99faed4feef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:68:af:fd:2b:2d:47:fc:99:bc:1e:08:be:
46:4c:3e:18:bb:4e:f1:69:bb:74:87:a7:39:b4:cb:
c6:4f:ce:03:74:28:55:b0:84:ca:a9:8e:7a:56:79:
fc:24:28:e7:48:20:8c:0e:82:10:00:76:cc:38:a6:
bf:ac:6f:15:29:aa:d8:11:67:31:0a:de:5c:3b:9d:
a0:eb:97:99:be:3e:6a:3c:ed:ec:d3:16:fe:6e:d9:
1f:63:92:75:85:be:60:f4:d2:3e:07:7c:f1:c8:53:
de:5f:1d:0c:72:7a:68:bd:a8:ff:8d:c3:d2:fa:63:
55:d9:de:8b:77:22:6a:9c:6b:6c:fc:53:1e:ed:ce:
a7:42:18:b3:e7:f2:95:86:7f:ee:d2:2b:ec:1a:49:
25:6d:c5:0b:d6:9b:68:21:90:30:db:7f:4e:f9:47:
29:f8:26:69:48:7f:da:a6:37:23:7b:75:79:af:20:
ac:c8:95:67:62:a1:c3:1d:71:8f:70:e6:d3:d6:a5:
b5:75:64:49:1a:85:6a:0f:29:cd:bc:28:6b:0e:10:
4a:31:1d:12:1c:1e:3c:3c:61:bb:06:17:fa:13:34:
3b:74:ff:19:ef:f2:ed:42:a0:3d:d1:14:83:b8:c1:
6c:4a:a0:fd:de:cd:f4:83:c5:85:02:b0:91:99:07:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:5C:B2:46:17:88:32:B7:01:73:0E:C8:ED:E9:9F:AE:D4:FE:EF
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/dkJcskYXiDK3AXMOyO3pn67U_u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.0.0/18
46.247.104.0-46.247.127.255
77.89.128.0/18
89.105.96.0/19
IPv6:
2a00:f18::/32
Signature Algorithm: sha256WithRSAEncryption
6e:80:68:1b:1f:f7:74:25:86:7b:a6:f6:14:47:b9:b2:8b:64:
3c:e7:46:65:cd:66:2c:24:60:e6:14:2a:b5:5c:71:7f:a5:3b:
1b:ee:94:4b:9e:63:61:af:7c:a1:dd:63:a1:d1:9a:89:48:df:
24:53:70:c2:b6:5d:67:a5:46:30:13:35:21:d8:9c:52:cb:ce:
02:5d:86:ff:4e:8f:43:c1:01:17:bd:2e:e7:d6:0e:d0:b9:1e:
ae:cf:d5:72:36:6a:f3:b6:2b:ca:83:13:1c:f1:7c:17:51:6d:
b7:79:3e:d9:c8:23:0a:2a:48:c8:bf:36:fa:cd:8d:be:bf:25:
f3:cc:1f:c0:b8:e3:d9:79:de:c0:7d:06:00:76:41:85:ac:5e:
a7:3b:cc:42:66:71:1e:73:54:54:72:d5:0c:be:e8:74:b2:de:
a0:33:fc:51:68:c4:a7:b1:8d:9f:53:a5:db:f9:47:bd:49:f1:
41:f6:a6:06:b2:0b:87:18:d4:2f:66:38:a6:80:b4:4e:79:b9:
eb:aa:1b:7e:a7:f2:5b:d2:aa:c0:b0:73:3a:b7:5c:99:b4:52:
dd:d9:7c:84:c1:dc:d3:87:c6:de:ca:ac:50:60:2a:f4:21:17:
61:ad:02:7a:37:2f:b1:5b:28:78:1c:2d:90:24:1d:f2:1d:13:
be:67:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 10:34:39 2024 by rpki-client on console-fra.rpki-client.org