Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/4hCQeu3UsXnNfbimMobWFIQJ9CE.roa
File: 4hCQeu3UsXnNfbimMobWFIQJ9CE.roa (raw, json)
Hash identifier: zRwAScTdsWkNT2PK6LrRie4GDEqoHa+5VOm/WKpNI7s=
Subject key identifier: E2:10:90:7A:ED:D4:B1:79:CD:7D:B8:A6:32:86:D6:14:84:09:F4:21
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 018CC2DB38A4BD4CADDBB0781BF1F95897F7
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/4hCQeu3UsXnNfbimMobWFIQJ9CE.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209565
IP address blocks: 46.21.251.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.122.0/23 maxlen: 23
212.126.123.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:22::/48 maxlen: 48
2a04:2dc0:1d::/48 maxlen: 48
2a04:2dc0:1b::/48 maxlen: 48
2a04:2dc0:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:38:a4:bd:4c:ad:db:b0:78:1b:f1:f9:58:97:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e210907aedd4b179cd7db8a63286d6148409f421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:59:10:7a:2a:ab:69:3d:6c:ef:42:c1:67:
da:4c:eb:56:9f:bc:da:55:d1:8b:61:54:4e:0d:56:
fe:44:b0:50:ab:3c:9f:62:33:8a:ca:eb:73:d8:93:
70:1f:13:ed:c1:ad:15:5e:75:af:2a:b5:da:d2:d0:
e3:80:b6:ec:74:a5:32:b2:2d:35:7f:1c:93:37:14:
b4:c4:6a:d8:74:f9:78:37:e4:c2:f6:ac:61:89:5b:
c9:13:fe:9c:93:c8:99:62:77:c0:27:09:42:a3:b2:
0d:ae:57:f8:27:e6:e4:f3:40:fa:cf:fd:ae:85:79:
c1:2c:19:5a:05:db:04:02:23:cf:e5:84:51:78:47:
b8:1d:78:2b:e7:b5:f7:ea:92:ec:03:aa:65:37:02:
19:75:0e:d7:75:cb:5a:ae:2d:96:29:45:1d:ee:5f:
8a:43:f2:3c:3e:71:10:5e:87:ae:f2:4f:ed:30:15:
cd:69:a9:8a:c8:6e:72:7d:58:1a:ff:dd:57:33:fa:
b1:7e:ea:42:a1:ae:0f:d2:7c:05:37:70:36:1f:14:
a0:e4:1b:78:36:f2:70:2e:e2:ce:fc:67:c7:81:18:
98:e7:88:20:05:a7:cc:d9:e8:92:bc:c7:65:82:f6:
c3:30:02:6e:77:50:06:10:b5:c2:65:c4:94:89:64:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:10:90:7A:ED:D4:B1:79:CD:7D:B8:A6:32:86:D6:14:84:09:F4:21
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/4hCQeu3UsXnNfbimMobWFIQJ9CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.113.0-212.126.116.255
212.126.120.0/22
212.126.126.0/24
IPv6:
2a04:2dc0:8::/48
2a04:2dc0:a::/48
2a04:2dc0:e::/48
2a04:2dc0:18::/47
2a04:2dc0:1b::/48
2a04:2dc0:1d::/48
2a04:2dc0:21::-2a04:2dc0:22:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:d6:6d:af:6c:5b:ee:2c:ac:a4:3e:17:c7:e3:26:fb:a2:21:
c4:31:03:1c:06:6a:f6:b6:d9:f7:0a:15:2a:a7:98:7c:d8:3c:
06:93:52:d4:00:37:c4:64:4d:81:23:35:11:69:28:09:f1:e4:
e0:bd:ec:c7:6f:7a:a9:d4:43:0e:6e:40:ca:a2:a5:79:b9:e6:
d6:c9:7e:ad:c0:08:b4:eb:7a:98:97:21:2f:42:03:71:b3:4d:
12:c8:3d:9f:ae:b5:ab:7c:c0:c8:e6:2c:80:67:c1:c0:0a:92:
71:17:4e:ab:72:b7:1f:c5:2d:cd:4b:bf:71:c3:f0:20:55:4b:
8f:f1:df:96:b8:c4:02:9f:69:dc:ee:d5:92:e6:21:48:39:23:
c8:ed:dc:d1:6e:2d:cb:0b:0a:0c:c8:c1:2e:a8:74:9f:d2:2f:
20:7c:dc:34:bf:c9:35:c8:93:7e:d0:12:da:d7:31:cf:e3:75:
42:5c:ee:58:a2:0e:ca:be:51:92:7b:99:67:ce:d2:89:61:e1:
15:db:f4:29:35:ea:c7:93:84:8f:8a:b8:e1:a5:de:ef:b3:50:
f2:2a:83:75:80:6a:33:65:e7:55:4e:7d:4b:f5:b8:8c:5e:be:
7d:cd:77:b6:74:99:cc:40:3f:27:18:de:a9:79:f5:a3:79:93:
09:3e:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:20:38 2024 by rpki-client on console-ams.rpki-client.org