Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/vR0qVQ0NTStXA1H_E_S0iM1Gj-c.roa
File: vR0qVQ0NTStXA1H_E_S0iM1Gj-c.roa (raw, json)
Hash identifier: 9m2QECHLLbQ5yo5AUyYKLyzC9kzMdw9dsuSPOwnuK0M=
Subject key identifier: BD:1D:2A:55:0D:0D:4D:2B:57:03:51:FF:13:F4:B4:88:CD:46:8F:E7
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 018CC26D0796575155ED1A97771624DDEE40
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/vR0qVQ0NTStXA1H_E_S0iM1Gj-c.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42487
IP address blocks: 46.235.176.0/21 maxlen: 24
185.55.244.0/22 maxlen: 22
85.95.192.0/19 maxlen: 24
2a03:d602::/31 maxlen: 31
2a03:d606::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:96:57:51:55:ed:1a:97:77:16:24:dd:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd1d2a550d0d4d2b570351ff13f4b488cd468fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:3f:d5:a9:df:88:c4:f9:53:fd:61:c2:07:
74:f2:d7:fd:a8:d7:60:8d:fd:96:3f:04:5e:e5:da:
0b:ec:b7:24:2c:3d:f4:d9:05:a6:22:30:aa:ab:89:
2a:e7:a5:56:bb:0e:16:9a:d5:93:69:8f:b3:c2:ba:
71:18:8f:2a:b9:db:d2:9a:63:83:4e:00:11:51:88:
ab:2d:fb:98:74:56:a9:6a:1a:89:83:ce:a5:47:ea:
9c:ed:60:35:d0:d1:15:e5:ea:f3:9e:9f:8a:f5:a0:
29:18:2a:4e:c8:96:4d:29:00:1d:b5:61:af:eb:f6:
e1:ed:5b:88:bf:70:48:35:70:90:4a:5d:61:7b:94:
22:1a:31:89:9e:df:5a:24:b4:d4:9b:1b:99:f3:57:
d5:df:7f:ae:50:52:3c:64:cb:7a:f7:4a:61:cb:54:
be:b0:8c:af:22:d5:68:c3:73:4f:57:22:84:b3:6d:
f9:b5:14:3f:ff:e9:e9:8a:d8:e7:e3:70:4e:42:b4:
5c:1d:f1:77:78:0c:95:38:43:58:b6:69:cb:79:6f:
06:63:e0:dc:19:fa:fa:40:c7:f1:92:0a:9c:15:b4:
4c:aa:51:1b:90:31:a6:18:20:9f:51:a4:ed:5c:51:
56:97:75:83:80:b5:da:89:44:75:29:51:9f:ae:45:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:2A:55:0D:0D:4D:2B:57:03:51:FF:13:F4:B4:88:CD:46:8F:E7
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/vR0qVQ0NTStXA1H_E_S0iM1Gj-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.176.0/21
85.95.192.0/19
185.55.244.0/22
IPv6:
2a03:d602::/31
2a03:d606::/31
Signature Algorithm: sha256WithRSAEncryption
36:20:a7:39:1b:db:ec:a6:23:ef:df:6f:e8:76:0d:c8:11:65:
7c:27:21:03:26:2b:31:70:5f:6d:46:45:e4:f5:59:69:39:d6:
45:51:b1:24:e5:45:2f:bc:5b:2f:4f:5f:d3:ee:94:5d:1f:48:
24:1d:4d:77:1e:2b:89:0f:95:46:f4:ec:6c:73:19:22:24:f5:
e0:d0:91:cd:ef:99:61:18:37:07:13:75:0c:c2:d6:0d:6f:5c:
20:6c:f3:d9:d3:ec:20:4d:ee:51:a3:32:4b:70:43:8f:12:f2:
05:f8:65:1a:ca:f5:5d:c5:ad:9c:34:60:8b:53:eb:7d:3d:9d:
c0:c4:92:6e:ec:81:12:02:d7:10:c1:30:1e:12:c6:77:16:b7:
c7:1c:ef:07:38:94:7b:7f:04:d8:25:0a:82:ce:31:5c:09:c9:
67:dc:f4:b1:69:49:0b:13:2e:78:83:da:06:eb:0b:d2:ff:20:
1d:c4:06:69:24:21:8e:9f:ad:db:76:78:9e:5f:77:8b:17:fa:
b8:6a:28:45:e9:89:15:5b:cb:c7:57:9a:c7:70:8b:ec:ac:ea:
b6:e9:a4:ee:42:e6:63:c0:54:0e:92:d6:f4:ce:0e:ba:24:3e:
ef:e7:84:d6:76:30:bc:92:04:c1:31:41:30:c1:07:a5:31:0a:
31:84:ef:46
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzCbQeWV1FV7RqXdxYk3e5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1
NTc2ODYwHhcNMjQwMTAxMDAyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDFkMmE1NTBkMGQ0ZDJiNTcwMzUxZmYxM2Y0YjQ4OGNkNDY4ZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjI/1anfiMT5U/1hwgd08tf9qNdg
jf2WPwRe5doL7LckLD302QWmIjCqq4kq56VWuw4WmtWTaY+zwrpxGI8qudvSmmOD
TgARUYirLfuYdFapahqJg86lR+qc7WA10NEV5erznp+K9aApGCpOyJZNKQAdtWGv
6/bh7VuIv3BINXCQSl1he5QiGjGJnt9aJLTUmxuZ81fV33+uUFI8ZMt690phy1S+
sIyvItVow3NPVyKEs235tRQ//+npitjn43BOQrRcHfF3eAyVOENYtmnLeW8GY+Dc
Gfr6QMfxkgqcFbRMqlEbkDGmGCCfUaTtXFFWl3WDgLXaiUR1KVGfrkVpswIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFL0dKlUNDU0rVwNR/xP0tIjNRo/nMB8GA1UdIwQY
MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk
LWZhYWM5MDgwMjkwOC8xL3ZSMHFWUTBOVFN0WEExSF9FX1MwaU0xR2otYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJkLWZhYWM5MDgwMjkw
OC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMBgEAgABMBIDBAMu67AD
BAVVX8ADBAK5N/QwFAQCAAIwDgMFASoD1gIDBQEqA9YGMA0GCSqGSIb3DQEBCwUA
A4IBAQA2IKc5G9vspiPv32/odg3IEWV8JyEDJisxcF9tRkXk9VlpOdZFUbEk5UUv
vFsvT1/T7pRdH0gkHU13HiuJD5VG9OxscxkiJPXg0JHN75lhGDcHE3UMwtYNb1wg
bPPZ0+wgTe5RozJLcEOPEvIF+GUayvVdxa2cNGCLU+t9PZ3AxJJu7IESAtcQwTAe
EsZ3FrfHHO8HOJR7fwTYJQqCzjFcCcln3PSxaUkLEy54g9oG6wvS/yAdxAZpJCGO
n63bdnieX3eLF/q4aihF6YkVW8vHV5rHcIvsrOq26aTuQuZjwFQOktb0zg66JD7v
54TWdjC8kgTBMUEwwQelMQoxhO9G
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:49 2024 by rpki-client on console-fra.rpki-client.org