Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m4SBHOOhefVBB18OP8Itldl-CFQ.roa
File: m4SBHOOhefVBB18OP8Itldl-CFQ.roa (raw, json)
Hash identifier: jk2ltCepBdpcB9Wkw7gkt0xEXmVbnw+p46vZOU8U4g0=
Subject key identifier: 9B:84:81:1C:E3:A1:79:F5:41:07:5F:0E:3F:C2:2D:95:D9:7E:08:54
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01917622E54293176F6799189AB504865249
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m4SBHOOhefVBB18OP8Itldl-CFQ.roa
Signing time: Wed 21 Aug 2024 18:11:23 +0000
ROA not before: Wed 21 Aug 2024 18:11:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 46.149.173.0/24 maxlen: 24
91.246.56.0/24 maxlen: 24
91.246.62.0/24 maxlen: 24
91.247.169.0/24 maxlen: 24
91.247.170.0/24 maxlen: 24
185.225.190.0/24 maxlen: 24
194.59.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:22:e5:42:93:17:6f:67:99:18:9a:b5:04:86:52:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 21 18:11:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b84811ce3a179f541075f0e3fc22d95d97e0854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:b8:ae:2d:c1:97:ab:3a:ab:56:22:27:d7:
54:2a:71:f1:eb:09:16:e6:01:3d:f7:70:96:c9:f6:
c9:8f:33:26:6b:fe:08:15:87:38:84:4e:ef:fd:75:
b7:bb:5c:e1:4f:4b:8d:ac:24:55:23:1a:f0:98:02:
23:4d:9a:0e:5e:c4:7b:30:5a:a9:86:56:a7:43:10:
23:9f:81:16:94:f9:ea:f1:c8:8a:b8:c5:5d:98:dc:
57:bc:29:95:5c:9e:48:ab:9a:46:9a:a5:24:8c:6d:
50:e3:46:8b:4f:19:e7:42:8e:75:14:20:74:b2:74:
bd:a0:ad:33:54:3f:7f:57:31:df:d9:25:13:06:b1:
01:4f:f6:98:39:45:30:79:85:20:b5:1f:1e:51:84:
b7:c1:05:3f:1c:aa:df:24:97:5c:d0:fb:91:ae:40:
ed:fa:ef:0d:99:02:c4:6f:06:8d:1e:3f:7b:a7:55:
3f:8a:7a:68:e5:93:c0:fb:93:20:45:92:c8:53:de:
4f:52:b2:38:8e:cf:63:b5:57:bb:61:57:9e:10:d6:
2a:02:e6:ce:dd:21:0b:72:69:05:8f:b0:7a:ea:6b:
4b:99:02:cb:44:31:f6:31:a9:ff:a2:69:01:9d:e5:
10:fd:df:97:60:d0:87:59:3f:3a:e7:74:05:8f:24:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:81:1C:E3:A1:79:F5:41:07:5F:0E:3F:C2:2D:95:D9:7E:08:54
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m4SBHOOhefVBB18OP8Itldl-CFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.173.0/24
91.246.56.0/24
91.246.62.0/24
91.247.169.0-91.247.170.255
185.225.190.0/24
194.59.246.0/24
Signature Algorithm: sha256WithRSAEncryption
23:75:13:a9:17:17:0d:f8:ae:e2:29:d1:4d:a5:31:db:9a:39:
92:e1:97:90:a4:2c:6a:ca:e7:4a:ce:1d:9b:0a:74:86:50:de:
4c:67:c4:59:5f:05:a0:e6:09:08:56:aa:63:67:cd:f2:4d:81:
fb:82:d9:17:3b:6e:32:2a:00:76:06:37:36:42:9a:4e:b5:d3:
e9:af:ae:95:d5:9f:c8:7a:07:e2:21:38:87:9d:27:23:05:22:
ee:45:e2:07:c9:50:5f:24:18:4f:e8:51:d5:06:36:ec:ae:11:
be:e6:96:f8:e2:4e:d7:49:8b:23:f8:fc:6c:cf:58:fb:73:bb:
e5:1f:2f:62:38:0c:d7:85:5e:eb:e8:98:57:0d:45:0f:05:eb:
8a:f6:39:29:82:33:b9:64:8a:62:8d:bb:2f:1a:e2:b1:b2:99:
11:26:9c:0e:40:76:c1:32:36:8b:b2:2b:e5:b0:f3:43:1d:6a:
44:94:33:7e:99:94:36:48:6b:5a:4e:9c:69:dd:16:e7:f8:25:
6e:18:e2:73:87:a4:02:1e:7a:f8:eb:5e:d6:10:99:b6:d4:2b:
fd:05:d4:13:12:e0:fb:3a:fd:ec:41:69:d9:b7:a4:2a:e2:bf:
31:27:72:dc:fc:24:8f:00:0e:7b:9b:69:96:88:cf:ca:3d:4d:
75:f6:0d:ed
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZF2IuVCkxdvZ5kYmrUEhlJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwODIxMTgxMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjg0ODExY2UzYTE3OWY1NDEwNzVmMGUzZmMyMmQ5NWQ5N2UwODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb+4ri3Bl6s6q1YiJ9dUKnHx6wkW
5gE993CWyfbJjzMma/4IFYc4hE7v/XW3u1zhT0uNrCRVIxrwmAIjTZoOXsR7MFqp
hlanQxAjn4EWlPnq8ciKuMVdmNxXvCmVXJ5Iq5pGmqUkjG1Q40aLTxnnQo51FCB0
snS9oK0zVD9/VzHf2SUTBrEBT/aYOUUweYUgtR8eUYS3wQU/HKrfJJdc0PuRrkDt
+u8NmQLEbwaNHj97p1U/inpo5ZPA+5MgRZLIU95PUrI4js9jtVe7YVeeENYqAubO
3SELcmkFj7B66mtLmQLLRDH2Man/omkBneUQ/d+XYNCHWT8653QFjyTiDwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFJuEgRzjoXn1QQdfDj/CLZXZfghUMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvbTRTQkhPT2hlZlZCQjE4T1A4SXRsZGwtQ0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQALpWtAwQA
W/Y4AwQAW/Y+MAwDBABb96kDBABb96oDBAC54b4DBADCO/YwDQYJKoZIhvcNAQEL
BQADggEBACN1E6kXFw34ruIp0U2lMduaOZLhl5CkLGrK50rOHZsKdIZQ3kxnxFlf
BaDmCQhWqmNnzfJNgfuC2Rc7bjIqAHYGNzZCmk610+mvrpXVn8h6B+IhOIedJyMF
Iu5F4gfJUF8kGE/oUdUGNuyuEb7mlvjiTtdJiyP4/GzPWPtzu+UfL2I4DNeFXuvo
mFcNRQ8F64r2OSmCM7lkimKNuy8a4rGymREmnA5AdsEyNouyK+Ww80MdakSUM36Z
lDZIa1pOnGndFuf4JW4Y4nOHpAIeevjrXtYQmbbUK/0F1BMS4Ps6/exBadm3pCri
vzEnctz8JI8ADnubaZaIz8o9TXX2De0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:54 2024 by rpki-client on console-fra.rpki-client.org