Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/42E0e6fq4aQtvugy5IuoMjmd9r0.roa
File: 42E0e6fq4aQtvugy5IuoMjmd9r0.roa (raw, json)
Hash identifier: yiepu8r7I/38ZHbaqSv93skyyeizCpVRNnq3qPQbxhI=
Subject key identifier: E3:61:34:7B:A7:EA:E1:A4:2D:BE:E8:32:E4:8B:A8:32:39:9D:F6:BD
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0192DDD1B79A21D97D5AD362E9046980F10D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/42E0e6fq4aQtvugy5IuoMjmd9r0.roa
Signing time: Wed 30 Oct 2024 14:26:01 +0000
ROA not before: Wed 30 Oct 2024 14:26:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 46.38.146.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:d1:b7:9a:21:d9:7d:5a:d3:62:e9:04:69:80:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 30 14:26:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e361347ba7eae1a42dbee832e48ba832399df6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:0b:62:75:5c:97:7e:77:08:f4:f6:4d:c5:
4e:4a:84:8c:ed:2d:43:cc:cd:52:48:42:77:c4:d8:
16:5f:8c:34:6f:8e:d9:47:99:24:46:42:07:3f:d4:
41:17:45:a3:cc:98:f2:59:4a:51:3c:fc:df:53:75:
cc:65:29:a5:70:e5:5b:1a:ee:f1:66:11:3d:bc:0c:
d1:7a:59:ef:a7:5c:65:1f:0b:59:78:55:bc:5e:d1:
99:32:29:e9:d2:42:4c:c0:1f:0a:ad:84:7a:9c:c9:
7d:38:6f:f6:29:68:17:b2:e6:77:bc:e0:38:ae:50:
f6:e9:57:1f:f0:5c:e0:a8:30:3b:57:7c:18:f0:47:
d1:9d:8f:e0:3a:07:e2:c1:e1:d9:1f:a8:39:82:8e:
ca:2f:a9:8c:1a:3d:a8:82:bd:0e:fa:8f:c1:b3:61:
0d:80:74:41:a5:26:bd:84:60:98:69:82:b6:d1:86:
99:0e:b7:24:b6:64:23:f3:07:12:20:ad:0a:54:43:
ea:bb:9d:f5:91:bd:04:c8:93:2f:c5:85:30:71:9d:
3a:c2:db:72:30:89:c7:9d:8f:e4:74:a5:c2:1a:56:
94:5e:f2:17:bd:80:f4:c1:b2:23:5b:58:a9:f6:33:
c9:18:18:57:87:14:bc:72:4b:0b:6a:ca:59:31:f6:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:34:7B:A7:EA:E1:A4:2D:BE:E8:32:E4:8B:A8:32:39:9D:F6:BD
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/42E0e6fq4aQtvugy5IuoMjmd9r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/23
109.94.165.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
43:09:d2:05:e4:10:b8:f3:4f:aa:4e:83:8d:4b:b5:40:9f:6a:
1f:62:7c:a1:6b:9d:6c:9b:c8:34:f4:a6:92:63:2e:21:f4:af:
cc:9e:5d:bc:c3:33:71:61:b8:90:a5:d3:4e:5d:c1:2a:af:98:
2b:8d:97:81:da:5a:42:f8:dd:21:d2:c7:c1:05:07:f0:e8:ef:
17:1c:53:07:2c:6d:50:a2:8b:2b:06:a4:0c:be:6c:db:23:f0:
85:c9:fe:54:2b:24:60:61:66:c7:ce:d8:ac:72:f2:c3:4c:3e:
b6:46:0f:e1:ec:69:e3:e3:fd:b1:d7:4a:31:3a:6c:b6:7b:bc:
a0:b2:b8:35:96:64:c2:d8:2d:54:a4:1d:44:79:a8:90:6a:4b:
77:23:ae:b3:92:22:f0:36:2f:78:68:d9:c1:a8:69:b0:a8:c2:
40:dd:ad:0f:d1:8c:c1:9a:3d:07:db:9f:63:6e:3e:2f:f2:99:
82:a5:ad:ae:bb:69:07:c1:61:71:3e:bd:3c:d5:2f:d8:ff:93:
af:72:01:11:dc:11:49:36:7b:f3:69:28:cd:f5:73:4d:d3:1f:
9f:70:29:b6:bd:a8:92:4b:9d:bf:c3:1a:d0:03:43:4f:1e:e8:
40:ec:ed:f4:29:b6:32:11:58:a0:a9:e3:4b:2b:37:ff:61:8c:
91:5e:d5:c0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZLd0beaIdl9WtNi6QRpgPENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQxMDMwMTQyNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzYxMzQ3YmE3ZWFlMWE0MmRiZWU4MzJlNDhiYTgzMjM5OWRmNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1YLYnVcl353CPT2TcVOSoSM7S1D
zM1SSEJ3xNgWX4w0b47ZR5kkRkIHP9RBF0WjzJjyWUpRPPzfU3XMZSmlcOVbGu7x
ZhE9vAzRelnvp1xlHwtZeFW8XtGZMinp0kJMwB8KrYR6nMl9OG/2KWgXsuZ3vOA4
rlD26Vcf8FzgqDA7V3wY8EfRnY/gOgfiweHZH6g5go7KL6mMGj2ogr0O+o/Bs2EN
gHRBpSa9hGCYaYK20YaZDrcktmQj8wcSIK0KVEPqu531kb0EyJMvxYUwcZ06wtty
MInHnY/kdKXCGlaUXvIXvYD0wbIjW1ip9jPJGBhXhxS8cksLaspZMfZsSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFONhNHun6uGkLb7oMuSLqDI5nfa9MB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvNDJFMGU2ZnE0YVF0dnVneTVJdW9Nam1kOXIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLiaSAwQA
bV6lAwQAuR3fMA0GCSqGSIb3DQEBCwUAA4IBAQBDCdIF5BC480+qToONS7VAn2of
Ynyha51sm8g09KaSYy4h9K/Mnl28wzNxYbiQpdNOXcEqr5grjZeB2lpC+N0h0sfB
BQfw6O8XHFMHLG1QoosrBqQMvmzbI/CFyf5UKyRgYWbHztiscvLDTD62Rg/h7Gnj
4/2x10oxOmy2e7ygsrg1lmTC2C1UpB1EeaiQakt3I66zkiLwNi94aNnBqGmwqMJA
3a0P0YzBmj0H259jbj4v8pmCpa2uu2kHwWFxPr081S/Y/5OvcgER3BFJNnvzaSjN
9XNN0x+fcCm2vaiSS52/wxrQA0NPHuhA7O30KbYyEVigqeNLKzf/YYyRXtXA
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:30 2024 by rpki-client on console-ams.rpki-client.org