Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4kyL2n6ysRWm-kKWW73sNWM5y4s.roa
File: 4kyL2n6ysRWm-kKWW73sNWM5y4s.roa (raw, json)
Hash identifier: s/A5PmeAtNzsc6KNDXLw6SBPaDa6PNGefKzJvqZBBnc=
Subject key identifier: E2:4C:8B:DA:7E:B2:B1:15:A6:FA:42:96:5B:BD:EC:35:63:39:CB:8B
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019316714243925E4FDE8729902A9B40D20B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4kyL2n6ysRWm-kKWW73sNWM5y4s.roa
Signing time: Sun 10 Nov 2024 14:19:01 +0000
ROA not before: Sun 10 Nov 2024 14:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.148.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:16:71:42:43:92:5e:4f:de:87:29:90:2a:9b:40:d2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Nov 10 14:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e24c8bda7eb2b115a6fa42965bbdec356339cb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:73:4e:a4:a1:30:b7:c1:42:0f:52:58:90:
6b:11:ff:8a:75:9e:fe:29:8c:d0:47:93:7a:10:f3:
6e:bd:86:d1:73:a8:f4:d7:a0:3d:90:21:bb:cd:5a:
60:7c:85:85:17:97:c5:15:36:3d:2a:2a:d4:0e:ae:
ba:c4:d1:f6:8c:49:c2:00:f1:a4:87:3e:44:23:5f:
de:8f:58:dd:a8:b3:a2:1e:96:c3:b1:5c:96:c5:78:
ba:f4:1a:01:2f:06:ad:90:3c:f8:34:e6:aa:e5:d7:
89:25:ca:23:83:d4:1a:76:78:b8:37:59:fe:58:2a:
e1:05:69:ba:5e:87:9a:e1:b5:6f:f5:3d:91:fd:24:
da:cc:56:2d:d5:6b:89:35:1d:a2:74:eb:84:30:98:
86:7e:ba:ec:cc:5f:d2:0a:28:54:42:b6:4e:1a:9d:
6f:de:a9:06:35:9e:c9:dc:a6:29:2d:f4:05:19:7c:
2b:1e:56:69:07:f0:82:57:e2:29:c2:c2:30:bf:26:
39:46:4c:58:0d:45:08:4e:d5:f3:75:e0:8d:1c:2a:
48:8e:3e:be:17:e0:e5:8f:e7:2f:69:32:7c:65:0f:
e1:30:67:a6:18:fd:62:70:df:f1:86:72:d6:73:07:
cf:16:92:b0:8f:00:da:12:9e:30:9d:63:42:77:aa:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:8B:DA:7E:B2:B1:15:A6:FA:42:96:5B:BD:EC:35:63:39:CB:8B
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4kyL2n6ysRWm-kKWW73sNWM5y4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.138.0/23
46.38.148.0/24
185.29.222.0/24
212.80.11.0/24
Signature Algorithm: sha256WithRSAEncryption
55:25:80:8b:5d:3b:58:bc:c8:9e:78:15:57:a3:af:8e:7f:f4:
59:36:41:5a:df:98:b1:46:90:7f:e6:94:fe:8b:ea:20:a4:6d:
ef:11:9a:6d:05:14:d3:fc:f3:9c:2f:63:fd:61:f1:54:08:34:
ef:d6:fe:70:61:f8:95:d5:47:9a:02:87:3d:93:ab:9d:e8:f8:
8c:dd:dc:aa:22:e9:dd:9c:56:99:41:37:cc:7f:31:fa:b8:5c:
95:36:b1:87:7f:a4:9f:b2:a9:e4:b7:43:ea:1b:da:69:51:05:
64:fe:dc:94:90:44:29:6f:4a:13:5b:be:10:a4:8c:0d:c2:cd:
3e:5a:64:82:08:48:c5:fc:c6:7f:03:3c:81:a4:8f:08:f9:fa:
ba:fe:98:da:df:e5:31:f0:b3:41:07:3b:0f:70:b3:73:3f:22:
a1:1f:72:20:2d:0a:72:4d:af:88:df:20:1b:d2:50:96:32:00:
f4:d1:67:8e:f2:ba:37:d7:24:53:96:0e:b2:5e:e1:36:2b:51:
fe:df:65:22:77:6b:6e:06:2a:ec:ba:48:a8:3a:88:20:cf:fc:
75:ac:36:93:c5:55:a7:de:a3:3b:8d:ad:0a:d0:80:04:9a:4e:
cd:e8:a7:d1:d4:ee:3e:c1:c0:6a:d9:6d:6d:c7:de:fc:9e:5d:
89:8c:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:06 2024 by rpki-client on console-fra.rpki-client.org