Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tF4ke6aqEEK0fS4hgsuWr7FWJlY.roa
File: tF4ke6aqEEK0fS4hgsuWr7FWJlY.roa (raw, json)
Hash identifier: rsTP1hqn9Xzqqke5qHzHCI0mscI599zp4wkjr0X4F7k=
Subject key identifier: B4:5E:24:7B:A6:AA:10:42:B4:7D:2E:21:82:CB:96:AF:B1:56:26:56
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0191FA2F4A26D1A58711DEE252A0F9F4F004
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tF4ke6aqEEK0fS4hgsuWr7FWJlY.roa
Signing time: Mon 16 Sep 2024 09:34:48 +0000
ROA not before: Mon 16 Sep 2024 09:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214419
IP address blocks: 46.38.142.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
2a00:7d80:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:2f:4a:26:d1:a5:87:11:de:e2:52:a0:f9:f4:f0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 16 09:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b45e247ba6aa1042b47d2e2182cb96afb1562656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:dd:b3:52:0b:bb:1a:aa:23:d9:85:dc:93:
3e:00:27:56:e4:01:57:81:ec:6e:3d:77:13:6f:ad:
40:48:b4:d8:ae:ac:1e:48:81:de:34:df:69:50:66:
1c:85:6d:76:34:a4:54:8d:f6:ff:9d:9b:b7:2e:48:
df:5e:b3:ff:b0:0a:08:57:9f:bd:97:d4:61:bb:58:
d2:f6:06:7a:e6:56:35:7a:9e:e4:6a:e2:5b:52:ab:
d1:b8:fa:1d:d3:06:5f:d0:60:ee:91:c8:2c:63:ba:
53:f7:29:0e:be:21:38:a4:79:60:8a:bf:cc:78:8b:
bd:62:af:60:82:94:2c:cd:91:64:fa:9e:a0:d4:38:
9b:56:30:70:28:9e:af:8b:b1:df:d8:a7:08:85:75:
ab:bf:8e:da:f1:a4:b6:bd:ef:85:81:21:4c:a0:1f:
b4:37:27:e5:3d:06:4f:da:1d:ec:69:2f:1a:b7:95:
f5:cf:3a:fe:16:d9:e4:66:9e:58:b8:08:28:e5:c7:
0d:dd:6a:51:56:0d:9b:92:f5:87:8d:dc:3f:39:89:
0c:f4:c9:9e:a8:d1:4f:37:43:58:9d:c7:97:26:73:
ee:ad:c1:2c:59:bc:b8:31:dc:9c:1e:cf:1e:84:c6:
85:2e:96:d7:a1:46:f2:48:ec:e7:a3:d0:0a:3e:79:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5E:24:7B:A6:AA:10:42:B4:7D:2E:21:82:CB:96:AF:B1:56:26:56
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tF4ke6aqEEK0fS4hgsuWr7FWJlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.142.0/24
109.94.165.0/24
IPv6:
2a00:7d80:11::/48
Signature Algorithm: sha256WithRSAEncryption
0a:4f:0a:15:c4:a5:88:2c:39:08:1e:f8:9a:12:05:76:a0:00:
7b:d9:19:59:d9:67:e4:e9:17:32:98:0c:e3:f5:5f:39:58:8f:
9b:3c:ba:e0:0a:ec:2d:38:26:22:34:07:3d:98:0e:c9:e3:69:
ca:84:8f:5e:c7:d8:81:07:2f:eb:13:08:73:ca:c0:7f:65:f3:
0d:cb:f7:5c:63:09:7c:22:50:7f:49:88:58:21:56:de:e3:e1:
a7:f6:a5:f7:6a:eb:0f:12:52:27:c4:49:ab:c7:20:0a:a4:54:
ca:51:11:4a:90:52:d8:48:c5:f2:16:33:00:c2:7a:a0:8a:1c:
95:eb:c7:76:1b:05:f3:ab:0a:f6:d8:58:53:53:01:dd:60:d3:
77:35:4d:f0:ff:03:dd:a4:d8:f5:cb:40:ea:74:ef:98:15:68:
71:dc:a7:b5:a6:b6:a2:77:60:31:a0:11:48:e8:f9:8c:12:11:
64:f1:50:38:92:c0:26:f4:98:cd:5d:65:f7:ea:df:75:5f:98:
ad:dd:ba:a0:f4:36:29:31:8f:44:86:b6:24:c6:66:f0:86:28:
03:c4:07:ef:e6:3d:7f:3f:46:95:5f:57:7a:35:70:21:0a:79:
73:6c:8d:2c:36:21:51:b0:db:15:33:64:44:67:0f:d7:ed:70:
e9:28:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:30 2024 by rpki-client on console-ams.rpki-client.org