Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/Rpu46eypYxdbOVl1il-d1jrWwf8.roa
File: Rpu46eypYxdbOVl1il-d1jrWwf8.roa (raw, json)
Hash identifier: xrB11vD/Oo2+v0JkObo0Krxejjyf4/9k4egTDqoSRcU=
Subject key identifier: 46:9B:B8:E9:EC:A9:63:17:5B:39:59:75:8A:5F:9D:D6:3A:D6:C1:FF
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 018CC9BCF3E99EB126D67010A24D4BBA0829
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/Rpu46eypYxdbOVl1il-d1jrWwf8.roa
Signing time: Tue 02 Jan 2024 10:34:12 +0000
ROA not before: Tue 02 Jan 2024 10:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198614
IP address blocks: 87.238.252.0/22 maxlen: 22
87.238.248.0/22 maxlen: 22
185.200.75.0/24 maxlen: 24
185.200.72.0/24 maxlen: 24
185.200.74.0/24 maxlen: 24
185.200.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f3:e9:9e:b1:26:d6:70:10:a2:4d:4b:ba:08:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Jan 2 10:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=469bb8e9eca963175b3959758a5f9dd63ad6c1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:ed:13:c5:9a:1f:4a:32:33:e8:9a:e8:74:
7f:47:f8:0e:7e:27:71:8c:06:e9:42:cc:99:58:91:
0a:6a:e6:3f:b0:ea:31:74:80:b0:82:4c:5a:58:2c:
14:dd:b9:9e:9e:38:18:20:30:76:e3:a6:cf:ea:43:
14:72:9c:88:b1:d9:c1:a6:5e:ec:e9:b7:ad:89:cd:
c4:30:05:90:55:4a:c1:04:4d:f4:2b:05:9a:37:da:
f4:01:ec:49:79:b3:f9:32:0e:46:df:58:88:a2:3f:
ea:fa:ca:14:18:83:49:24:f7:1a:fe:47:c2:02:8d:
4d:3b:17:f9:84:21:17:3f:48:35:0d:11:1e:0b:21:
71:95:68:86:20:bc:66:1f:b6:03:b7:f3:26:e2:b6:
84:62:47:ff:4f:0b:e1:52:8c:9c:47:e2:98:54:2e:
a3:d2:e9:7e:35:d4:93:07:2c:65:b9:f1:11:93:b2:
29:2e:96:d2:ce:1f:2e:30:e6:d2:f1:63:ec:e7:9a:
e6:0c:85:4c:a4:b7:73:cd:b3:bd:3a:7f:9e:13:d9:
4f:0f:25:31:67:d6:78:56:a6:7c:4a:dc:96:30:69:
7b:b3:03:6e:e6:9d:84:8e:6b:2e:76:01:de:7d:1b:
df:ec:29:d7:f7:34:9f:a9:df:6c:35:e6:b3:6f:1b:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9B:B8:E9:EC:A9:63:17:5B:39:59:75:8A:5F:9D:D6:3A:D6:C1:FF
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/Rpu46eypYxdbOVl1il-d1jrWwf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.248.0/21
185.200.72.0/22
Signature Algorithm: sha256WithRSAEncryption
24:19:f2:ad:6b:17:e3:d7:1c:42:51:04:cd:c9:c2:37:67:05:
cd:99:01:ac:46:79:1a:57:c1:75:da:72:77:1d:b0:d8:9e:f9:
6d:07:c2:88:68:d8:cd:db:d4:43:7f:f5:58:a3:f5:c6:25:ff:
d5:3b:df:1f:70:69:10:18:dd:55:10:9f:c1:65:8c:48:1e:ce:
b3:5b:04:c6:22:89:79:a9:f3:59:4d:a6:92:39:05:54:21:da:
89:09:12:14:66:a6:a6:d8:5b:52:50:99:bb:27:56:e0:2d:d3:
05:c5:4b:c5:14:c8:1f:ee:74:08:23:53:4f:51:80:4e:b0:7a:
3e:11:2b:5a:0a:43:09:ba:bd:0b:ca:0b:31:48:14:24:92:1a:
80:49:45:18:4e:45:60:2b:25:85:43:3e:d4:88:3d:98:65:2a:
45:d2:d7:cb:58:a5:ff:a6:e4:6d:1f:61:10:5c:8b:fe:0d:e9:
ab:f1:3d:62:90:72:78:57:e5:d1:eb:07:e7:3d:d6:0f:8c:52:
ce:58:68:2b:c5:cd:89:2e:09:af:a7:a5:8e:09:df:5f:17:83:
78:62:1f:de:1c:9e:8f:a3:5b:c2:2b:15:70:ef:3a:2b:72:84:
3a:50:e5:23:f8:5e:0d:df:16:15:81:94:13:bb:e3:6e:14:43:
e1:46:14:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJvPPpnrEm1nAQok1LuggpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNiMDlkZTgyNjUwZWU0Y2M0MzI3ZWFiNjc3MGI3YWIx
NDdlZmIwHhcNMjQwMTAyMTAzNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjliYjhlOWVjYTk2MzE3NWIzOTU5NzU4YTVmOWRkNjNhZDZjMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7PtE8WaH0oyM+ia6HR/R/gOfidx
jAbpQsyZWJEKauY/sOoxdICwgkxaWCwU3bmenjgYIDB246bP6kMUcpyIsdnBpl7s
6betic3EMAWQVUrBBE30KwWaN9r0AexJebP5Mg5G31iIoj/q+soUGINJJPca/kfC
Ao1NOxf5hCEXP0g1DREeCyFxlWiGILxmH7YDt/Mm4raEYkf/TwvhUoycR+KYVC6j
0ul+NdSTByxlufERk7IpLpbSzh8uMObS8WPs55rmDIVMpLdzzbO9On+eE9lPDyUx
Z9Z4VqZ8StyWMGl7swNu5p2EjmsudgHefRvf7CnX9zSfqd9sNeazbxtyTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEabuOnsqWMXWzlZdYpfndY61sH/MB8GA1UdIwQY
MBaAFP9MsJ3oJlDuTMQyfqtncLerFH77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4Yzct
MTQ2NWE0YjUyMTM2LzEvUnB1NDZleXBZeGRiT1ZsMWlsLWQxanJXd2Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4YzctMTQ2NWE0YjUyMTM2
LzEvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV+74AwQC
uchIMA0GCSqGSIb3DQEBCwUAA4IBAQAkGfKtaxfj1xxCUQTNycI3ZwXNmQGsRnka
V8F12nJ3HbDYnvltB8KIaNjN29RDf/VYo/XGJf/VO98fcGkQGN1VEJ/BZYxIHs6z
WwTGIol5qfNZTaaSOQVUIdqJCRIUZqam2FtSUJm7J1bgLdMFxUvFFMgf7nQII1NP
UYBOsHo+EStaCkMJur0LygsxSBQkkhqASUUYTkVgKyWFQz7UiD2YZSpF0tfLWKX/
puRtH2EQXIv+Demr8T1ikHJ4V+XR6wfnPdYPjFLOWGgrxc2JLgmvp6WOCd9fF4N4
Yh/eHJ6Po1vCKxVw7zorcoQ6UOUj+F4N3xYVgZQTu+NuFEPhRhRf
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:11:28 2024 by rpki-client on console-ams.rpki-client.org