Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/4U8ocPdoDe4Wrh6e7Kd3btjfr5E.roa
File: 4U8ocPdoDe4Wrh6e7Kd3btjfr5E.roa (raw, json)
Hash identifier: SSI5Rmuywg2gd7wCpI42aVozCrpq975i1BOo27OZSxA=
Subject key identifier: E1:4F:28:70:F7:68:0D:EE:16:AE:1E:9E:EC:A7:77:6E:D8:DF:AF:91
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 018CC5DC6E115245992A1207C278B2483933
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/4U8ocPdoDe4Wrh6e7Kd3btjfr5E.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203148
IP address blocks: 46.18.32.0/24 maxlen: 24
185.59.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6e:11:52:45:99:2a:12:07:c2:78:b2:48:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e14f2870f7680dee16ae1e9eeca7776ed8dfaf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:9a:a5:40:21:61:2a:16:44:e0:8b:c2:e3:
c6:05:53:38:1c:a1:12:66:d1:fe:40:ae:ca:22:bc:
55:fb:18:e0:57:cb:fc:76:6e:8f:9a:da:fe:67:bd:
87:2f:e1:66:e0:a4:c8:57:94:c2:35:4f:68:76:6f:
99:07:ad:29:f6:6d:c8:d6:b0:1b:c5:74:5d:70:7c:
bd:85:de:01:86:73:66:bc:33:ef:cb:3d:c7:b1:e1:
23:f7:73:1a:4b:c7:85:25:10:5e:28:4a:a4:df:47:
a1:7e:f1:0a:8b:91:ad:ae:75:ec:82:db:79:5c:f8:
97:b4:95:70:d4:e7:19:18:9b:ce:ff:c1:76:31:b4:
52:50:3d:d0:8b:4a:c4:3f:2e:52:e9:ab:f7:1c:b9:
8e:90:58:26:00:a0:43:02:a2:dc:ba:27:e8:6d:96:
aa:ee:c9:56:05:1b:e7:03:48:d5:f2:c5:5f:7d:d2:
77:1b:55:d1:1d:4f:99:06:fc:0d:e9:7b:b7:7b:67:
d3:77:f5:1e:8c:8d:4c:b2:d6:c7:64:8e:e2:83:38:
e2:0c:e4:12:5c:cd:84:ae:db:db:f0:fc:33:c1:25:
ad:1a:61:23:1a:95:3a:9e:8f:c8:18:f4:04:7e:06:
f7:f8:94:56:28:23:35:8e:6a:a2:be:38:b3:76:48:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4F:28:70:F7:68:0D:EE:16:AE:1E:9E:EC:A7:77:6E:D8:DF:AF:91
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/4U8ocPdoDe4Wrh6e7Kd3btjfr5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.32.0/24
185.59.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:3a:71:22:be:23:be:e3:e5:1d:9f:db:9e:3c:0f:c9:eb:2a:
bd:d9:a4:27:8c:8b:62:07:ad:be:3e:e2:66:b3:88:f1:14:e6:
41:f1:60:12:8e:01:3e:12:2e:ec:e0:3f:92:c4:a8:29:16:67:
da:f9:74:e1:4a:e8:f8:82:4c:fe:1e:82:d4:3e:aa:ce:33:0e:
85:d9:5e:d9:49:58:fb:fe:7a:b2:0e:0d:2b:3b:d7:9d:64:10:
39:2b:de:00:e7:92:7d:75:ab:51:26:a7:47:0d:bf:34:3f:2a:
69:da:30:f9:0d:a8:bf:d2:10:7a:a9:57:6a:32:a8:89:6e:26:
97:9b:88:61:3c:a3:b5:57:15:b7:6f:47:2e:bd:e1:72:38:94:
77:a0:74:f1:fc:c6:b5:a6:c9:fa:67:a7:df:d9:13:f1:54:ef:
0d:3b:7d:ca:19:e7:bc:92:8e:38:a3:83:6e:75:5a:b6:25:99:
c6:b0:50:f3:10:dc:5d:c5:31:84:2e:a4:47:98:ff:43:10:ce:
9f:01:75:d6:af:f3:4c:84:47:f3:ee:5f:02:cd:e3:0c:0b:9f:
30:34:5c:3d:c2:66:22:bf:de:22:57:d1:0d:03:c5:ae:5f:43:
52:90:f5:e6:a8:e3:ae:e6:cb:65:90:dd:9d:9b:49:a0:63:c5:
09:37:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:47:55 2024 by rpki-client on console-ams.rpki-client.org