Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/Obe6To-9Z86lnxgYrV1INLsJQ0Y.roa
File: Obe6To-9Z86lnxgYrV1INLsJQ0Y.roa (raw, json)
Hash identifier: vTL1IfTd7MfDwYvkk+TvISn9cT+vajgh+23AanvE+Ns=
Subject key identifier: 39:B7:BA:4E:8F:BD:67:CE:A5:9F:18:18:AD:5D:48:34:BB:09:43:46
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 018CC726E54ABDCFBAECE830F92362237B4D
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/Obe6To-9Z86lnxgYrV1INLsJQ0Y.roa
Signing time: Mon 01 Jan 2024 22:31:04 +0000
ROA not before: Mon 01 Jan 2024 22:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199997
IP address blocks: 46.245.224.0/21 maxlen: 21
46.245.225.0/24 maxlen: 24
46.245.224.0/24 maxlen: 24
46.245.226.0/24 maxlen: 24
46.245.228.0/24 maxlen: 24
46.245.227.0/24 maxlen: 24
46.245.229.0/24 maxlen: 24
2a01:bfe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e5:4a:bd:cf:ba:ec:e8:30:f9:23:62:23:7b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39b7ba4e8fbd67cea59f1818ad5d4834bb094346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:a6:30:cd:42:60:ca:c6:17:2f:74:17:0a:
98:4f:89:76:b1:c4:3d:8f:3a:75:c1:ff:94:39:ed:
8f:93:f4:2b:c2:35:75:eb:e1:38:36:ee:7e:0d:3e:
f3:fd:87:a5:2e:cc:29:aa:35:8d:91:d9:e6:c2:8a:
58:f1:43:43:58:63:0a:e5:fb:1a:32:06:e7:8d:2d:
9f:8e:ca:51:6e:a7:d5:e3:10:50:3a:72:ed:db:4b:
0b:3f:6a:39:cd:a9:cf:5d:9c:86:2c:0b:7f:a8:9a:
4e:e9:97:cf:83:ac:48:a5:6c:9c:5c:5e:33:28:c7:
1e:0b:15:74:da:0a:41:7e:d1:bd:b4:80:7d:af:d8:
6e:c4:94:41:3b:e2:bc:1e:c5:30:62:6b:f9:fc:af:
84:fc:54:cb:d3:c2:09:ce:0b:84:0e:92:8c:2c:e5:
78:27:c7:56:84:29:d2:d1:c7:64:f4:4a:5a:b7:f2:
37:39:d5:e0:e0:cf:73:55:c3:eb:67:f6:03:95:8e:
96:1b:27:bf:71:c9:e3:18:85:2d:5d:5b:49:e7:16:
65:2e:2d:39:80:59:f7:89:54:e4:91:af:c1:3e:6a:
bc:c7:bd:d6:61:51:5f:cd:b2:7b:19:71:ba:cf:01:
1c:c4:f1:ff:90:00:8e:9c:b2:0e:ac:73:36:27:98:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B7:BA:4E:8F:BD:67:CE:A5:9F:18:18:AD:5D:48:34:BB:09:43:46
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/Obe6To-9Z86lnxgYrV1INLsJQ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.224.0/21
IPv6:
2a01:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:f3:47:c7:2a:b3:b5:03:59:59:73:39:d0:89:b0:ed:95:29:
8d:ef:a7:19:9e:d0:66:7b:5d:66:5d:1c:c6:10:e1:32:d0:c3:
d5:b7:08:71:11:75:40:6a:3f:e4:e6:f9:51:74:91:8e:96:9b:
01:ad:67:91:e2:58:fe:e7:f5:48:a6:3b:7c:a0:80:90:46:04:
80:cb:48:d7:08:e8:e3:07:8a:98:ba:d9:ae:70:89:65:eb:91:
35:d6:3a:7a:90:58:56:c1:fd:45:86:da:4e:ae:9b:e7:03:61:
84:50:39:0e:24:6b:0f:66:1b:4b:35:86:25:6b:9c:ba:0d:ac:
dc:4b:bd:7a:c1:16:d1:6d:a9:e4:79:03:7e:a1:4b:db:b1:64:
9d:4d:be:6b:be:49:65:57:7a:cc:36:61:44:5b:64:34:b2:92:
00:30:09:19:bd:eb:84:de:37:58:3f:1d:a0:ca:2d:09:c6:49:
2a:6a:49:66:6b:42:5c:5b:77:ce:74:c2:08:b7:02:c4:8e:05:
73:22:c6:50:20:f5:9c:a7:40:20:aa:31:1b:e1:4e:9d:54:d8:
24:34:d6:87:0f:3a:3b:f0:4f:1e:d7:49:cb:87:56:f0:19:bf:
c4:93:bd:03:ac:fd:ab:4c:72:b7:da:e7:8b:a4:42:f7:8d:e1:
6f:c2:8b:a7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHJuVKvc+67Ogw+SNiI3tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTYyZmZjOTlmMjk0MTAyZGNjZTIzNWRjMWEzYzEzZGFi
Y2Q2OWEwHhcNMjQwMTAxMjIzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWI3YmE0ZThmYmQ2N2NlYTU5ZjE4MThhZDVkNDgzNGJiMDk0MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivumMM1CYMrGFy90FwqYT4l2scQ9
jzp1wf+UOe2Pk/QrwjV16+E4Nu5+DT7z/YelLswpqjWNkdnmwopY8UNDWGMK5fsa
MgbnjS2fjspRbqfV4xBQOnLt20sLP2o5zanPXZyGLAt/qJpO6ZfPg6xIpWycXF4z
KMceCxV02gpBftG9tIB9r9huxJRBO+K8HsUwYmv5/K+E/FTL08IJzguEDpKMLOV4
J8dWhCnS0cdk9Epat/I3OdXg4M9zVcPrZ/YDlY6WGye/ccnjGIUtXVtJ5xZlLi05
gFn3iVTkka/BPmq8x73WYVFfzbJ7GXG6zwEcxPH/kACOnLIOrHM2J5jWwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDm3uk6PvWfOpZ8YGK1dSDS7CUNGMB8GA1UdIwQY
MBaAFEKmL/yZ8pQQLcziNdwaPBPavNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQt
MWMyMmRhNDRhMjJkLzEvT2JlNlRvLTlaODZsbnhnWXJWMUlOTHNKUTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQtMWMyMmRhNDRhMjJk
LzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLvXgMA0E
AgACMAcDBQAqAb/gMA0GCSqGSIb3DQEBCwUAA4IBAQBL80fHKrO1A1lZcznQibDt
lSmN76cZntBme11mXRzGEOEy0MPVtwhxEXVAaj/k5vlRdJGOlpsBrWeR4lj+5/VI
pjt8oICQRgSAy0jXCOjjB4qYutmucIll65E11jp6kFhWwf1FhtpOrpvnA2GEUDkO
JGsPZhtLNYYla5y6DazcS716wRbRbankeQN+oUvbsWSdTb5rvkllV3rMNmFEW2Q0
spIAMAkZveuE3jdYPx2gyi0Jxkkqaklma0JcW3fOdMIItwLEjgVzIsZQIPWcp0Ag
qjEb4U6dVNgkNNaHDzo78E8e10nLh1bwGb/Ek70DrP2rTHK32ueLpEL3jeFvwoun
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:05:57 2024 by rpki-client on console-fra.rpki-client.org