Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/sUmFdFcwlOa_HG1O6ppc3IwwE5Q.roa
File: sUmFdFcwlOa_HG1O6ppc3IwwE5Q.roa (raw, json)
Hash identifier: 4mXHrvZJm6I8e1xKXIKt9bIN4b3em/AlpaHizBimvJs=
Subject key identifier: B1:49:85:74:57:30:94:E6:BF:1C:6D:4E:EA:9A:5C:DC:8C:30:13:94
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 018CC2DAB76C90412AA26833E3F71006FB57
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/sUmFdFcwlOa_HG1O6ppc3IwwE5Q.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56450
IP address blocks: 46.229.112.0/20 maxlen: 20
46.229.122.0/23 maxlen: 23
2a04:4880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b7:6c:90:41:2a:a2:68:33:e3:f7:10:06:fb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1498574573094e6bf1c6d4eea9a5cdc8c301394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:2a:ba:8b:46:5f:e3:c9:74:cb:2f:43:fd:
00:30:6c:0c:75:e2:60:eb:d8:c9:18:e4:f9:64:a0:
e0:14:da:98:7f:0c:d6:73:ca:3b:0d:01:be:0c:b8:
4f:64:17:ca:3a:2a:b3:58:29:be:5e:ac:9f:b0:41:
8d:aa:ad:01:97:ef:7c:ec:10:26:c1:17:39:b7:24:
d4:bc:69:70:e8:9f:78:e9:fc:dd:56:c7:5c:7b:5e:
eb:bb:df:2c:e3:b9:94:29:f4:28:13:27:fd:13:31:
b2:23:d3:fc:3a:4e:1d:cd:49:a7:e3:20:1a:83:2c:
b2:97:6a:1b:92:c3:65:ee:da:88:f1:fd:32:0c:3e:
a4:7c:e6:44:c1:67:32:f2:fb:2b:25:1f:a7:aa:16:
8f:42:69:87:08:1f:cd:3d:32:d8:39:35:96:70:1e:
b8:db:be:4e:02:10:1c:91:8d:82:3b:a7:d8:92:70:
5c:a7:47:75:b6:b7:b7:b0:da:27:4b:2d:aa:a9:1d:
7d:81:8a:5f:9f:5a:19:6f:6c:9a:d5:be:11:37:b2:
5d:57:3d:7d:8c:3e:1d:98:a4:82:a1:45:72:12:ef:
b7:25:85:e6:22:c6:96:aa:36:85:d1:24:e4:08:86:
32:a1:9b:4a:b7:81:c5:ca:1d:20:24:e0:97:83:e5:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:85:74:57:30:94:E6:BF:1C:6D:4E:EA:9A:5C:DC:8C:30:13:94
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/sUmFdFcwlOa_HG1O6ppc3IwwE5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.112.0/20
IPv6:
2a04:4880::/29
Signature Algorithm: sha256WithRSAEncryption
00:ef:d6:75:04:92:8f:8e:ee:a6:6d:4d:3b:1d:22:ca:3b:a3:
1b:51:a8:92:8b:1b:03:14:0d:ae:05:1b:5c:da:ff:56:a5:6f:
90:61:a3:a3:6e:3f:08:8d:f5:83:27:76:ea:84:77:48:be:96:
0c:bd:c8:b8:d0:63:9c:6a:04:28:8e:9f:ed:68:b7:52:05:38:
57:b9:43:64:f8:1b:d3:da:67:3d:18:74:df:e3:20:53:f9:86:
33:9e:1b:b7:d9:b6:75:dd:10:f1:85:83:fe:0f:2a:47:4c:fe:
7e:78:03:8d:5f:f3:37:fe:b7:69:b0:bc:c9:a3:64:12:e0:9d:
0c:f5:d1:6a:65:e0:5c:64:b6:ae:2e:3c:aa:f4:b2:3c:ca:f1:
8a:87:c5:21:50:74:d1:12:31:31:74:7c:3f:72:8f:87:44:fc:
bf:e8:bc:b5:1a:4c:dd:3d:68:6b:1e:e8:02:b1:bc:e2:8b:04:
ac:99:16:cf:de:ee:28:a4:cb:46:e0:2d:10:5a:10:4a:a4:30:
e8:4c:12:5f:51:5b:04:2a:ff:4f:13:93:a3:ad:6d:6b:78:9e:
cd:92:82:76:93:88:07:cc:ed:2f:1d:f6:b7:27:8b:82:77:e8:
d2:7f:54:54:85:21:29:ba:05:c6:0d:5d:24:71:0b:01:bb:88:
d7:b9:7f:06
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzC2rdskEEqomgz4/cQBvtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDY5OTAxNGE1NTUyNzNlZDNhYmIxNzA4NmFhZTNmMDJm
ZjlhMGYwHhcNMjQwMTAxMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ5ODU3NDU3MzA5NGU2YmYxYzZkNGVlYTlhNWNkYzhjMzAxMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJkquotGX+PJdMsvQ/0AMGwMdeJg
69jJGOT5ZKDgFNqYfwzWc8o7DQG+DLhPZBfKOiqzWCm+XqyfsEGNqq0Bl+987BAm
wRc5tyTUvGlw6J946fzdVsdce17ru98s47mUKfQoEyf9EzGyI9P8Ok4dzUmn4yAa
gyyyl2obksNl7tqI8f0yDD6kfOZEwWcy8vsrJR+nqhaPQmmHCB/NPTLYOTWWcB64
275OAhAckY2CO6fYknBcp0d1tre3sNonSy2qqR19gYpfn1oZb2ya1b4RN7JdVz19
jD4dmKSCoUVyEu+3JYXmIsaWqjaF0STkCIYyoZtKt4HFyh0gJOCXg+XZdQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLFJhXRXMJTmvxxtTuqaXNyMMBOUMB8GA1UdIwQY
MBaAFLjWmQFKVVJz7Tq7Fwhqrj8C/5oPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUt
YjJkNzlhZTQ5NjQ2LzEvc1VtRmRGY3dsT2FfSEcxTzZwcGMzSXd3RTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUtYjJkNzlhZTQ5NjQ2
LzEvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELuVwMA0E
AgACMAcDBQMqBEiAMA0GCSqGSIb3DQEBCwUAA4IBAQAA79Z1BJKPju6mbU07HSLK
O6MbUaiSixsDFA2uBRtc2v9WpW+QYaOjbj8IjfWDJ3bqhHdIvpYMvci40GOcagQo
jp/taLdSBThXuUNk+BvT2mc9GHTf4yBT+YYznhu32bZ13RDxhYP+DypHTP5+eAON
X/M3/rdpsLzJo2QS4J0M9dFqZeBcZLauLjyq9LI8yvGKh8UhUHTREjExdHw/co+H
RPy/6Ly1GkzdPWhrHugCsbziiwSsmRbP3u4opMtG4C0QWhBKpDDoTBJfUVsEKv9P
E5OjrW1reJ7NkoJ2k4gHzO0vHfa3J4uCd+jSf1RUhSEpugXGDV0kcQsBu4jXuX8G
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:20:37 2024 by rpki-client on console-fra.rpki-client.org