Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/p3vK8G6Dwh_ticm55oITAV91v5I.roa
File: p3vK8G6Dwh_ticm55oITAV91v5I.roa (raw, json)
Hash identifier: +YVB97qmacxvnLkLqUjhBSISXn7EtmxMwJa8Vs+19zI=
Subject key identifier: A7:7B:CA:F0:6E:83:C2:1F:ED:89:C9:B9:E6:82:13:01:5F:75:BF:92
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 018E7B57A4E6C763E4069038EA3188D8A35F
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/p3vK8G6Dwh_ticm55oITAV91v5I.roa
Signing time: Tue 26 Mar 2024 15:18:45 +0000
ROA not before: Tue 26 Mar 2024 15:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 46.235.8.0/24 maxlen: 32
46.235.9.0/24 maxlen: 24
46.235.10.0/24 maxlen: 32
46.235.11.0/24 maxlen: 32
178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:57:a4:e6:c7:63:e4:06:90:38:ea:31:88:d8:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Mar 26 15:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a77bcaf06e83c21fed89c9b9e68213015f75bf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:06:c4:6c:5f:01:f0:95:0e:51:0b:2a:ac:
81:76:6c:8c:82:a4:20:d4:25:1e:42:fb:18:15:e9:
ee:a7:cd:70:8f:3e:18:01:f5:cb:55:8c:eb:9f:27:
49:31:6c:21:95:65:f1:1a:fa:2e:d9:66:eb:03:4d:
9d:ad:8e:4a:c4:17:80:c0:54:44:16:11:d5:cf:b8:
6c:69:dc:b5:18:f9:59:c1:03:20:2a:af:db:5b:17:
d3:5f:fa:5e:11:16:9f:a6:1f:da:40:de:88:14:12:
f1:a4:ab:bd:e4:5a:5c:86:3e:11:eb:d1:cf:e0:6e:
3c:7b:7c:66:6e:72:1d:c1:bc:22:9b:4c:bc:3e:6d:
b6:9e:4f:0f:5e:64:23:95:e9:17:39:e8:f4:fa:3b:
37:ec:86:11:b0:c7:fa:61:24:2c:7a:09:98:36:b0:
95:e9:27:cf:5b:1a:19:90:87:6e:7e:a5:5e:04:28:
75:e8:ad:b1:bc:49:81:34:2e:7d:c3:fb:93:8c:a3:
05:0a:e3:15:be:0f:63:15:c6:2c:49:eb:d3:c4:0e:
0b:da:01:29:d9:15:f0:9a:6c:6b:2c:35:0b:5a:d0:
b6:e5:6a:08:d0:c1:a1:33:93:fd:e6:06:a3:b4:c5:
2b:18:e6:de:18:13:a1:a2:4d:8e:75:e9:8f:2e:36:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:CA:F0:6E:83:C2:1F:ED:89:C9:B9:E6:82:13:01:5F:75:BF:92
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/p3vK8G6Dwh_ticm55oITAV91v5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/22
178.210.160.0-178.210.166.255
178.210.168.0-178.210.178.255
178.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c3:73:e7:21:2b:ac:1c:f4:95:26:c4:84:2f:e6:b4:6f:a9:
68:4a:6e:89:68:a4:c8:00:03:51:60:65:47:61:de:06:ff:10:
6e:23:58:c0:09:b9:b5:91:c3:b2:98:6e:61:ec:5c:d8:81:9c:
1c:85:9f:64:af:57:98:46:e3:a6:41:35:8f:9f:eb:30:7c:70:
8a:13:47:b3:3c:b5:1d:c5:bc:22:df:08:6f:d7:57:20:a3:0b:
65:6c:b4:69:d1:ef:16:c3:97:47:40:6e:34:a1:c7:c6:8d:29:
3c:6e:78:75:3c:4b:ef:d0:d7:0c:c3:a0:09:b0:41:1d:93:d2:
23:76:6e:3c:33:96:ce:49:f2:d9:ad:cc:69:e5:9d:6a:3a:24:
ba:d4:1b:b8:a8:7e:81:ed:57:3f:c2:04:d6:f4:8b:59:2c:22:
c6:55:96:29:17:37:d0:d7:6e:83:e0:43:bf:f0:7e:96:c3:0d:
ad:dd:a8:e5:72:b8:62:f0:70:7b:f1:5e:7e:0a:26:75:c1:5f:
4e:1c:ac:3a:b8:5c:d3:c4:69:2c:b3:71:e2:32:95:06:e7:6b:
82:ea:de:d7:db:ee:0f:c8:51:70:dc:b4:af:bf:02:07:be:0a:
99:fd:14:85:33:fd:3c:d1:1c:d0:c7:b6:1e:6e:d3:e3:8b:db:
df:fb:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:07:37 2024 by rpki-client on console-fra.rpki-client.org