Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/0zttnUwcisQjkckLW6EIbpUbobs.roa
File: 0zttnUwcisQjkckLW6EIbpUbobs.roa (raw, json)
Hash identifier: n9y9JjNO6LnNNE6XAfwPARanyrp87r0naRByvo0BdO4=
Subject key identifier: D3:3B:6D:9D:4C:1C:8A:C4:23:91:C9:0B:5B:A1:08:6E:95:1B:A1:BB
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 018CC86F4C4AA10B83A83D8083E74EF9A226
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/0zttnUwcisQjkckLW6EIbpUbobs.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 46.227.40.0/24 maxlen: 24
46.227.41.0/24 maxlen: 24
185.31.206.0/24 maxlen: 24
46.227.44.0/24 maxlen: 24
46.227.42.0/24 maxlen: 24
185.31.204.0/24 maxlen: 24
46.227.43.0/24 maxlen: 24
185.31.205.0/24 maxlen: 24
46.227.47.0/24 maxlen: 24
185.31.207.0/24 maxlen: 24
46.227.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4c:4a:a1:0b:83:a8:3d:80:83:e7:4e:f9:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d33b6d9d4c1c8ac42391c90b5ba1086e951ba1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:10:3d:b0:6c:c1:4f:ef:6b:cc:fa:07:ce:
0f:96:96:26:d1:3f:cc:3f:cd:19:a8:6b:db:4c:d1:
e4:65:a5:5a:af:ee:99:f9:a3:37:57:9e:77:83:ba:
89:93:6e:4f:91:30:26:7a:23:4d:0c:69:cf:1a:72:
7a:11:0f:15:17:cd:8a:49:d9:85:de:67:b2:94:d9:
70:6f:55:c5:54:23:92:c9:6a:c6:7a:95:f8:3f:08:
94:dd:99:99:b1:27:9e:b8:5a:ef:d0:cd:59:96:d6:
48:b6:9c:29:49:58:38:2c:dd:5f:b6:d9:d3:14:f5:
94:db:58:2b:a7:9d:67:dd:bf:2f:1a:b7:ee:6f:49:
e8:96:da:ac:7f:56:cd:77:c0:d6:af:e9:d9:42:1d:
93:16:2a:b6:28:30:a0:a1:b4:e8:0e:60:5d:e2:b2:
22:97:c1:f0:7d:99:82:0f:1d:48:4e:02:47:da:37:
a0:d1:8b:17:f2:72:3f:d3:9d:50:51:d9:c1:ff:a7:
ae:c5:df:44:10:20:33:68:d7:5d:bf:e5:11:68:d7:
e4:78:4a:aa:9a:af:30:a8:99:99:cb:de:04:a6:99:
48:86:c5:1c:4e:02:57:f1:65:76:bc:4f:8f:94:cc:
da:42:41:82:40:c7:55:ad:4c:f8:bc:89:d4:46:38:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:6D:9D:4C:1C:8A:C4:23:91:C9:0B:5B:A1:08:6E:95:1B:A1:BB
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/0zttnUwcisQjkckLW6EIbpUbobs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.40.0-46.227.45.255
46.227.47.0/24
185.31.204.0/22
Signature Algorithm: sha256WithRSAEncryption
47:0c:09:64:df:d2:a2:70:47:3d:a1:9d:cc:6c:90:f8:0e:b8:
f0:05:cd:23:b9:7c:28:d0:4c:27:4b:f7:cc:01:9f:24:b6:e8:
ea:0a:94:22:d4:5d:eb:97:64:67:3c:e3:e1:78:41:b1:0e:ec:
7e:d7:d0:e0:b8:4d:24:1a:03:40:91:ba:08:67:af:33:4b:97:
70:0f:53:7c:b8:8f:75:53:e9:76:6b:ef:dc:62:33:45:00:e4:
5c:58:65:c8:9f:70:63:88:6e:6e:57:f8:89:6d:ba:ea:9a:ae:
cb:49:2b:ff:de:77:0f:0d:33:86:9c:d9:f6:f8:a9:77:e7:b7:
ef:70:cd:b0:5a:ae:ef:de:57:9e:27:a1:3a:c1:aa:34:07:2f:
9c:c3:84:79:01:84:50:b3:85:cc:64:3c:14:d5:31:f3:91:50:
9a:ae:1e:56:f0:5e:b7:a6:94:fa:cf:32:db:96:b1:20:af:71:
fc:5e:3c:a2:a6:c1:ca:56:49:6f:18:b8:04:0e:f5:cf:ea:bd:
d0:16:17:5e:01:7c:8b:3b:6a:ad:48:57:21:c8:cb:ad:28:c3:
d1:33:f7:e0:87:73:35:41:a3:18:13:81:47:ec:44:75:a7:12:
64:f9:31:f1:dd:4d:34:14:b2:02:86:5f:7d:4d:a1:70:16:5c:
de:ab:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:20:01 2024 by rpki-client on console-ams.rpki-client.org