Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/18VWCQlISKjgnNFShnUEviO5Mtg.roa
File: 18VWCQlISKjgnNFShnUEviO5Mtg.roa (raw, json)
Hash identifier: GmAGlXvn75m4SwBbrAisbA3Wa0iSPFOubY4UkkNm+ng=
Subject key identifier: D7:C5:56:09:09:48:48:A8:E0:9C:D1:52:86:75:04:BE:23:B9:32:D8
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 018CC86F4CB61F25F0004F2F9D9E488DC2E5
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/18VWCQlISKjgnNFShnUEviO5Mtg.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.227.42.0/24 maxlen: 24
185.31.204.0/24 maxlen: 24
46.227.41.0/24 maxlen: 24
46.227.40.0/24 maxlen: 24
46.227.44.0/24 maxlen: 24
185.31.206.0/24 maxlen: 24
46.227.43.0/24 maxlen: 24
185.31.205.0/24 maxlen: 24
46.227.47.0/24 maxlen: 24
185.31.207.0/24 maxlen: 24
46.227.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4c:b6:1f:25:f0:00:4f:2f:9d:9e:48:8d:c2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7c55609094848a8e09cd152867504be23b932d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:01:d3:35:ee:bc:b2:b2:ad:b3:c7:92:45:
6e:ac:06:13:bb:1c:58:d8:2c:d3:3c:4d:0b:fe:16:
57:8f:ff:42:a8:1a:1e:68:2a:57:15:71:6b:80:cb:
9b:4b:2e:51:7d:fa:58:fb:8e:f3:a9:19:66:46:14:
cc:4b:8e:bb:0f:22:ba:8d:72:b9:cb:15:23:ba:c4:
fe:52:66:a2:1c:de:78:a3:8f:bc:a8:01:fd:b9:dd:
32:57:25:e5:6c:26:72:e6:69:a8:db:77:48:12:8f:
43:5d:fb:3d:ff:de:67:a3:cc:02:6a:18:b1:8f:e6:
14:74:5b:91:ee:a6:9b:c6:6e:3f:4a:32:9b:a3:dd:
0f:48:dc:ff:de:2d:15:12:1e:25:32:3f:63:e1:4f:
7b:36:17:b5:f5:24:76:f1:f2:e5:02:78:33:73:3b:
e6:93:34:e7:c7:da:c6:53:2c:29:d0:5e:91:6f:3b:
9d:39:30:34:67:98:57:2f:94:aa:a9:6c:3d:38:f1:
2b:b4:df:13:0e:95:a8:3f:ad:4f:7d:53:48:79:88:
53:6e:0d:1c:a0:99:e2:eb:56:02:d3:25:c7:bd:aa:
0b:15:85:29:f8:54:70:6b:4a:6a:45:19:0c:89:74:
a4:d6:70:ab:46:bf:53:7e:10:3b:90:7f:92:12:c9:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:56:09:09:48:48:A8:E0:9C:D1:52:86:75:04:BE:23:B9:32:D8
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/18VWCQlISKjgnNFShnUEviO5Mtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.40.0-46.227.45.255
46.227.47.0/24
185.31.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:38:4e:87:bb:1f:fc:1c:a8:8d:77:1a:77:0d:88:15:12:bf:
a5:37:eb:27:e6:c3:5a:3a:6c:58:cb:98:27:ec:c8:43:dd:a7:
17:0b:61:65:38:78:58:ef:44:97:16:aa:b8:0c:4b:e6:23:59:
73:f8:21:dc:be:39:43:b0:ef:8f:2f:fa:db:90:c1:b2:c5:19:
c8:7f:57:f7:bb:57:3f:d1:8f:33:a1:25:5a:77:35:ba:71:46:
68:0d:51:72:0c:e4:28:60:57:fb:4a:2c:8a:66:30:ba:00:e5:
2d:d0:61:b2:d3:bc:31:ae:17:02:64:fa:ed:dd:fa:e1:c7:11:
c1:9c:b8:8e:da:91:5b:68:c4:75:5f:4a:37:af:ae:41:46:c8:
af:e9:44:c9:f3:2a:d5:11:e4:4d:16:b3:0d:79:e2:1c:31:7a:
1c:a1:72:93:fb:a2:ec:81:44:08:53:16:eb:b7:a3:da:3b:ca:
2e:4c:d5:8e:40:65:1d:1f:35:07:83:e5:5d:6d:b4:a5:81:be:
dc:4f:97:6d:7a:80:00:cd:28:1f:80:bc:66:6c:d1:cb:6f:f8:
ac:cb:e0:f1:34:e7:a8:08:f9:2a:26:19:eb:7d:b8:ce:fe:9b:
51:a8:b4:4b:74:53:3a:f1:00:2c:a9:39:5c:ef:b6:0d:5c:77:
18:06:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:22:40 2024 by rpki-client on console-ams.rpki-client.org