Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Ki4vmGGDJBTLNSESN27_eCnZfFQ.roa
File: Ki4vmGGDJBTLNSESN27_eCnZfFQ.roa (raw, json)
Hash identifier: HofpBTpCm12WS7vBsd79ffI5ZZXN0m56KKh2uGxYQ0w=
Subject key identifier: 2A:2E:2F:98:61:83:24:14:CB:35:21:12:37:6E:FF:78:29:D9:7C:54
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018CC26D1714181FA352F1EC98D497B2E7B0
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Ki4vmGGDJBTLNSESN27_eCnZfFQ.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 46.151.179.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.177.0/24 maxlen: 24
46.151.176.0/24 maxlen: 24
46.151.181.0/24 maxlen: 24
46.151.180.0/24 maxlen: 24
46.151.183.0/24 maxlen: 24
46.151.182.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.209.0/24 maxlen: 24
83.142.208.0/24 maxlen: 24
83.142.213.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
83.142.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:17:14:18:1f:a3:52:f1:ec:98:d4:97:b2:e7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a2e2f9861832414cb352112376eff7829d97c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:bc:ae:56:1c:71:39:e6:b1:78:41:a6:b7:
19:5f:cc:57:22:63:72:e6:b1:ff:93:1c:27:14:54:
0d:ac:32:16:0b:2a:93:4e:23:a1:1f:5b:4e:5a:3e:
0e:0b:5b:72:a6:4b:dc:03:1e:56:00:60:49:bf:39:
25:02:19:5d:fa:81:7a:c6:87:b5:a4:6f:98:5a:98:
19:6e:c3:6b:f9:9f:30:27:b8:56:d6:da:ba:84:ac:
3e:83:d0:36:7e:63:ae:40:69:f9:b7:eb:c5:9e:4c:
51:a4:6d:1a:2c:35:c1:6a:31:65:e2:d4:76:61:f7:
77:df:1a:60:83:2a:e2:ba:04:e4:45:31:c4:40:5f:
74:a9:32:d5:21:84:9d:2e:32:e1:0f:5c:1a:51:e7:
50:fb:f8:b2:21:76:7a:ba:32:3f:44:4a:70:80:b4:
66:15:bc:3f:e8:e3:2b:07:36:f9:87:69:f5:a5:89:
59:03:2b:80:4c:91:aa:ad:10:03:cf:c0:aa:4f:95:
93:3c:b0:1c:41:72:84:ca:49:f6:dd:b5:5d:b7:57:
fc:ef:2e:53:12:c0:9c:e0:78:86:b4:34:ae:8b:3f:
67:51:c2:b1:1d:4b:12:50:ed:60:8d:09:c3:90:6c:
72:86:87:d3:10:fe:32:d2:af:6c:af:78:03:b6:68:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:2F:98:61:83:24:14:CB:35:21:12:37:6E:FF:78:29:D9:7C:54
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Ki4vmGGDJBTLNSESN27_eCnZfFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0/21
83.142.208.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:af:0f:ac:e8:03:31:2e:49:0e:73:dd:a0:63:f9:5d:d4:1c:
5e:9e:37:b6:e5:a5:4f:0f:31:69:42:ac:67:f0:a6:37:24:97:
43:45:df:5f:e0:31:58:8a:56:08:47:56:b7:76:89:b8:9c:a5:
43:60:3b:38:4a:2c:c8:04:37:b0:0b:33:02:b4:b2:65:7a:c1:
95:08:30:10:3b:3b:1e:b8:c4:9b:0e:fd:6b:3e:23:cf:05:bd:
d9:6b:12:e0:55:6d:37:0d:29:16:b6:6e:71:9e:2e:0c:ac:60:
54:de:2a:3a:d0:f4:41:a6:ef:89:47:46:f4:98:e0:b5:63:9c:
cf:73:13:3f:5f:e3:de:1a:4f:0c:c8:26:e1:67:c5:7f:07:03:
c8:28:99:84:a0:f1:67:3e:a6:ca:16:3d:9d:24:e1:7a:e7:f6:
64:62:c8:f1:86:87:f8:11:61:81:79:58:bc:22:07:14:bf:0c:
b0:41:49:c7:12:d3:c5:85:26:e0:8e:e3:e3:76:df:f5:61:c5:
f0:8f:20:d0:fa:a4:82:08:a6:f2:a5:2c:26:9b:1c:80:48:aa:
7b:e2:13:a5:d0:26:1f:d9:6c:30:23:59:83:d7:14:bc:23:24:
59:00:3e:f6:a5:71:2f:15:62:a4:da:4e:8c:d8:ac:1a:79:c0:
a6:f3:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:42:35 2024 by rpki-client on console-fra.rpki-client.org