Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/tP6196eoGxZ8sJXtGB2BxyyaQkc.roa
File: tP6196eoGxZ8sJXtGB2BxyyaQkc.roa (raw, json)
Hash identifier: Yg1BpZOhleklDTz62pqYALAo96J1wsRiT1axu+WPIZ0=
Subject key identifier: B4:FE:B5:F7:A7:A8:1B:16:7C:B0:95:ED:18:1D:81:C7:2C:9A:42:47
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1DBFAD6143DE8AA8385E339A64810
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/tP6196eoGxZ8sJXtGB2BxyyaQkc.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58098
IP address blocks: 46.107.226.0/23 maxlen: 24
46.107.228.0/24 maxlen: 24
46.107.229.0/24 maxlen: 24
46.107.230.0/24 maxlen: 24
46.107.231.0/24 maxlen: 24
46.107.232.0/23 maxlen: 23
78.92.231.0/24 maxlen: 24
78.92.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:db:fa:d6:14:3d:e8:aa:83:85:e3:39:a6:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4feb5f7a7a81b167cb095ed181d81c72c9a4247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:17:e7:91:38:a5:b0:bc:3f:49:58:89:36:
54:b8:a4:7f:0d:33:f3:cc:4a:6d:ad:2c:2a:38:a7:
10:75:20:61:a2:3d:3d:bb:96:74:0d:f2:4e:34:ed:
8f:33:47:24:2b:56:47:0a:b7:47:43:d0:b1:f1:b3:
92:82:94:ba:36:42:b7:c5:4f:ee:fb:32:c6:2e:8f:
7a:4c:92:ea:27:53:f0:bd:68:81:01:13:85:46:61:
68:b3:db:8e:23:e4:ec:89:40:65:b1:07:01:c8:c4:
e3:7d:8a:d5:c7:8a:72:80:be:45:ac:0c:14:14:49:
18:45:ae:5b:72:58:f6:96:a6:75:e4:73:77:53:30:
18:7b:11:ef:cd:5d:c5:98:f5:e7:5f:e2:ff:1f:78:
9d:cb:d5:f6:97:c2:75:ac:1f:24:ed:17:89:93:d5:
18:1b:4f:d5:93:94:9f:8b:d7:91:67:1c:fe:0e:16:
80:5d:ce:9a:b1:8d:7c:68:d0:0f:ee:84:1a:cf:ba:
e8:84:bd:05:82:d4:6a:95:37:a1:38:78:53:24:07:
3b:99:50:df:b1:1a:e4:0a:2e:3d:17:f9:77:27:30:
9b:fb:6e:89:f7:92:0b:01:c3:a1:22:eb:a7:8f:58:
5c:1f:25:8b:b8:30:89:68:45:ef:0f:bd:97:a5:a4:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:B5:F7:A7:A8:1B:16:7C:B0:95:ED:18:1D:81:C7:2C:9A:42:47
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/tP6196eoGxZ8sJXtGB2BxyyaQkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.107.226.0-46.107.233.255
78.92.231.0/24
78.92.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:83:9e:53:7f:38:49:1c:52:25:02:9a:2d:2c:71:54:40:30:
66:bd:19:c0:ce:c5:8b:f4:fa:1b:e1:cf:19:1c:b5:37:c7:1f:
18:9e:1a:ab:c1:fd:01:b6:3d:a1:3b:f1:62:36:7a:f5:bf:2a:
4a:14:b4:5e:1e:4f:46:60:20:b0:9d:73:32:64:e2:63:2a:51:
de:c2:85:4a:b5:4a:c4:ac:95:44:13:7b:9b:dc:e5:c4:41:45:
12:d2:3c:9d:23:e7:ee:46:00:cd:d1:e8:bc:40:ec:c1:18:f0:
95:5e:c7:25:46:40:5d:1a:73:10:3d:62:46:f1:cb:de:43:69:
b0:63:d8:e4:45:1d:02:43:c8:2c:3d:72:0d:a8:cf:65:1f:a4:
59:92:db:e1:db:63:74:99:5c:a5:20:fd:1e:92:1e:20:d0:d9:
d0:19:42:8f:a0:43:41:19:17:56:2b:0e:c1:c3:68:f6:17:04:
e9:20:34:0a:16:aa:65:15:c2:30:d7:60:7d:fa:65:3d:05:d1:
42:cf:91:a5:6d:66:8b:18:7b:03:20:69:75:68:50:f0:58:23:
2d:19:2a:d3:da:a2:37:ad:8f:69:c6:63:a0:8c:92:fb:76:36:
26:d9:ce:a8:cd:1b:8c:df:cc:14:b6:69:aa:f8:df:e8:fb:e9:
82:00:fb:41
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQhsdv61hQ96KqDheM5pkgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjUwMTAxMTE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGZlYjVmN2E3YTgxYjE2N2NiMDk1ZWQxODFkODFjNzJjOWE0MjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbsX55E4pbC8P0lYiTZUuKR/DTPz
zEptrSwqOKcQdSBhoj09u5Z0DfJONO2PM0ckK1ZHCrdHQ9Cx8bOSgpS6NkK3xU/u
+zLGLo96TJLqJ1PwvWiBAROFRmFos9uOI+TsiUBlsQcByMTjfYrVx4pygL5FrAwU
FEkYRa5bclj2lqZ15HN3UzAYexHvzV3FmPXnX+L/H3idy9X2l8J1rB8k7ReJk9UY
G0/Vk5Sfi9eRZxz+DhaAXc6asY18aNAP7oQaz7rohL0FgtRqlTehOHhTJAc7mVDf
sRrkCi49F/l3JzCb+26J95ILAcOhIuunj1hcHyWLuDCJaEXvD72XpaSnQQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLT+tfenqBsWfLCV7RgdgccsmkJHMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvdFA2MTk2ZW9HeFo4c0pYdEdCMkJ4eXlhUWtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAEua+ID
BAEua+gDBABOXOcDBABOXOowDQYJKoZIhvcNAQELBQADggEBAIqDnlN/OEkcUiUC
mi0scVRAMGa9GcDOxYv0+hvhzxkctTfHHxieGqvB/QG2PaE78WI2evW/KkoUtF4e
T0ZgILCdczJk4mMqUd7ChUq1SsSslUQTe5vc5cRBRRLSPJ0j5+5GAM3R6LxA7MEY
8JVexyVGQF0acxA9Ykbxy95DabBj2ORFHQJDyCw9cg2oz2UfpFmS2+HbY3SZXKUg
/R6SHiDQ2dAZQo+gQ0EZF1YrDsHDaPYXBOkgNAoWqmUVwjDXYH36ZT0F0ULPkaVt
ZosYewMgaXVoUPBYIy0ZKtPaojetj2nGY6CMkvt2NibZzqjNG4zfzBS2aar43+j7
6YIA+0E=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:57 2025 by rpki-client