Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/UFrWEkoYA6F2pMB5CJvLZRe9OIk.roa
File: UFrWEkoYA6F2pMB5CJvLZRe9OIk.roa (raw, json)
Hash identifier: 32siyvZIXjQJMK3nnJO2A6U0OY/yXQdYkrf+IV/sj44=
Subject key identifier: 50:5A:D6:12:4A:18:03:A1:76:A4:C0:79:08:9B:CB:65:17:BD:38:89
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01917A922081B79C628D98E367F792605D24
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/UFrWEkoYA6F2pMB5CJvLZRe9OIk.roa
Signing time: Thu 22 Aug 2024 14:51:22 +0000
ROA not before: Thu 22 Aug 2024 14:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.100.0/22 maxlen: 24
46.8.118.0/23 maxlen: 24
46.8.195.0/24 maxlen: 24
46.8.198.0/24 maxlen: 24
188.130.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:92:20:81:b7:9c:62:8d:98:e3:67:f7:92:60:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 22 14:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=505ad6124a1803a176a4c079089bcb6517bd3889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:75:72:bd:e9:76:cb:2e:fa:49:71:c4:ba:
f5:67:c6:c9:90:ac:e1:62:cc:90:53:00:9c:9c:b1:
be:46:d8:fa:56:ae:19:b9:52:60:f7:53:ee:ed:57:
be:16:33:e2:a8:8a:25:29:0a:be:69:fd:8f:95:a9:
09:ec:fb:3f:a8:53:72:dd:2d:b8:90:78:8f:54:a6:
97:c1:c0:73:50:8e:04:06:f5:a6:2e:64:a2:c7:b2:
4d:d2:4a:a1:73:91:27:d0:b0:01:45:b0:fb:63:bf:
c6:b2:10:c3:63:ad:42:9c:ea:a6:4e:ad:4b:54:f0:
a4:f5:ff:ec:93:71:ec:a2:2a:9c:47:74:9f:0a:0c:
ae:e1:4b:e5:39:28:3c:10:63:8e:16:d1:2e:f8:41:
f6:76:a8:81:74:c6:79:ad:1e:cb:88:a0:ea:21:08:
fa:b7:54:24:1b:75:71:76:c8:fc:d3:33:b8:e2:de:
2a:29:eb:cd:05:ae:a9:d9:e8:b8:51:89:2c:74:5a:
3e:fd:19:5e:b5:7a:a0:7f:18:4c:1b:70:77:82:60:
54:d8:fb:82:f0:f8:0e:12:cd:7f:5d:b6:ca:17:27:
4e:ec:8b:27:a5:c5:bc:23:e3:0c:8e:77:16:63:e7:
7b:bf:d6:99:b2:8f:07:01:99:8b:ba:ae:fa:d1:5e:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:D6:12:4A:18:03:A1:76:A4:C0:79:08:9B:CB:65:17:BD:38:89
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/UFrWEkoYA6F2pMB5CJvLZRe9OIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
46.8.118.0/23
46.8.195.0/24
46.8.198.0/24
188.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
19:bc:53:22:46:49:92:65:53:de:46:8f:08:bd:41:0e:74:68:
e9:4b:9c:57:6d:f3:01:c7:26:33:e8:25:fd:4a:4a:e5:a1:f2:
46:05:60:51:1d:42:68:2a:e3:fc:13:f9:30:af:b6:05:0f:56:
a9:86:77:05:11:74:49:b1:9c:66:23:95:fd:dc:73:27:3b:ac:
1f:2b:a8:04:75:87:5d:81:f5:e9:0d:5f:3a:b3:22:d9:ef:5a:
15:b6:c2:10:d5:e9:26:cf:4f:57:4b:c1:d6:20:81:57:00:6e:
4c:f7:b5:50:c7:18:5c:f8:5f:b6:91:7c:fd:85:0e:10:af:07:
9e:89:d3:26:6c:1f:af:c7:85:89:02:78:d7:92:fe:59:1e:2e:
c5:e8:33:6e:bd:e3:8a:44:98:c0:da:d2:1b:b1:ab:85:0b:00:
8f:05:12:bd:6b:41:a0:61:87:f5:ad:62:ec:5d:d5:6d:87:fe:
60:74:15:73:3f:4b:d6:87:f7:76:d5:a5:b1:83:fb:44:20:74:
34:8a:5f:2e:1d:05:ee:67:13:0a:dc:34:02:d3:c3:67:12:68:
49:fd:cd:79:b0:fd:ae:df:97:33:38:dc:c6:10:fe:b2:8b:fd:
12:04:09:0f:ef:4a:38:b0:c3:49:3f:da:14:23:54:90:b8:8e:
f8:19:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:29:31 2024 by rpki-client on console-fra.rpki-client.org