Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/_mu3Nwsdj-nHAKGg9-RIZ_NTDYo.roa
File: _mu3Nwsdj-nHAKGg9-RIZ_NTDYo.roa (raw, json)
Hash identifier: 4UJwlsODohof+uGrJXuB2VaXTofXZzFFeWvNhMjbpZA=
Subject key identifier: FE:6B:B7:37:0B:1D:8F:E9:C7:00:A1:A0:F7:E4:48:67:F3:53:0D:8A
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 018CC348BE8E0854F566B16AD16E72045973
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/_mu3Nwsdj-nHAKGg9-RIZ_NTDYo.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62132
IP address blocks: 185.46.110.0/24 maxlen: 24
185.46.108.0/24 maxlen: 24
185.46.111.0/24 maxlen: 24
185.46.108.0/22 maxlen: 22
185.46.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:be:8e:08:54:f5:66:b1:6a:d1:6e:72:04:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe6bb7370b1d8fe9c700a1a0f7e44867f3530d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:db:89:f4:3c:0b:9a:19:a1:a4:c4:fb:f1:
a7:67:20:66:6c:4d:7b:bf:50:a9:51:50:68:7a:40:
b3:09:05:8e:b2:0e:b9:5a:5c:99:3f:96:ec:19:2e:
c1:c7:70:3e:26:53:1b:be:b5:76:8e:cd:16:61:7d:
c0:21:65:1a:1d:47:1f:df:0e:4b:63:c8:e5:3e:5d:
d1:a0:8b:20:ad:d8:b4:2d:2c:fc:8b:08:76:27:fa:
c4:24:d5:af:42:76:4b:06:d3:a0:c1:67:43:1c:d9:
c1:53:37:de:2d:6b:e9:4e:9e:7a:6c:ad:f6:2c:2e:
62:fc:cd:56:d3:76:d0:74:df:a0:8c:b4:cd:ff:bf:
f1:cd:a5:d5:ae:ac:00:e6:72:bf:93:e3:2a:4b:bc:
86:1a:7c:45:29:04:30:fc:ea:6b:55:dc:e9:59:9c:
b1:59:1a:e6:1f:b1:12:64:35:39:86:e6:5e:22:dd:
f7:e7:52:99:c7:06:8a:f2:fd:19:76:7d:7d:72:8b:
04:fd:99:5c:b7:de:58:29:e8:00:c8:db:4a:56:8f:
9f:bf:42:21:aa:61:29:23:68:97:cc:a0:96:e0:e1:
f6:0a:ff:4f:37:a0:1f:10:9e:c4:8a:5e:46:30:4d:
c9:e5:52:bb:d5:c1:e7:c5:a5:25:e3:7d:56:59:09:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:B7:37:0B:1D:8F:E9:C7:00:A1:A0:F7:E4:48:67:F3:53:0D:8A
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/_mu3Nwsdj-nHAKGg9-RIZ_NTDYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.108.0/22
Signature Algorithm: sha256WithRSAEncryption
29:98:f8:aa:0b:78:07:6a:d6:e5:60:37:27:f2:62:05:b1:98:
5f:ca:66:7d:c3:80:9f:ae:f8:a3:a0:f2:21:13:e0:07:5d:7e:
a6:93:d6:51:6d:7f:58:fe:e6:ee:4c:ef:34:45:fe:3d:84:74:
71:f4:e6:f4:8b:c4:47:e7:40:98:73:84:95:e0:9c:63:05:de:
ab:f5:7e:54:76:07:3b:42:f5:44:58:83:21:30:1d:17:e9:2f:
02:d8:e3:dd:04:b6:72:8a:3c:bd:78:9b:f9:ed:d6:72:56:5e:
e0:13:8b:be:81:20:de:da:3d:73:26:36:10:4d:b5:6d:f3:4a:
0a:17:27:6c:12:67:25:ce:2d:38:f1:5e:f2:0a:a7:dd:ce:7d:
38:9c:27:11:1d:5a:83:ac:a7:d4:f9:62:ff:1b:57:c3:d9:ac:
c9:9d:d1:11:54:66:d1:d2:19:5a:96:10:bc:9e:e0:a8:2a:27:
f2:c4:e5:7f:5c:8b:bb:10:5c:c3:0c:a5:ae:8d:8b:3c:9d:16:
8d:41:15:40:dd:33:b5:55:e9:a1:15:a0:a8:0a:9d:97:42:81:
5f:1d:3e:33:88:6d:7a:88:5e:c7:dd:e4:cd:b9:a5:d1:7e:e9:
22:e1:6c:20:f5:22:e8:34:12:43:60:b8:4b:6a:5c:e3:44:8f:
38:89:39:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSL6OCFT1ZrFq0W5yBFlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNWVhODM3OWJjYTQ0ZjRmNmE3ZjRiNjk4NjRjZDliMDJh
MjdiMTIwHhcNMjQwMTAxMDQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTZiYjczNzBiMWQ4ZmU5YzcwMGExYTBmN2U0NDg2N2YzNTMwZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq7bifQ8C5oZoaTE+/GnZyBmbE17
v1CpUVBoekCzCQWOsg65WlyZP5bsGS7Bx3A+JlMbvrV2js0WYX3AIWUaHUcf3w5L
Y8jlPl3RoIsgrdi0LSz8iwh2J/rEJNWvQnZLBtOgwWdDHNnBUzfeLWvpTp56bK32
LC5i/M1W03bQdN+gjLTN/7/xzaXVrqwA5nK/k+MqS7yGGnxFKQQw/OprVdzpWZyx
WRrmH7ESZDU5huZeIt3351KZxwaK8v0Zdn19cosE/Zlct95YKegAyNtKVo+fv0Ih
qmEpI2iXzKCW4OH2Cv9PN6AfEJ7Eil5GME3J5VK71cHnxaUl431WWQkUfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5rtzcLHY/pxwChoPfkSGfzUw2KMB8GA1UdIwQY
MBaAFI9eqDebykT09qf0tphkzZsConsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgt
ZWNiYjk0NDJmNTg5LzEvX211M053c2RqLW5IQUtHZzktUklaX05URFlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgtZWNiYjk0NDJmNTg5
LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS5sMA0G
CSqGSIb3DQEBCwUAA4IBAQApmPiqC3gHatblYDcn8mIFsZhfymZ9w4CfrvijoPIh
E+AHXX6mk9ZRbX9Y/ubuTO80Rf49hHRx9Ob0i8RH50CYc4SV4JxjBd6r9X5Udgc7
QvVEWIMhMB0X6S8C2OPdBLZyijy9eJv57dZyVl7gE4u+gSDe2j1zJjYQTbVt80oK
FydsEmclzi048V7yCqfdzn04nCcRHVqDrKfU+WL/G1fD2azJndERVGbR0hlalhC8
nuCoKifyxOV/XIu7EFzDDKWujYs8nRaNQRVA3TO1VemhFaCoCp2XQoFfHT4ziG16
iF7H3eTNuaXRfuki4Wwg9SLoNBJDYLhLalzjRI84iTny
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:46:02 2024 by rpki-client on console-ams.rpki-client.org