Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/8Co9n3RilCC6MzjIpTnq4i4jBwY.roa
File: 8Co9n3RilCC6MzjIpTnq4i4jBwY.roa (raw, json)
Hash identifier: xyIc2EJV0/Otb48CTxJOwMbq8LPObBm8/SJ3vED9cwY=
Subject key identifier: F0:2A:3D:9F:74:62:94:20:BA:33:38:C8:A5:39:EA:E2:2E:23:07:06
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01933ED387A03D1055F300AC764D47DFFF26
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/8Co9n3RilCC6MzjIpTnq4i4jBwY.roa
Signing time: Mon 18 Nov 2024 10:31:10 +0000
ROA not before: Mon 18 Nov 2024 10:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47147
IP address blocks: 46.38.248.0/24 maxlen: 24
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:d3:87:a0:3d:10:55:f3:00:ac:76:4d:47:df:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Nov 18 10:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f02a3d9f74629420ba3338c8a539eae22e230706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:66:2a:0c:53:10:57:31:a6:4e:a1:d1:cf:
06:ef:44:fd:8d:e6:18:ef:67:a4:12:a7:ea:7a:c3:
55:68:47:d8:de:4f:d7:80:b4:e7:84:f1:f5:1c:08:
1a:6d:9c:ad:fa:d6:6e:12:cb:bf:df:ac:1c:56:71:
ed:cf:4a:14:80:78:3b:aa:3a:82:51:35:f9:80:fd:
d0:b9:ae:be:56:68:14:a4:0e:b2:41:87:f6:85:63:
58:c3:40:a6:07:d9:db:d7:4e:d3:f7:c4:7d:f8:e5:
9b:4e:7c:96:ab:cb:95:13:06:41:d7:23:bf:51:72:
5e:f6:e7:f2:80:d1:cb:b8:4a:cd:e3:58:34:fd:49:
0a:d4:50:45:ad:56:56:17:93:83:8b:50:b6:3d:62:
9e:65:72:4c:53:cb:72:66:51:2e:ff:93:f1:61:f6:
20:99:dc:49:66:5e:6a:6c:18:ae:dd:43:3c:21:ca:
3f:b6:dd:6b:bc:04:db:f9:a3:fb:42:6c:f8:62:4a:
ca:fc:31:f0:2b:ef:b2:05:b4:d4:a3:88:bb:d4:87:
79:65:18:0d:da:71:2d:e0:58:6f:d9:ce:53:0d:aa:
02:89:d6:4a:44:04:da:2d:b8:8f:1d:bb:39:0e:97:
1a:aa:43:ed:74:9b:04:6c:24:ee:22:29:1c:6e:b7:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2A:3D:9F:74:62:94:20:BA:33:38:C8:A5:39:EA:E2:2E:23:07:06
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/8Co9n3RilCC6MzjIpTnq4i4jBwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.248.0/24
IPv6:
2a0a:4cc0:40::/43
2a0a:4cc0:80::/43
2a0a:4cc0:c0::/43
Signature Algorithm: sha256WithRSAEncryption
18:02:17:12:51:25:70:f5:ac:47:c8:ef:f6:90:c1:96:a0:5c:
d6:64:5e:7f:ec:7b:0e:c2:6f:0c:16:60:7c:b7:63:25:6e:ef:
cc:af:d2:5e:37:9d:e0:21:a4:e0:24:1f:b2:6d:8b:8a:2e:17:
05:22:64:30:b2:48:18:61:2d:7a:2a:18:49:77:ef:a3:72:c6:
8c:28:ca:d1:1f:ba:48:3c:21:dd:51:91:21:c5:5b:6b:24:63:
1e:fa:70:6e:d6:d6:c5:52:ce:fa:53:5d:55:ae:6d:1b:53:69:
09:b6:fa:d7:2f:aa:c0:37:7e:b3:69:ec:86:c4:6e:2a:d5:db:
04:c2:43:8c:1a:cd:8d:3f:d6:af:ec:10:f9:65:6a:09:0c:cb:
e0:61:30:c9:b7:65:68:a8:ee:e1:f6:93:dd:89:71:b7:7c:de:
ec:84:b0:39:00:1e:28:00:80:e2:86:b8:86:90:2b:a8:2b:93:
96:ea:7a:d4:db:99:d1:e4:0e:11:7c:aa:44:c4:36:5f:82:cb:
7a:ed:be:d9:c6:7d:0f:a7:d4:a8:eb:a1:40:69:39:e9:97:97:
28:c4:2e:dc:53:f6:f9:cf:9e:c4:47:94:e4:cd:51:20:95:4e:
2a:fd:02:7f:3c:77:99:2c:f5:19:df:75:f3:7f:d7:ea:a3:c2:
dd:4e:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:31:23 2024 by rpki-client on console-ams.rpki-client.org