Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/nQjjjRY9rmA7uOAzSdFE56D4Omc.roa
File: nQjjjRY9rmA7uOAzSdFE56D4Omc.roa (raw, json)
Hash identifier: tMu2Q8Qa6bV4UIFX6InFOPla8uiT1sFSNMOxBWAsBqY=
Subject key identifier: 9D:08:E3:8D:16:3D:AE:60:3B:B8:E0:33:49:D1:44:E7:A0:F8:3A:67
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 018CC5DC5E69440D5B1F930A045AEDB9DF82
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/nQjjjRY9rmA7uOAzSdFE56D4Omc.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34209
IP address blocks: 46.28.240.0/21 maxlen: 21
46.28.243.0/24 maxlen: 24
46.28.244.0/24 maxlen: 24
46.28.241.0/24 maxlen: 24
46.28.245.0/24 maxlen: 24
46.28.246.0/24 maxlen: 24
195.80.237.0/24 maxlen: 24
193.22.169.0/24 maxlen: 24
193.41.210.0/23 maxlen: 23
2a02:2978::/32 maxlen: 32
2a02:2978::/36 maxlen: 36
2a02:2978:b000::/36 maxlen: 36
2a02:2978:e000::/36 maxlen: 36
2a02:2978:c000::/36 maxlen: 36
2a02:2978:f000::/36 maxlen: 36
2a02:2978:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5e:69:44:0d:5b:1f:93:0a:04:5a:ed:b9:df:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d08e38d163dae603bb8e03349d144e7a0f83a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:59:36:60:1f:02:53:52:9a:93:b0:e2:f1:
80:9d:32:e0:38:ff:d8:c8:8c:ca:8b:91:bd:8c:e1:
cc:9f:02:0b:0d:e0:7a:ea:dc:12:29:0a:28:13:2f:
dc:a0:91:a7:09:a6:99:3e:72:ca:da:0e:c1:f1:1a:
da:3f:9b:32:6f:ec:c4:80:db:cf:c4:2b:4e:59:36:
3b:d8:61:66:6d:13:7d:42:c1:1f:ff:19:a3:03:c7:
f4:83:d0:cb:7a:35:e8:c0:75:21:45:fb:09:80:a0:
b5:80:9a:97:7a:38:03:19:ea:1b:86:1b:12:e4:b2:
3c:62:f2:d3:2b:d3:bd:7e:4b:fc:64:57:a0:cb:1a:
67:75:81:c4:3c:36:77:22:f6:55:c8:57:df:e8:81:
a5:39:30:cb:db:6b:27:de:8e:8b:7f:2d:d0:0b:4e:
5b:e1:28:03:eb:48:58:11:28:99:0f:29:02:34:f5:
3b:a8:09:d6:ed:72:0c:79:c7:2f:67:2f:f0:ef:fb:
3c:26:7d:f9:43:e7:5e:3f:43:12:27:18:f4:ca:1a:
ea:a0:d7:b9:73:4f:60:12:fe:c8:96:fc:4b:00:76:
ab:82:c7:98:46:34:cd:fd:26:c4:39:9a:47:0c:25:
a1:b8:ac:67:17:9b:c8:2b:3a:09:f8:b9:59:40:a6:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:E3:8D:16:3D:AE:60:3B:B8:E0:33:49:D1:44:E7:A0:F8:3A:67
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/nQjjjRY9rmA7uOAzSdFE56D4Omc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.240.0/21
193.22.169.0/24
193.41.210.0/23
195.80.237.0/24
IPv6:
2a02:2978::/32
Signature Algorithm: sha256WithRSAEncryption
60:82:bf:1e:d0:0f:94:59:da:cc:f8:46:4a:e2:05:a4:4a:5e:
8d:fa:d0:29:c2:28:b7:b8:34:31:23:d4:fb:86:d9:e5:02:26:
b5:28:a9:4a:c5:36:47:e4:ee:d3:bb:09:78:a9:0d:a5:31:0c:
88:68:ec:9e:22:9d:5f:39:da:80:f6:1d:d7:f5:17:26:f0:be:
c5:25:a0:6e:c3:a1:c5:55:24:fb:00:33:bf:60:8a:5f:1c:a5:
4a:0a:8a:11:12:97:fd:06:4f:40:c5:c4:53:ee:54:e8:ce:89:
05:d1:48:e2:f8:82:62:58:c3:94:db:9f:b8:72:59:da:d9:7e:
5f:9f:ff:77:98:90:d1:c3:fe:94:fd:75:39:3d:7d:82:44:a6:
d6:42:42:2d:4c:01:fa:46:77:fe:e9:98:56:ce:d4:8a:52:b8:
5c:96:99:d0:69:c4:75:d9:b3:cf:a6:2b:e7:8c:94:f0:96:74:
f4:7f:b0:3c:49:a0:1b:79:bf:54:79:80:5d:06:e0:5a:16:1c:
8f:e7:98:e2:f9:8a:23:7c:07:99:ed:32:02:ef:9e:7f:4a:86:
e3:a2:e9:4b:b5:18:4f:42:bb:c0:52:b3:15:05:c0:bb:4c:7b:
e2:28:22:37:a9:69:af:cd:19:58:59:46:b4:ca:9d:38:8b:c8:
f7:72:7d:ee
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzF3F5pRA1bH5MKBFrtud+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk
ZDM3MDIwHhcNMjQwMTAxMTYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDA4ZTM4ZDE2M2RhZTYwM2JiOGUwMzM0OWQxNDRlN2EwZjgzYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxZZNmAfAlNSmpOw4vGAnTLgOP/Y
yIzKi5G9jOHMnwILDeB66twSKQooEy/coJGnCaaZPnLK2g7B8RraP5syb+zEgNvP
xCtOWTY72GFmbRN9QsEf/xmjA8f0g9DLejXowHUhRfsJgKC1gJqXejgDGeobhhsS
5LI8YvLTK9O9fkv8ZFegyxpndYHEPDZ3IvZVyFff6IGlOTDL22sn3o6Lfy3QC05b
4SgD60hYESiZDykCNPU7qAnW7XIMeccvZy/w7/s8Jn35Q+deP0MSJxj0yhrqoNe5
c09gEv7IlvxLAHargseYRjTN/SbEOZpHDCWhuKxnF5vIKzoJ+LlZQKbHLQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJ0I440WPa5gO7jgM0nRROeg+DpnMB8GA1UdIwQY
MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt
MThiMWE5MzdhNTY3LzEvblFqampSWTlybUE3dU9BelNkRkU1NkQ0T21jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3
LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhzwAwQA
wRapAwQBwSnSAwQAw1DtMA0EAgACMAcDBQAqAil4MA0GCSqGSIb3DQEBCwUAA4IB
AQBggr8e0A+UWdrM+EZK4gWkSl6N+tApwii3uDQxI9T7htnlAia1KKlKxTZH5O7T
uwl4qQ2lMQyIaOyeIp1fOdqA9h3X9Rcm8L7FJaBuw6HFVST7ADO/YIpfHKVKCooR
Epf9Bk9AxcRT7lTozokF0Uji+IJiWMOU25+4clna2X5fn/93mJDRw/6U/XU5PX2C
RKbWQkItTAH6Rnf+6ZhWztSKUrhclpnQacR12bPPpivnjJTwlnT0f7A8SaAbeb9U
eYBdBuBaFhyP55ji+YojfAeZ7TIC755/SobjoulLtRhPQrvAUrMVBcC7THviKCI3
qWmvzRlYWUa0yp04i8j3cn3u
-----END CERTIFICATE-----
Generated at Sun May 19 21:44:08 2024 by rpki-client on console-ams.rpki-client.org