Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/a0Ye_X9mxKJuR6eNMFVJAs1X7P0.roa
File: a0Ye_X9mxKJuR6eNMFVJAs1X7P0.roa (raw, json)
Hash identifier: umVknx3uqKbrbkHCEFa3xjN1W9hMhp2RuBKJjY+8xS4=
Subject key identifier: 6B:46:1E:FD:7F:66:C4:A2:6E:47:A7:8D:30:55:49:02:CD:57:EC:FD
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CD3D25E5E9CE026943E0D6F636522FC00
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/a0Ye_X9mxKJuR6eNMFVJAs1X7P0.roa
Signing time: Thu 04 Jan 2024 09:33:48 +0000
ROA not before: Thu 04 Jan 2024 09:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 46.34.48.0/24 maxlen: 24
46.34.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:d2:5e:5e:9c:e0:26:94:3e:0d:6f:63:65:22:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 4 09:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b461efd7f66c4a26e47a78d30554902cd57ecfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:45:a3:13:cd:c6:8f:03:47:f5:e4:7b:ac:
95:bd:12:ff:a3:c6:02:aa:72:76:2a:fe:8e:12:2f:
c7:11:23:f3:68:88:65:e7:6c:c5:53:df:db:7c:a0:
07:2d:c3:c7:ce:6f:fa:f3:fa:1c:d8:df:d9:fc:0a:
9c:e2:c6:c3:d5:de:98:85:96:7f:5c:e5:51:f6:40:
2d:47:de:42:02:fa:36:f1:84:02:f7:6b:6f:04:40:
58:6b:fa:b7:9c:e4:23:38:93:6f:9c:68:93:65:6d:
fb:36:9d:96:30:9b:4d:13:2e:fd:d9:d9:74:b9:9b:
89:6d:d6:69:57:fe:61:a5:85:9f:cb:35:91:99:88:
e1:9d:32:33:87:20:b9:64:4c:ef:45:53:24:eb:40:
be:e8:b9:67:9d:5a:6e:b6:54:05:e2:9d:af:a1:ba:
00:2b:0d:11:98:24:4a:ef:7e:90:5f:9f:c3:ff:5b:
a8:23:58:ba:62:42:19:14:a7:9e:c0:7a:0b:05:7d:
59:4f:94:d2:64:50:b8:8a:65:9f:05:6a:55:f9:15:
d9:a8:0c:a1:a9:c9:e5:bb:8d:d2:b6:d8:b2:25:92:
a9:06:41:5d:6d:30:5a:e3:d3:46:97:af:69:ae:7e:
7c:8f:4e:38:4f:cd:77:45:6e:57:49:d4:84:0e:02:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:1E:FD:7F:66:C4:A2:6E:47:A7:8D:30:55:49:02:CD:57:EC:FD
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/a0Ye_X9mxKJuR6eNMFVJAs1X7P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.48.0/24
46.34.59.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b8:a6:63:97:7b:80:69:29:22:3c:fb:5f:5d:83:bf:36:e4:
c3:a9:8c:6c:6d:71:b7:ed:8a:23:a3:30:14:58:43:42:f6:e5:
35:df:47:d6:c6:ea:d2:69:86:8a:9a:68:54:8a:01:44:33:03:
af:05:83:d4:13:92:ee:5a:30:07:4f:53:ef:6e:e9:d5:9e:8b:
19:eb:6f:c2:12:0d:c8:da:03:53:66:6f:ed:dd:1d:ca:b4:96:
9d:61:21:37:90:1c:c7:d3:96:d6:8c:55:b0:10:9d:39:fd:8d:
74:72:b5:85:6d:2a:4f:2b:a2:3f:6f:3d:43:01:03:13:a2:f6:
92:b0:2f:b5:c1:43:9b:92:61:0e:e7:51:0b:e3:e4:cc:3c:a5:
2e:4c:d6:43:57:50:42:57:6a:b2:6b:d2:38:c8:31:31:0a:b3:
a5:ad:6d:50:3b:f5:09:62:1c:78:35:7b:de:9e:b0:10:29:9e:
d0:e3:8a:2e:b9:81:66:37:57:b6:91:d2:65:a1:e7:ba:50:2d:
90:e9:85:54:d6:75:70:52:df:05:92:f5:28:87:c9:2c:51:56:
8b:5d:4d:d0:48:1c:5d:48:f5:4e:47:bb:98:a0:50:34:ec:db:
b6:cb:6f:d5:3b:86:f4:40:2b:ba:dd:60:f9:2f:17:46:24:d8:
7b:1d:53:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzT0l5enOAmlD4Nb2NlIvwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjQwMTA0MDkzMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjQ2MWVmZDdmNjZjNGEyNmU0N2E3OGQzMDU1NDkwMmNkNTdlY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rtFoxPNxo8DR/Xke6yVvRL/o8YC
qnJ2Kv6OEi/HESPzaIhl52zFU9/bfKAHLcPHzm/68/oc2N/Z/Aqc4sbD1d6YhZZ/
XOVR9kAtR95CAvo28YQC92tvBEBYa/q3nOQjOJNvnGiTZW37Np2WMJtNEy792dl0
uZuJbdZpV/5hpYWfyzWRmYjhnTIzhyC5ZEzvRVMk60C+6LlnnVputlQF4p2voboA
Kw0RmCRK736QX5/D/1uoI1i6YkIZFKeewHoLBX1ZT5TSZFC4imWfBWpV+RXZqAyh
qcnlu43SttiyJZKpBkFdbTBa49NGl69prn58j044T813RW5XSdSEDgLtpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGtGHv1/ZsSibkenjTBVSQLNV+z9MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvYTBZZV9YOW14S0p1UjZlTk1GVkpBczFYN1AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiIwAwQA
LiI7MA0GCSqGSIb3DQEBCwUAA4IBAQCAuKZjl3uAaSkiPPtfXYO/NuTDqYxsbXG3
7YojozAUWENC9uU130fWxurSaYaKmmhUigFEMwOvBYPUE5LuWjAHT1PvbunVnosZ
62/CEg3I2gNTZm/t3R3KtJadYSE3kBzH05bWjFWwEJ05/Y10crWFbSpPK6I/bz1D
AQMTovaSsC+1wUObkmEO51EL4+TMPKUuTNZDV1BCV2qya9I4yDExCrOlrW1QO/UJ
Yhx4NXvenrAQKZ7Q44ouuYFmN1e2kdJloee6UC2Q6YVU1nVwUt8FkvUoh8ksUVaL
XU3QSBxdSPVOR7uYoFA07Nu2y2/VO4b0QCu63WD5LxdGJNh7HVMe
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:49 2024 by rpki-client on console-fra.rpki-client.org