Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/27tYF5r4dTVHYcXhbqBaRMF6Ra0.roa
File: 27tYF5r4dTVHYcXhbqBaRMF6Ra0.roa (raw, json)
Hash identifier: TJUeuVhPe8a01nefxZi6HIUDn459oYAJrW7kX9fXKsM=
Subject key identifier: DB:BB:58:17:9A:F8:75:35:47:61:C5:E1:6E:A0:5A:44:C1:7A:45:AD
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 018CC94D96289B348771BF0B6F8C335F2FFA
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/27tYF5r4dTVHYcXhbqBaRMF6Ra0.roa
Signing time: Tue 02 Jan 2024 08:32:34 +0000
ROA not before: Tue 02 Jan 2024 08:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51975
IP address blocks: 46.151.208.0/22 maxlen: 22
46.151.212.0/22 maxlen: 22
185.79.248.0/23 maxlen: 23
185.79.250.0/23 maxlen: 23
2a05:78c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:96:28:9b:34:87:71:bf:0b:6f:8c:33:5f:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Jan 2 08:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbbb58179af875354761c5e16ea05a44c17a45ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:f9:a7:78:fe:ee:ef:1d:15:74:a2:a5:03:
97:7e:aa:73:b4:66:0d:47:79:e1:2e:5b:f5:6c:aa:
4f:55:09:5e:10:95:57:f0:ef:85:c1:70:29:29:aa:
dc:84:eb:09:1c:ee:a0:2a:ad:25:5c:3b:2b:8a:54:
74:a9:70:d3:52:1c:2c:dc:ee:e5:5a:ce:df:f5:8a:
26:8b:ef:c8:8e:33:a7:ba:80:cb:9f:c3:ec:d3:48:
e9:d3:2c:19:bd:d8:05:fb:44:2d:c2:e8:f1:69:fd:
cb:c0:da:6d:dd:e7:ba:4b:4f:10:a4:c6:9b:62:8d:
b9:d6:56:fc:c3:67:7f:02:d9:1a:d2:aa:18:88:65:
cf:e7:21:01:b7:e1:d2:b1:25:3f:7a:17:df:35:89:
14:10:51:91:9a:fa:cc:a9:1f:12:84:72:dc:74:cb:
e9:61:89:3c:5a:8d:03:30:86:77:44:4f:c1:5c:57:
96:55:87:03:9e:cf:ff:3c:c7:a6:da:1c:98:c7:3a:
62:ce:c4:c4:40:ed:44:f7:f0:66:17:b8:13:1a:0d:
8e:dd:92:2b:dd:5f:ba:78:ab:f5:b2:6e:33:7b:c5:
38:43:3e:db:50:98:3e:e6:52:01:4e:95:a4:a9:c6:
30:96:66:00:7c:c9:cd:f6:6c:a7:ec:ba:74:80:5b:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:58:17:9A:F8:75:35:47:61:C5:E1:6E:A0:5A:44:C1:7A:45:AD
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/27tYF5r4dTVHYcXhbqBaRMF6Ra0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.208.0/21
185.79.248.0/22
IPv6:
2a05:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:25:ec:11:fe:58:6c:db:f1:97:ca:d2:5f:cc:9d:bf:e6:87:
1e:89:e7:cf:73:c0:3d:90:ad:c2:ea:7c:4a:69:3e:b9:c0:22:
6a:e0:87:78:60:a7:58:9f:2f:6b:7e:7d:b0:3d:08:e0:55:1f:
eb:27:03:8c:85:6b:38:a4:c2:5f:3e:11:ce:d5:71:10:8f:41:
ac:5f:46:ad:7e:b8:b5:56:3c:68:bc:00:1c:00:13:63:d9:e5:
ba:e4:68:1a:9d:f7:e1:db:47:4f:d2:df:aa:ea:48:55:23:f2:
c9:82:fd:f2:07:b2:7b:f9:d2:4b:1d:69:c3:c7:0e:a4:a9:42:
ea:72:55:be:f9:57:d7:65:e5:9a:c4:24:18:6a:86:4a:63:97:
b8:8f:d7:f5:5b:86:42:a7:15:56:27:c7:4e:03:da:7b:11:c9:
02:a4:f5:41:03:d3:7f:bb:c3:e3:95:e1:ce:e3:10:de:50:3e:
f4:0a:b4:28:7f:63:54:53:0a:88:a9:9f:af:6d:10:62:bf:bb:
98:45:9f:f4:2e:8b:a3:a1:0e:79:f5:23:f3:a0:a6:e5:ec:60:
f7:16:57:49:42:62:81:29:c4:37:2e:d9:04:5c:d2:4a:24:77:
dc:4c:7a:f5:4e:7f:00:61:2e:17:05:17:1d:5e:1d:d5:2a:71:
7f:9d:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:11:00 2024 by rpki-client on console-fra.rpki-client.org