Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/sWPliBTo9K9nPi5SGtdRowNcY9o.roa
File: sWPliBTo9K9nPi5SGtdRowNcY9o.roa (raw, json)
Hash identifier: OhhyCCwKuwE6O6UnokF6WfreQlcQxKrdaDxX3+DFw60=
Subject key identifier: B1:63:E5:88:14:E8:F4:AF:67:3E:2E:52:1A:D7:51:A3:03:5C:63:DA
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 018CC2DB13BC0C5DDFDDF0F74788A3B8CE41
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/sWPliBTo9K9nPi5SGtdRowNcY9o.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60501
IP address blocks: 46.149.102.0/24 maxlen: 24
2a10:2400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:13:bc:0c:5d:df:dd:f0:f7:47:88:a3:b8:ce:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b163e58814e8f4af673e2e521ad751a3035c63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:47:49:30:d1:40:09:43:e7:46:37:11:65:
e4:31:e5:56:05:21:5f:e2:07:1d:26:6a:c2:ca:9b:
8f:4b:1b:d3:5e:7c:06:74:cb:a6:4d:f1:cd:b3:8d:
12:bf:9d:cc:8a:4f:7b:36:f7:43:6f:81:d0:00:1e:
72:dd:ba:a5:8a:b3:57:fd:9f:e9:60:ba:cb:70:f5:
d4:f0:52:0d:3c:80:49:29:d3:c0:d4:9a:62:6c:c8:
90:34:b8:7d:62:80:3d:75:b2:ee:27:9f:d7:81:d7:
a4:64:3f:93:df:11:d4:c1:37:82:77:6c:8f:80:1d:
c0:fd:a5:08:d8:95:db:0b:7f:0e:64:96:ce:06:00:
4e:2e:5a:03:57:ef:02:18:0e:0a:1f:e6:82:7f:b1:
d6:d3:b3:3f:1a:d5:54:77:42:d1:e0:9e:bc:d1:bc:
fe:ac:c3:8a:4c:02:a1:4d:89:00:f9:f0:a2:2c:e6:
a3:bc:33:2b:df:b8:7e:21:1a:62:55:a5:82:6b:32:
e1:9f:c5:2f:ae:14:e5:30:a5:0e:3d:5a:91:0b:84:
63:3e:0b:e1:28:17:07:ab:81:67:c8:67:ce:65:8d:
cc:4d:0a:1d:0f:19:6f:66:18:22:e8:1f:c9:be:8e:
ac:26:04:f3:b4:4c:0e:6a:2d:c3:75:e2:c9:a6:f3:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:E5:88:14:E8:F4:AF:67:3E:2E:52:1A:D7:51:A3:03:5C:63:DA
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/sWPliBTo9K9nPi5SGtdRowNcY9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.102.0/24
IPv6:
2a10:2400::/29
Signature Algorithm: sha256WithRSAEncryption
ce:3b:ba:24:eb:ff:a5:bb:cc:7f:4a:6c:29:98:43:e6:bb:b8:
dd:06:20:51:a4:b0:28:75:cd:3a:16:56:c4:ad:1c:09:2f:77:
8a:e8:86:ba:a4:a4:c4:fa:53:00:cf:99:f7:94:05:84:4e:3d:
da:4f:8f:6d:af:5f:65:bd:91:6b:e5:86:20:95:24:b5:3c:9a:
df:29:1b:8c:7b:3c:2f:e0:ca:2b:0e:dd:f6:80:62:41:06:1d:
c5:22:96:f8:d4:e2:b9:19:d8:1d:4e:bc:8c:12:72:85:24:aa:
da:22:3a:6b:9a:77:05:d8:8d:8a:2e:47:bb:fc:24:7c:f7:fd:
fc:3d:79:2f:d9:8e:62:76:69:57:14:53:b8:44:89:a5:72:7c:
a0:fe:0a:8c:fe:f7:99:29:28:82:8c:c0:7f:d2:ba:70:f0:45:
2d:1d:ce:95:c0:48:97:70:41:56:b5:0a:85:f8:aa:f6:c4:3e:
b6:2f:50:4a:de:8f:f1:fc:67:85:58:4a:f1:a4:32:54:f0:cf:
3f:77:76:98:28:d7:88:2c:da:8e:25:7e:86:ae:6e:40:ec:2f:
e2:0e:e4:00:c3:84:ec:b3:34:5e:dd:eb:74:a1:5a:66:a6:db:
95:4d:27:54:a8:b2:35:88:d2:00:b3:36:d9:aa:44:21:35:1c:
3a:33:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:08:42 2024 by rpki-client on console-ams.rpki-client.org