Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/DlYq05wytPP026tbGQaRWPlCYbI.roa
File: DlYq05wytPP026tbGQaRWPlCYbI.roa (raw, json)
Hash identifier: BSSoaJix6Z5XPsODi88fEh5BOANuu1KrzHVQ2eeS1Io=
Subject key identifier: 0E:56:2A:D3:9C:32:B4:F3:F4:DB:AB:5B:19:06:91:58:F9:42:61:B2
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 018F7CBF5886ECF17B8BBE9D7EE25E93B220
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/DlYq05wytPP026tbGQaRWPlCYbI.roa
Signing time: Wed 15 May 2024 14:54:25 +0000
ROA not before: Wed 15 May 2024 14:54:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205613
IP address blocks: 46.17.218.0/24 maxlen: 24
46.17.219.0/24 maxlen: 24
46.17.220.0/24 maxlen: 24
46.17.221.0/24 maxlen: 24
46.17.222.0/24 maxlen: 24
46.17.223.0/24 maxlen: 24
83.229.16.0/24 maxlen: 24
91.224.0.0/24 maxlen: 24
91.224.1.0/24 maxlen: 24
185.107.20.0/24 maxlen: 24
185.107.21.0/24 maxlen: 24
185.107.22.0/24 maxlen: 24
185.107.23.0/24 maxlen: 24
193.200.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:bf:58:86:ec:f1:7b:8b:be:9d:7e:e2:5e:93:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: May 15 14:54:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e562ad39c32b4f3f4dbab5b19069158f94261b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:12:7f:ac:fd:42:77:b4:ba:06:4a:be:a7:ee:
02:45:bf:11:30:af:6b:d0:3e:cd:34:f1:56:cf:b3:
22:c5:28:26:25:12:69:11:b7:3b:0b:b3:1f:d7:46:
8d:a3:0b:0a:9c:67:5b:84:f6:8d:da:7e:a1:2e:63:
53:f9:71:13:43:d9:e9:ec:18:10:c2:2d:ff:c9:e9:
50:32:df:79:81:89:bd:91:97:17:70:a5:be:c6:b9:
1d:56:fd:48:c6:e3:ce:be:a9:7e:be:3f:6d:2c:6a:
53:4c:94:4e:a6:fb:c9:58:e5:09:9d:38:4b:17:e2:
f8:4e:1c:be:79:8e:50:1c:c7:7e:b4:8e:3d:20:d5:
ca:b4:d0:ea:36:9c:ec:cd:b7:7f:2f:db:0a:3e:34:
a3:d5:7b:af:90:2d:9c:06:c3:74:2e:87:23:06:59:
9e:44:22:ab:7f:44:74:96:ee:de:95:e9:a8:16:bd:
9f:56:3a:ea:9a:62:4d:06:74:37:75:b3:cd:b5:b4:
80:d8:21:f9:12:eb:bc:e1:e6:a2:b9:97:ab:b3:4e:
84:1e:40:05:59:11:7b:bf:5c:35:86:cd:fd:6b:5a:
0e:4d:ee:4f:7b:b2:7d:46:bc:03:cb:70:01:e1:d4:
e0:1b:24:d6:22:99:a8:c5:19:25:d1:99:a7:a3:74:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:2A:D3:9C:32:B4:F3:F4:DB:AB:5B:19:06:91:58:F9:42:61:B2
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/DlYq05wytPP026tbGQaRWPlCYbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.218.0-46.17.223.255
83.229.16.0/24
91.224.0.0/23
185.107.20.0/22
193.200.154.0/24
Signature Algorithm: sha256WithRSAEncryption
75:86:01:8a:1c:59:6f:45:04:39:b8:08:ed:06:e6:22:39:46:
4e:d8:63:21:5a:9a:04:78:5c:5e:78:06:fc:62:8a:11:47:24:
e8:f7:1a:f3:05:6c:88:ed:51:50:c9:78:2d:d9:b2:e2:fd:16:
c6:eb:11:7f:1a:cb:fb:bb:be:2e:cf:50:d4:a8:21:4a:6c:26:
c3:b0:a4:93:77:2e:84:9d:42:5b:29:3f:f2:e3:a6:92:99:91:
d1:a8:6a:d3:89:b6:05:96:1a:78:12:4e:19:3d:a9:20:2a:8e:
79:61:d8:71:c4:ee:ff:a2:6d:ab:0a:3c:a9:15:50:cc:2f:f9:
aa:10:93:6f:f4:5e:ac:b9:09:5f:52:96:86:fe:01:0b:6e:4b:
52:36:e5:72:00:c1:c8:6b:91:ef:6f:82:8d:0e:1e:57:c7:a6:
c2:a9:fd:48:fe:48:e4:de:4c:ea:95:46:dd:37:1c:5e:46:95:
14:2a:e9:d8:b2:e7:2f:6d:ab:fd:4d:e2:7d:c6:56:d2:fa:21:
a0:ff:9e:22:8a:a9:31:62:c0:c6:19:6a:8f:6b:71:8b:49:0d:
11:6b:0a:19:41:e3:68:7d:09:ba:09:53:bf:bb:75:a2:3f:97:
8b:19:75:d0:53:da:ac:77:62:73:eb:c2:9d:4a:e8:fc:30:95:
32:5f:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:58:50 2024 by rpki-client on console-ams.rpki-client.org