Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ysdND1ustZzaDsp0dR-QZ5DPLdY.roa
File: ysdND1ustZzaDsp0dR-QZ5DPLdY.roa (raw, json)
Hash identifier: tqcET9dCrJYnpDkN2rJWlYKEE/Doo7WJmCPmTaa+rVs=
Subject key identifier: CA:C7:4D:0F:5B:AC:B5:9C:DA:0E:CA:74:75:1F:90:67:90:CF:2D:D6
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018ED0FD07847CBA12731490BCE75AC6277D
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ysdND1ustZzaDsp0dR-QZ5DPLdY.roa
Signing time: Fri 12 Apr 2024 06:27:07 +0000
ROA not before: Fri 12 Apr 2024 06:27:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1241
IP address blocks: 46.12.0.0/16 maxlen: 24
46.246.128.0/17 maxlen: 24
62.1.0.0/16 maxlen: 24
77.49.0.0/16 maxlen: 24
79.103.0.0/16 maxlen: 24
130.43.0.0/17 maxlen: 24
188.4.0.0/16 maxlen: 24
193.92.0.0/16 maxlen: 24
194.219.0.0/16 maxlen: 24
195.74.224.0/19 maxlen: 24
212.54.192.0/19 maxlen: 24
212.251.0.0/17 maxlen: 24
213.16.128.0/17 maxlen: 24
2a02:2148::/29 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d0:fd:07:84:7c:ba:12:73:14:90:bc:e7:5a:c6:27:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Apr 12 06:27:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cac74d0f5bacb59cda0eca74751f906790cf2dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:90:83:9d:77:84:06:a7:c8:4f:a2:dd:14:
3e:6e:cd:e8:c3:12:1a:bc:4a:33:e9:4a:77:7f:d5:
4d:f7:d3:ba:ea:c7:6c:72:53:91:8d:cd:3f:1d:9d:
3d:4e:dc:d2:c9:4d:e7:bf:7d:a4:a8:aa:0d:dd:2d:
bc:72:32:49:6a:f0:11:d0:19:16:b3:8b:be:5d:87:
9a:a0:f1:a1:66:b9:04:eb:1d:e6:0c:28:e6:c4:ab:
d6:eb:03:55:8d:ba:3d:e4:a1:37:01:60:20:29:9c:
fd:14:61:6e:02:1b:d4:31:5a:cc:36:68:7a:55:37:
35:7f:ef:a5:9b:e2:a8:85:be:a0:1a:68:f8:43:ac:
9e:b7:50:5b:ed:93:88:7d:08:b4:cc:b0:77:dd:e8:
2f:ed:d7:f3:bf:54:5e:ad:ca:08:b2:30:fc:f0:57:
0f:e2:fb:12:e5:d9:a9:06:62:be:de:3d:98:ae:bb:
24:37:05:38:8e:25:17:79:ef:a3:27:14:e5:80:03:
7e:a6:5b:7d:f5:5f:e7:97:9f:68:c3:ff:cf:e4:c1:
19:b5:3b:0d:6d:7a:0e:f0:37:46:57:3c:1e:41:c7:
38:4c:21:81:38:c3:c7:8d:c4:d8:20:8a:7b:8c:ea:
31:03:65:2b:b7:df:c0:0a:cf:6b:b8:48:22:b1:78:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C7:4D:0F:5B:AC:B5:9C:DA:0E:CA:74:75:1F:90:67:90:CF:2D:D6
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ysdND1ustZzaDsp0dR-QZ5DPLdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.12.0.0/16
46.246.128.0/17
62.1.0.0/16
77.49.0.0/16
79.103.0.0/16
130.43.0.0/17
188.4.0.0/16
193.92.0.0/16
194.219.0.0/16
195.74.224.0/19
212.54.192.0/19
212.251.0.0/17
213.16.128.0/17
IPv6:
2a02:2148::/29
Signature Algorithm: sha256WithRSAEncryption
4e:1d:3d:49:ee:0b:4f:09:7f:eb:94:7d:47:c5:8e:e0:fa:75:
f2:8b:29:a3:8c:3f:52:69:7c:f8:d7:e3:48:1b:7a:4b:9e:14:
14:4b:cb:6e:41:63:b4:f8:d2:79:4b:35:b5:29:61:45:75:f8:
86:42:81:71:43:46:5d:8a:8c:5a:ee:56:0c:91:67:0c:94:e6:
b8:c5:f7:1c:9b:7a:97:49:c6:b6:f4:42:7f:71:d7:22:95:8a:
bf:97:2c:f5:68:b6:75:3f:53:50:5a:31:9e:0f:24:99:bf:d5:
95:96:75:95:d0:0f:8d:95:05:26:3b:e9:2c:e1:b3:ea:25:e2:
0a:6b:3b:37:aa:d9:d1:79:5a:42:75:d4:72:1d:ac:6b:12:e8:
a9:44:7c:7c:b2:2f:d6:1d:8d:74:37:06:a2:8a:54:7e:a0:d2:
2d:b0:f3:1b:a9:1b:ae:f4:c3:86:98:4c:29:c0:f6:82:1e:55:
8e:c6:6b:50:55:43:13:ea:18:fb:90:88:a3:f8:9b:19:95:0b:
ff:4c:de:02:87:c9:bc:27:9f:c9:39:6e:92:f2:4a:27:33:d4:
51:02:c6:33:65:36:ff:c1:79:29:bd:3b:6d:d8:9d:dd:1f:46:
01:70:c5:44:65:ee:bf:3d:14:60:c9:3f:4c:0d:a7:56:28:fb:
37:72:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:44 2024 by rpki-client on console-fra.rpki-client.org