Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mwjhL5HFtacyVGVbKcI7bmas5yU.roa
File: mwjhL5HFtacyVGVbKcI7bmas5yU.roa (raw, json)
Hash identifier: LaMHrF/LZ7s+HKxG2dFzWGjhVDG5NxT2dGU6xMcM2jA=
Subject key identifier: 9B:08:E1:2F:91:C5:B5:A7:32:54:65:5B:29:C2:3B:6E:66:AC:E7:25
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CF0663A9AD5FF12300F36379C645AA748
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mwjhL5HFtacyVGVbKcI7bmas5yU.roa
Signing time: Tue 09 Jan 2024 22:44:40 +0000
ROA not before: Tue 09 Jan 2024 22:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f0:66:3a:9a:d5:ff:12:30:0f:36:37:9c:64:5a:a7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 9 22:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b08e12f91c5b5a73254655b29c23b6e66ace725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:08:4e:24:e0:b2:df:c3:9e:85:44:a9:ad:
f2:3d:53:6d:c1:56:22:88:e1:89:43:2b:78:7e:3a:
d5:42:73:10:6c:b3:8a:15:ca:a0:58:98:63:9a:fb:
b3:f5:a2:fc:30:7a:6e:57:3a:5d:ef:9f:97:99:6a:
df:16:f0:5d:f2:d7:c4:82:2c:01:30:3a:46:a7:42:
90:f9:d7:36:6a:2b:50:31:40:30:8f:a1:1c:bc:75:
0b:e9:4a:ac:0b:bc:6c:9d:cd:22:cd:45:23:a3:97:
75:78:86:61:f9:b5:f4:eb:1f:c6:7a:cb:08:1a:e4:
30:57:fb:9d:44:5a:b5:26:f5:17:c6:32:9f:8c:00:
cd:5d:91:7f:d6:df:b2:98:a7:bd:20:5f:ec:42:31:
e9:15:05:61:6a:41:dc:d3:6d:1a:c5:78:79:76:32:
76:1f:5e:05:37:f7:ec:14:48:53:60:52:b1:91:0e:
43:38:84:32:17:bf:ff:b9:c1:03:50:c8:0b:45:88:
84:3a:c3:88:01:01:1d:a6:c6:75:eb:92:87:c0:42:
31:18:3c:38:42:a3:a7:e6:b7:67:5d:21:81:c4:31:
59:33:46:fe:24:c4:8b:27:94:ba:cf:32:9c:13:99:
d4:15:0a:3d:32:de:3d:71:19:c7:d7:b3:a2:e0:97:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:E1:2F:91:C5:B5:A7:32:54:65:5B:29:C2:3B:6E:66:AC:E7:25
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mwjhL5HFtacyVGVbKcI7bmas5yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
46.37.118.0/24
46.37.126.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:45:0f:38:38:02:fc:8f:86:70:61:01:11:4e:d7:8d:b4:51:
29:2e:03:73:c8:5c:24:f5:4b:7f:d2:eb:7b:28:db:eb:9b:0d:
63:6f:f0:da:b2:56:44:8f:15:4e:79:46:58:c9:48:e4:bf:94:
8f:cf:87:2b:e9:94:dc:93:af:17:cb:70:64:d6:9c:f8:8c:04:
08:43:78:18:a2:40:bd:04:37:69:01:97:cf:37:fc:b8:40:52:
07:ad:1f:54:22:3e:53:78:55:fc:cb:66:53:52:bf:7f:cf:ae:
f4:d5:6d:6c:d9:14:d2:47:d8:ad:e5:2e:f4:6a:be:fc:85:a9:
c1:72:1a:23:76:90:6b:d1:75:fe:83:86:ea:e1:d8:17:a0:88:
57:f8:63:c6:c2:66:ba:89:4a:74:3b:25:8b:a0:02:2a:5a:bf:
37:28:bf:c1:bf:31:c5:e2:ca:99:c3:bb:3d:6e:58:8f:19:d9:
e7:c5:78:4f:4d:3f:44:b7:94:fd:29:72:6b:e7:db:f1:04:02:
6f:ae:1f:1c:71:f8:88:53:55:e2:4f:d0:ce:f8:4c:d0:f5:49:
8c:c4:5d:02:da:36:0c:78:61:23:66:58:67:e2:5b:a2:09:67:
86:14:eb:62:21:59:b2:e9:f0:5c:01:2d:85:be:5d:9d:d5:e1:
3e:c4:a5:6b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYzwZjqa1f8SMA82N5xkWqdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwMTA5MjI0NDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjA4ZTEyZjkxYzViNWE3MzI1NDY1NWIyOWMyM2I2ZTY2YWNlNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAIITiTgst/DnoVEqa3yPVNtwVYi
iOGJQyt4fjrVQnMQbLOKFcqgWJhjmvuz9aL8MHpuVzpd75+XmWrfFvBd8tfEgiwB
MDpGp0KQ+dc2aitQMUAwj6EcvHUL6UqsC7xsnc0izUUjo5d1eIZh+bX06x/GessI
GuQwV/udRFq1JvUXxjKfjADNXZF/1t+ymKe9IF/sQjHpFQVhakHc020axXh5djJ2
H14FN/fsFEhTYFKxkQ5DOIQyF7//ucEDUMgLRYiEOsOIAQEdpsZ165KHwEIxGDw4
QqOn5rdnXSGBxDFZM0b+JMSLJ5S6zzKcE5nUFQo9Mt49cRnH17Oi4JcR4wIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFJsI4S+RxbWnMlRlWynCO25mrOclMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvbXdqaEw1SEZ0YWN5VkdWYktjSTdibWFzNXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQALiViMAwD
BAIuJWQDBAAuJWYwDAMEAC4laQMEAC4lagMEAC4lbQMEAC4ldgMEAC4lfgMEALlc
LjANBgkqhkiG9w0BAQsFAAOCAQEAuEUPODgC/I+GcGEBEU7XjbRRKS4Dc8hcJPVL
f9Lreyjb65sNY2/w2rJWRI8VTnlGWMlI5L+Uj8+HK+mU3JOvF8twZNac+IwECEN4
GKJAvQQ3aQGXzzf8uEBSB60fVCI+U3hV/MtmU1K/f8+u9NVtbNkU0kfYreUu9Gq+
/IWpwXIaI3aQa9F1/oOG6uHYF6CIV/hjxsJmuolKdDsli6ACKlq/Nyi/wb8xxeLK
mcO7PW5YjxnZ58V4T00/RLeU/Slya+fb8QQCb64fHHH4iFNV4k/QzvhM0PVJjMRd
Ato2DHhhI2ZYZ+JboglnhhTrYiFZsunwXAEthb5dndXhPsSlaw==
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:50:26 2024 by rpki-client on console-ams.rpki-client.org