Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/AHF4xp8qs5fddO-3swxFJzctflI.roa
File: AHF4xp8qs5fddO-3swxFJzctflI.roa (raw, json)
Hash identifier: VqM3oUqDHgZwClC3RTcbyA78v4+Ofi+oDPTPssqjOvQ=
Subject key identifier: 00:71:78:C6:9F:2A:B3:97:DD:74:EF:B7:B3:0C:45:27:37:2D:7E:52
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 018CC348A5F8ADC15F881151D5FA5F785F38
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/AHF4xp8qs5fddO-3swxFJzctflI.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198985
IP address blocks: 46.231.240.0/22 maxlen: 22
45.67.80.0/23 maxlen: 23
185.233.100.0/22 maxlen: 22
2a09:7340::/32 maxlen: 32
2a0c:e300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a5:f8:ad:c1:5f:88:11:51:d5:fa:5f:78:5f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=007178c69f2ab397dd74efb7b30c4527372d7e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:26:b0:f8:07:da:3e:76:b8:1b:87:75:42:
9b:78:ef:dc:ff:28:f6:3b:69:62:ae:d8:c9:e1:7a:
b5:1b:f9:45:49:24:c3:d6:0e:5c:a3:07:8b:6c:dd:
0e:af:6c:53:e6:3e:8a:83:63:45:8d:e2:d6:e9:38:
32:26:86:0f:d2:6d:d3:b2:38:c8:19:9c:2b:80:de:
07:4c:4a:3d:5f:6d:61:58:62:3f:f3:d6:63:26:ed:
95:f9:24:3d:4f:3d:cc:8c:0c:eb:83:59:40:66:a1:
89:ba:91:a1:01:e8:1f:77:a6:61:2e:e4:7e:30:99:
07:e3:cf:84:96:0a:53:b7:41:60:b1:df:1c:e1:1a:
c2:9f:2e:94:c6:e3:b9:54:76:13:0a:a4:bb:29:ca:
46:35:f2:1a:68:1b:a0:a6:7f:c7:64:73:c4:2c:58:
a6:f4:54:1d:b1:f4:e0:25:1c:48:58:05:73:6d:39:
01:d7:01:22:20:08:0d:a2:e8:e5:8f:c0:a1:6c:78:
84:6a:1b:ae:3b:47:83:2e:7d:7f:6d:59:9f:8c:62:
eb:b2:54:59:d7:50:f6:8e:da:83:cd:3d:e3:5f:bb:
da:1f:47:80:7e:2e:56:10:08:02:88:f1:83:06:fa:
e5:b1:e5:9f:a8:85:e8:45:63:78:de:2d:29:ae:62:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:78:C6:9F:2A:B3:97:DD:74:EF:B7:B3:0C:45:27:37:2D:7E:52
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/AHF4xp8qs5fddO-3swxFJzctflI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.80.0/23
46.231.240.0/22
185.233.100.0/22
IPv6:
2a09:7340::/32
2a0c:e300::/29
Signature Algorithm: sha256WithRSAEncryption
6d:90:82:3c:70:ba:c2:29:4b:51:5d:db:3e:6b:17:1f:24:3f:
fb:37:41:12:7d:94:6b:03:b9:86:9c:e0:d7:a3:24:bf:62:63:
08:98:f8:9c:14:a1:c7:bf:fd:1b:0a:82:2d:45:16:62:f3:a5:
47:79:1b:9f:fc:c1:61:bf:d4:be:16:db:37:e9:f2:26:e8:c1:
ad:94:8c:cb:fd:64:40:42:8d:15:7c:dc:14:25:91:be:03:fc:
95:4d:c2:c1:a1:60:50:a0:1e:5b:81:c9:23:e2:e5:7c:e4:1c:
a4:19:2c:6a:11:09:d0:16:24:52:58:2e:84:1a:b2:67:44:ef:
c0:aa:1d:18:52:08:86:b3:f8:d4:67:11:e3:13:3f:f2:02:8e:
a0:4e:ba:99:da:55:7c:ea:73:ad:16:eb:5c:ba:22:67:d1:b3:
28:3e:a2:07:15:3d:de:5c:87:0b:fd:0c:49:6b:44:9a:38:7b:
ef:fc:de:5b:31:e3:7d:11:48:54:be:8a:18:2b:96:34:8f:bc:
ac:29:df:cc:0f:aa:c2:f7:e2:75:04:7c:e5:97:8f:03:c3:ff:
b2:32:20:83:dd:cf:74:fd:3f:ad:25:69:b5:d2:88:b2:b9:89:
f2:67:75:96:5f:14:3a:02:04:b3:3d:29:fa:29:10:ce:bf:68:
52:f3:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:02:08 2024 by rpki-client on console-ams.rpki-client.org