Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/ssL1RoJOz2Qb-7El_AlLIN3pWPw.roa
File: ssL1RoJOz2Qb-7El_AlLIN3pWPw.roa (raw, json)
Hash identifier: mPaLq09CR/LVKkeKMXRfkdMJLXZToBZAW+NbSWVYCOU=
Subject key identifier: B2:C2:F5:46:82:4E:CF:64:1B:FB:B1:25:FC:09:4B:20:DD:E9:58:FC
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 018CD40A35E134F06A8843811BC118B6D474
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/ssL1RoJOz2Qb-7El_AlLIN3pWPw.roa
Signing time: Thu 04 Jan 2024 10:34:48 +0000
ROA not before: Thu 04 Jan 2024 10:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43171
IP address blocks: 46.175.224.0/20 maxlen: 20
185.59.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:0a:35:e1:34:f0:6a:88:43:81:1b:c1:18:b6:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jan 4 10:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c2f546824ecf641bfbb125fc094b20dde958fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:72:50:b5:c5:89:83:f9:71:82:a8:3b:b7:1d:
5e:b5:e5:e8:d5:e0:21:d0:03:c1:b9:e0:76:d5:17:
22:4a:89:a1:68:b3:a3:46:cc:56:87:69:52:fb:f9:
4f:45:b2:61:b6:ff:4c:d7:01:f0:23:39:0d:ec:a1:
0a:77:18:aa:ac:2b:f4:1d:7b:bd:79:a3:af:4d:3e:
16:f5:1c:d6:5b:ab:80:a2:e1:eb:6d:20:22:be:21:
f9:e3:5f:3e:f8:d9:0e:d8:8c:2d:bc:37:4f:6c:b2:
6d:dd:e9:ea:c1:1e:8e:3e:31:66:50:3a:ad:f7:c5:
f8:dc:e5:05:dd:7f:64:08:fd:3f:f1:c1:43:e8:42:
42:06:d2:6d:0c:23:12:fc:2d:88:34:5a:ff:5a:01:
bc:61:a3:86:1c:42:3c:8b:7b:c0:a0:14:c6:3a:d1:
9a:5d:cf:c8:5b:ba:74:c4:8a:cd:50:ff:18:a7:47:
bf:a9:b4:d1:e3:b5:d6:36:20:96:d3:6b:2a:65:41:
c8:54:26:8f:ee:af:47:b7:2d:fe:74:4e:b2:b2:fd:
1b:66:b7:d0:9f:84:7d:74:00:0b:4d:ac:e5:a6:1f:
42:89:54:42:f9:19:77:23:c8:12:7d:9f:50:c7:4e:
41:c8:0a:b4:da:01:5a:c9:da:1b:1f:41:9e:01:22:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:F5:46:82:4E:CF:64:1B:FB:B1:25:FC:09:4B:20:DD:E9:58:FC
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/ssL1RoJOz2Qb-7El_AlLIN3pWPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.224.0/20
185.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
81:0e:51:af:a2:f7:a1:87:77:b3:4a:a4:c2:25:2c:cc:9b:a7:
e0:86:cd:02:f4:e1:20:f6:9b:b3:3f:6a:4d:06:5f:15:e2:cf:
e2:c4:7a:db:6b:95:5c:9e:e8:65:b4:87:8a:7c:04:e1:d4:ff:
90:27:ef:17:86:1e:43:85:a7:d5:0f:25:87:66:cb:5b:8b:31:
b0:1b:7f:72:30:3e:02:7e:8a:29:a6:f8:53:73:b8:18:16:22:
6b:66:96:16:52:76:ea:09:c4:68:93:9b:10:e9:94:d2:45:f9:
74:ef:32:cf:3a:bf:52:ed:f5:d3:c3:eb:67:8b:1d:50:2f:5b:
6b:4d:fa:2b:9d:50:db:7e:db:89:be:ce:1b:54:0b:e0:fe:e2:
d8:e7:28:de:75:63:90:5f:17:4f:e6:02:ac:a8:74:37:ca:7b:
e0:e3:0d:5b:ca:39:f1:0a:37:1a:c9:45:c1:10:8d:87:df:56:
28:4b:c4:f9:f9:93:15:3d:15:62:3e:fc:c1:f4:45:4e:82:fe:
63:34:76:ad:e9:0b:9e:84:12:50:35:c5:da:2a:8b:8b:3a:aa:
6e:b3:14:f8:22:59:a3:5c:49:97:74:59:53:93:d9:2a:a9:80:
04:93:61:6a:dc:71:ec:21:70:14:2b:87:36:c7:b2:a8:94:67:
fa:ae:f9:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzUCjXhNPBqiEOBG8EYttR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1
NTc0NGYwHhcNMjQwMTA0MTAzNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmMyZjU0NjgyNGVjZjY0MWJmYmIxMjVmYzA5NGIyMGRkZTk1OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83JQtcWJg/lxgqg7tx1eteXo1eAh
0APBueB21RciSomhaLOjRsxWh2lS+/lPRbJhtv9M1wHwIzkN7KEKdxiqrCv0HXu9
eaOvTT4W9RzWW6uAouHrbSAiviH5418++NkO2IwtvDdPbLJt3enqwR6OPjFmUDqt
98X43OUF3X9kCP0/8cFD6EJCBtJtDCMS/C2INFr/WgG8YaOGHEI8i3vAoBTGOtGa
Xc/IW7p0xIrNUP8Yp0e/qbTR47XWNiCW02sqZUHIVCaP7q9Hty3+dE6ysv0bZrfQ
n4R9dAALTazlph9CiVRC+Rl3I8gSfZ9Qx05ByAq02gFaydobH0GeASK71QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLLC9UaCTs9kG/uxJfwJSyDd6Vj8MB8GA1UdIwQY
MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt
MTk0MmUwODlmMGIwLzEvc3NMMVJvSk96MlFiLTdFbF9BbExJTjNwV1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw
LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELq/gAwQC
uTtsMA0GCSqGSIb3DQEBCwUAA4IBAQCBDlGvovehh3ezSqTCJSzMm6fghs0C9OEg
9puzP2pNBl8V4s/ixHrba5VcnuhltIeKfATh1P+QJ+8Xhh5DhafVDyWHZstbizGw
G39yMD4CfooppvhTc7gYFiJrZpYWUnbqCcRok5sQ6ZTSRfl07zLPOr9S7fXTw+tn
ix1QL1trTfornVDbftuJvs4bVAvg/uLY5yjedWOQXxdP5gKsqHQ3ynvg4w1byjnx
CjcayUXBEI2H31YoS8T5+ZMVPRViPvzB9EVOgv5jNHat6QuehBJQNcXaKouLOqpu
sxT4IlmjXEmXdFlTk9kqqYAEk2Fq3HHsIXAUK4c2x7KolGf6rvl5
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:52:40 2024 by rpki-client on console-ams.rpki-client.org