Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/WYmc4ofvPBdLIdSnzeKOzCQ9vms.roa
File: WYmc4ofvPBdLIdSnzeKOzCQ9vms.roa (raw, json)
Hash identifier: rkxcpTNcGFXMIrMwowkINkN39mhljemsNdGg+QQtOm4=
Subject key identifier: 59:89:9C:E2:87:EF:3C:17:4B:21:D4:A7:CD:E2:8E:CC:24:3D:BE:6B
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 018CC5DBE3E293A8EAA8EF6B775387BA6CFE
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/WYmc4ofvPBdLIdSnzeKOzCQ9vms.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31059
IP address blocks: 46.227.160.0/23 maxlen: 23
46.227.162.0/24 maxlen: 24
46.227.164.0/24 maxlen: 24
46.227.166.0/24 maxlen: 24
46.227.167.0/24 maxlen: 24
193.242.176.0/22 maxlen: 22
95.143.4.0/24 maxlen: 24
95.143.0.0/21 maxlen: 24
95.143.10.0/24 maxlen: 24
95.143.11.0/24 maxlen: 24
95.143.5.0/24 maxlen: 24
95.143.8.0/23 maxlen: 23
95.143.12.0/24 maxlen: 24
95.143.13.0/24 maxlen: 24
95.143.14.0/23 maxlen: 23
185.72.224.0/24 maxlen: 24
185.72.225.0/24 maxlen: 24
185.72.226.0/24 maxlen: 24
185.72.227.0/24 maxlen: 24
2a02:1328:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e3:e2:93:a8:ea:a8:ef:6b:77:53:87:ba:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59899ce287ef3c174b21d4a7cde28ecc243dbe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:77:16:f1:93:c4:99:62:84:6a:06:4f:94:
95:5b:71:c6:44:27:a4:3a:7c:9b:e7:4f:c2:d3:86:
f8:55:45:95:a2:4d:6e:5f:1f:0b:58:7e:44:0e:d8:
ff:a0:c8:86:30:24:fe:0e:c8:11:4d:f4:3f:68:16:
9e:ab:49:0b:31:80:07:e5:c0:c4:ec:ed:2d:50:25:
a9:a8:ac:e7:6d:81:9d:aa:72:f3:36:11:01:cf:dc:
5d:72:08:89:4f:1c:ba:98:98:c6:71:90:bd:fb:bf:
c3:31:e5:12:3a:ea:9b:31:85:83:a1:f3:95:02:7a:
56:22:0a:b5:37:be:5d:9c:23:2b:e3:fa:07:73:6f:
1f:6e:dd:53:55:c6:4f:50:74:c4:20:5f:b8:0a:60:
e3:14:17:92:1f:05:be:d1:f1:dc:30:28:dc:04:e4:
7f:38:56:b2:c3:ba:4c:f5:c9:70:a2:8f:00:d6:89:
57:47:0c:08:f8:74:44:f0:a9:3a:50:c2:19:52:0d:
b5:3e:2c:b7:73:2d:4b:39:83:4c:96:ac:a0:1a:ff:
5a:7f:7c:ed:ee:94:4d:ee:ab:92:d8:45:c5:09:2c:
57:51:d6:dc:34:c5:27:f8:29:8f:92:98:eb:14:78:
20:eb:55:09:02:66:84:b5:d8:c4:4d:09:f3:f7:35:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:9C:E2:87:EF:3C:17:4B:21:D4:A7:CD:E2:8E:CC:24:3D:BE:6B
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/WYmc4ofvPBdLIdSnzeKOzCQ9vms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.160.0-46.227.162.255
46.227.164.0/24
46.227.166.0/23
95.143.0.0/20
185.72.224.0/22
193.242.176.0/22
IPv6:
2a02:1328:2::/48
Signature Algorithm: sha256WithRSAEncryption
41:94:20:54:99:c2:75:0e:f4:4c:2c:45:be:38:53:63:06:5e:
bd:f0:b4:9a:7f:54:86:b6:da:aa:e7:3c:33:08:57:93:c7:33:
62:16:55:0f:e5:53:78:df:9d:ec:d7:c7:1f:c7:5a:73:b1:6a:
d8:c6:f9:2c:c3:ae:41:4b:9c:cc:8b:18:9b:7c:ea:77:e7:d8:
c7:2e:2e:e0:33:0c:f0:d3:4e:64:47:38:02:b6:6b:ed:00:1a:
f7:30:de:6c:9f:5c:6e:fe:41:ba:78:63:84:d4:2d:5f:11:79:
bf:5c:db:bb:a2:c0:cd:6d:04:bb:98:9e:41:88:5d:5a:9e:3a:
50:74:e0:84:51:88:18:fd:72:c6:90:42:0d:ce:12:3b:93:73:
81:30:6f:98:2c:7d:34:68:a3:35:53:24:84:f7:30:91:5b:f7:
c6:79:55:20:38:95:83:14:bf:0a:d7:13:e6:61:f2:98:65:fc:
d2:0d:8a:53:4c:e2:a7:b9:63:ff:57:b3:55:60:9e:54:6d:79:
92:e1:d9:ec:16:0a:ab:34:0e:9b:f9:e4:ca:ea:ef:2b:b2:5a:
d9:3c:ec:ff:55:4c:56:4d:1c:8f:d5:ae:e1:bb:bf:48:83:a5:
f9:61:f5:ed:f2:6c:28:36:3c:ee:4a:89:fc:17:d5:27:d9:67:
c8:0c:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:40:28 2024 by rpki-client on console-fra.rpki-client.org