Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/Hc00QB9ZFYtwEkk5NnXx9IepCB0.roa
File: Hc00QB9ZFYtwEkk5NnXx9IepCB0.roa (raw, json)
Hash identifier: V8Y2fxm3AU34LGpPMsbDZ2y0Pf+EVVpyEaf/Ez+ICuY=
Subject key identifier: 1D:CD:34:40:1F:59:15:8B:70:12:49:39:36:75:F1:F4:87:A9:08:1D
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 018CC3B730FE41A83FF84398EA2369902761
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/Hc00QB9ZFYtwEkk5NnXx9IepCB0.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 212.46.57.0/24 maxlen: 24
2a12:fc7:ffef::/48 maxlen: 48
2a12:fc0::/48 maxlen: 48
2a12:fc0:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:fe:41:a8:3f:f8:43:98:ea:23:69:90:27:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dcd34401f59158b701249393675f1f487a9081d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:d0:b6:cd:92:47:62:72:56:bc:37:05:9f:
22:1f:c7:9d:4e:a1:c9:89:c1:c0:00:e4:82:13:19:
6d:59:d0:20:a0:4e:0b:2c:c1:2b:4d:5d:91:56:69:
6b:b0:c7:db:60:a8:96:75:df:2a:e5:0c:6a:68:5a:
6e:2e:11:62:9c:3a:f5:08:e2:f6:aa:e8:13:bf:90:
76:ad:08:82:58:d3:68:d0:9d:36:d5:0e:f5:94:c4:
eb:6f:47:ce:f1:ca:a5:9f:15:ef:40:c2:b9:c1:a7:
c6:bf:65:5d:8f:e1:3a:b7:05:cb:4e:4c:58:86:7e:
27:50:7d:05:78:8f:66:34:10:e9:d6:9c:52:60:26:
aa:35:f1:39:74:39:94:9b:f6:43:a2:64:cd:a8:59:
cd:59:b9:30:2a:91:82:f3:78:da:74:d6:ee:01:ca:
7c:e1:0f:d0:90:1d:2d:82:b9:6c:8e:5c:6b:e3:d9:
ec:d9:b7:7c:ee:e7:4f:cb:17:48:b4:2b:40:ce:8f:
17:30:a3:b1:56:a4:44:e2:a9:fa:fc:14:09:70:e9:
b0:75:90:5a:a3:5f:8a:1e:a0:96:1a:eb:05:1d:23:
56:93:4f:e5:15:96:00:12:b3:38:71:03:c4:f1:20:
18:31:eb:be:24:d9:e5:87:53:0c:30:51:89:5d:be:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:34:40:1F:59:15:8B:70:12:49:39:36:75:F1:F4:87:A9:08:1D
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/Hc00QB9ZFYtwEkk5NnXx9IepCB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.57.0/24
IPv6:
2a12:fc0::/48
2a12:fc0:20::/48
2a12:fc7:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
09:2d:28:00:e9:6c:06:50:26:77:01:f2:6c:ed:f8:18:81:3c:
44:32:54:46:75:af:10:f7:ad:b4:bc:97:65:3d:fb:2d:27:53:
43:05:de:aa:8a:8e:40:75:52:57:40:b6:e0:aa:7b:0c:38:65:
49:29:1a:e1:2d:f5:6d:09:67:e5:6a:df:e5:43:39:6a:5d:5f:
ce:4d:b2:97:e7:8c:bc:18:a6:1a:b2:fc:3d:0e:f0:80:7d:23:
ba:4a:ee:61:78:73:dc:cd:81:9f:fb:81:1c:fe:6c:28:11:b9:
46:04:ee:95:b9:04:f8:61:de:50:72:ce:de:03:06:7f:15:02:
47:90:bc:f8:c4:03:01:81:1a:01:c0:4a:d6:a3:08:77:0c:90:
39:22:21:bc:81:74:8d:86:a8:67:66:81:58:48:4e:51:5a:77:
d4:21:70:2e:fd:f0:b8:44:4d:ef:bb:78:f4:86:c4:c8:bc:2b:
f5:09:a7:3f:d4:69:ee:ba:eb:ed:ef:ef:f7:8a:79:03:ef:30:
3e:9f:90:1f:0b:05:03:f4:29:2b:4b:50:9a:ca:89:48:45:89:
58:fe:c7:19:af:41:6f:0a:92:bc:fb:82:2c:a0:c6:aa:f7:67:
ce:5c:6f:0c:45:3d:e3:1a:7c:0e:56:b1:b6:97:9c:1a:81:ee:
47:98:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:18:18 2024 by rpki-client on console-ams.rpki-client.org