Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/dMmLPY9gjqvhILa--ITPd6ZeA_Y.roa
File: dMmLPY9gjqvhILa--ITPd6ZeA_Y.roa (raw, json)
Hash identifier: 9RydQf0NAofNmlKs9MS8l2ZqyHGrynnUoMbtBe89Dbs=
Subject key identifier: 74:C9:8B:3D:8F:60:8E:AB:E1:20:B6:BE:F8:84:CF:77:A6:5E:03:F6
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 019054BE57A9F395F47005C75914B374C2DC
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/dMmLPY9gjqvhILa--ITPd6ZeA_Y.roa
Signing time: Wed 26 Jun 2024 13:31:18 +0000
ROA not before: Wed 26 Jun 2024 13:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.179.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:be:57:a9:f3:95:f4:70:05:c7:59:14:b3:74:c2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jun 26 13:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74c98b3d8f608eabe120b6bef884cf77a65e03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:84:42:0a:88:dc:d7:98:06:1c:a7:2f:68:
9e:8e:e8:47:ce:e0:a7:b7:27:73:48:bd:2c:76:2b:
5c:18:e9:83:3f:03:2e:2f:8d:10:c1:4a:95:a0:67:
83:5f:34:8c:92:3e:d5:bc:b3:ca:27:c5:cc:e4:9d:
24:38:97:03:da:c8:bf:a1:7f:c7:05:2b:c7:81:54:
cf:31:7a:1b:c0:2b:72:3e:6d:44:36:2b:d0:49:41:
23:1b:da:f6:51:49:a0:be:fa:2f:67:05:26:7d:6f:
8a:a6:a6:9f:13:9a:6a:52:4e:5a:98:0b:cf:2d:0f:
85:1d:bb:75:4d:a2:be:6f:18:b8:97:93:f3:04:db:
97:c3:a3:d9:c6:53:ba:e2:7f:c7:73:bb:04:e1:d5:
fb:5b:ca:9b:6a:7f:01:3e:53:af:9d:bb:76:1c:df:
f0:8b:45:69:b5:c5:96:1d:14:ba:e4:00:06:78:8f:
1d:b3:a4:b4:5b:34:3d:17:e7:95:52:62:2e:95:df:
76:b5:b9:e9:79:eb:be:38:a7:ed:f1:f8:a8:76:4c:
85:ea:48:de:6d:44:83:3a:b4:69:81:cb:4c:0c:e6:
88:1e:c8:9d:f5:93:f4:5b:8a:6e:19:f5:49:42:79:
60:71:07:22:c0:fa:09:aa:09:35:68:6a:da:44:36:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C9:8B:3D:8F:60:8E:AB:E1:20:B6:BE:F8:84:CF:77:A6:5E:03:F6
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/dMmLPY9gjqvhILa--ITPd6ZeA_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.179.0/24
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
8d:47:44:f8:e9:44:50:1a:bf:e7:d6:a8:ab:fb:0d:9a:06:6d:
3a:ff:09:e4:4d:fa:41:55:21:fc:38:10:00:1e:5a:37:66:75:
28:d1:ea:84:8b:6d:01:86:02:17:e3:60:00:cf:9a:ae:4a:c4:
ca:55:8d:af:de:70:fd:cf:b3:44:80:ee:df:38:48:1e:17:1b:
fd:43:48:d2:5d:ff:13:12:04:6f:4c:60:23:73:a7:4a:07:73:
65:5b:17:2c:b2:6e:c5:35:c0:bc:4d:46:9a:64:c1:7e:d5:f5:
f7:cc:e6:52:9c:6c:d5:77:95:7f:44:63:bc:ea:94:82:c8:65:
4c:7c:c7:d7:74:8b:fb:20:2b:f4:81:76:33:06:f9:3e:5a:7e:
c0:07:3a:f1:48:93:6c:41:78:56:e2:23:91:39:84:bd:d9:79:
6a:20:2a:ad:83:be:9d:a7:3f:67:c9:eb:f1:8c:6f:08:3c:50:
e6:9f:34:ac:75:ba:bd:ae:41:06:12:ec:6d:32:ed:9a:03:d4:
7b:47:4b:6e:2b:f4:2b:ec:d7:ff:db:eb:60:f1:b7:da:0e:9e:
27:95:14:eb:d8:e5:1c:40:18:be:83:45:ca:ab:7a:33:9e:be:
20:25:cb:fd:7f:b4:54:fb:4d:28:5e:38:cc:5b:ce:1c:5a:94:
30:de:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----