Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/0fvD33GVSTPZ6TrPbkL-tbBze1o.roa
File: 0fvD33GVSTPZ6TrPbkL-tbBze1o.roa (raw, json)
Hash identifier: /5an193MjbuD4BgozFxVY8Nd01LpMPFJQ3MZCbMW7Ak=
Subject key identifier: D1:FB:C3:DF:71:95:49:33:D9:E9:3A:CF:6E:42:FE:B5:B0:73:7B:5A
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 018FED970178C3396FA39D22AB0F6D90F459
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/0fvD33GVSTPZ6TrPbkL-tbBze1o.roa
Signing time: Thu 06 Jun 2024 12:47:27 +0000
ROA not before: Thu 06 Jun 2024 12:47:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25106
IP address blocks: 46.56.40.0/21 maxlen: 21
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.56.0/22 maxlen: 24
46.56.60.0/23 maxlen: 24
46.56.60.0/24 maxlen: 24
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
46.216.0.0/17 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
46.216.152.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.192.0/21 maxlen: 21
46.216.246.0/24 maxlen: 24
134.17.0.0/20 maxlen: 24
134.17.0.0/23 maxlen: 23
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
134.17.24.0/21 maxlen: 21
134.17.24.0/22 maxlen: 22
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
134.17.64.0/20 maxlen: 20
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
134.17.96.0/19 maxlen: 19
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
134.17.208.0/20 maxlen: 24
134.17.208.0/22 maxlen: 24
134.17.224.0/20 maxlen: 24
176.60.0.0/18 maxlen: 24
176.60.4.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
176.60.44.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.176.0/23 maxlen: 23
176.60.184.0/22 maxlen: 24
176.60.192.0/18 maxlen: 24
176.60.192.0/20 maxlen: 20
176.60.208.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
178.168.144.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
178.168.168.0/21 maxlen: 24
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
178.168.242.0/23 maxlen: 23
178.168.253.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
185.20.114.0/23 maxlen: 23
2a02:bf0::/32 maxlen: 32
2a02:bf0::/48 maxlen: 48
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:25::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:100::/44 maxlen: 44
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:1003::/48 maxlen: 48
2a02:bf0:3000::/36 maxlen: 44
2a02:bf0:4000::/36 maxlen: 44
2a02:bf0:5000::/36 maxlen: 44
2a02:bf0:6000::/36 maxlen: 44
2a02:bf0:7000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:97:01:78:c3:39:6f:a3:9d:22:ab:0f:6d:90:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jun 6 12:47:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1fbc3df71954933d9e93acf6e42feb5b0737b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:e7:e8:c5:2b:be:58:a1:ee:c4:3b:95:ab:
f1:24:52:91:df:4a:2f:f7:0c:30:6c:15:13:18:c9:
62:81:cf:23:e1:f5:d1:a3:18:a9:7a:33:00:39:57:
c8:4f:94:80:e5:da:21:df:28:d5:0b:c3:f9:f8:6b:
80:13:1d:39:b7:05:5d:da:58:d8:3e:4d:0c:d0:27:
8f:77:22:38:1b:c2:b4:ed:e1:73:69:22:6f:61:ee:
92:04:1a:73:b9:1e:5f:f8:9b:25:0d:ea:99:37:97:
83:fe:6e:fd:fd:fa:6f:f9:e5:7e:e4:99:b0:06:0a:
7c:93:0f:7d:91:b8:aa:cb:bf:a1:43:95:bb:79:7b:
e4:4b:fb:23:f1:ed:39:32:03:0a:8d:0a:80:8d:6f:
5a:4b:d9:62:cf:0e:1f:9d:6f:0a:8c:42:36:53:57:
ce:b8:05:5e:5a:63:7f:fc:13:bb:c2:21:e8:ab:7d:
e0:63:4a:99:76:71:67:22:d9:f7:ed:4c:ac:6e:9b:
e8:b8:60:64:82:4b:be:d0:76:02:f0:b0:9f:d7:ac:
d6:5e:fd:44:5f:e2:cd:e2:e6:6f:e4:e6:14:ad:23:
15:b4:f7:c8:92:82:b5:2f:26:5b:86:71:d0:ee:6e:
25:29:14:5f:6b:b9:31:8b:eb:9c:4b:67:5c:bb:63:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:C3:DF:71:95:49:33:D9:E9:3A:CF:6E:42:FE:B5:B0:73:7B:5A
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/0fvD33GVSTPZ6TrPbkL-tbBze1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
25:df:7d:75:a8:0c:b6:41:8c:51:25:92:dd:b2:ab:44:a4:31:
c6:50:54:d0:07:ad:8f:9e:66:69:03:83:1b:8e:65:6d:bf:e7:
bb:41:ce:15:83:89:96:13:98:b4:05:24:62:e7:4e:65:11:f9:
63:69:1b:99:89:20:70:98:c5:c6:70:aa:18:19:ca:e5:2c:55:
df:11:ef:b4:f0:30:a1:08:fd:2b:a5:8d:17:13:de:86:9c:04:
5f:12:de:2a:f2:a8:9f:ae:8c:be:12:b7:39:09:de:7d:5d:ab:
ef:9a:21:7f:de:f3:e7:83:0a:f8:79:b3:af:b8:f7:fd:be:c6:
d9:e1:7c:0c:18:c6:ce:b0:8c:c0:11:d8:8d:33:9f:f9:4e:93:
11:0c:ef:1a:41:21:0a:69:44:0c:74:f6:8f:2a:04:86:a4:5e:
06:f3:c5:ef:fe:59:21:9b:1b:56:3b:b2:3f:b6:38:47:4a:fe:
d0:19:d6:e8:91:d9:f6:aa:b9:81:9d:20:23:52:8e:d5:33:1b:
ab:49:d6:cc:7e:94:55:b9:9e:6e:30:7f:09:5a:50:fd:0e:e2:
49:cd:58:a2:a7:fa:61:9c:a0:11:a7:af:47:fe:2d:da:76:27:
00:37:78:94:27:a5:c3:7e:28:dd:6f:b8:54:d6:b8:c9:e6:fa:
df:47:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:19:40 2024 by rpki-client on console.sobornost.net