Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/sHNUP-3-ENwlisf1w7l5Vq7VCaw.roa
File: sHNUP-3-ENwlisf1w7l5Vq7VCaw.roa (raw, json)
Hash identifier: KkyzS/sk3rdlpe7+2SmX3SK0Ra9WmfAQz8WmhYRsoEE=
Subject key identifier: B0:73:54:3F:ED:FE:10:DC:25:8A:C7:F5:C3:B9:79:56:AE:D5:09:AC
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E02CAF1B56DE33D817B83B743C722
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/sHNUP-3-ENwlisf1w7l5Vq7VCaw.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 46.161.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:02:ca:f1:b5:6d:e3:3d:81:7b:83:b7:43:c7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b073543fedfe10dc258ac7f5c3b97956aed509ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:8e:81:03:51:4b:5a:0e:1e:e8:be:88:75:
06:95:b3:58:e5:53:f6:f3:e1:bc:a3:91:6f:cf:c0:
40:f1:c0:c5:06:23:cd:0d:7b:69:1d:06:17:52:f0:
1f:06:45:76:55:00:dc:da:a3:28:74:da:aa:28:1c:
99:58:a9:d3:6d:a4:ef:77:6d:c3:00:3c:8d:d1:76:
55:59:37:b7:77:1e:77:c6:be:a9:8b:60:65:13:3a:
b1:8e:9e:53:f0:0c:6f:9d:8f:33:64:8e:fc:56:dc:
7e:69:f2:42:55:76:82:99:f4:f6:50:4a:b3:73:9d:
18:e9:62:94:a5:e4:e9:46:b6:d1:37:20:96:76:d0:
b4:b3:74:14:55:75:ee:06:1f:7a:1c:45:3f:cd:52:
64:eb:f0:1b:7c:f2:a6:93:5b:f6:48:6c:97:36:3f:
ec:c9:b5:52:5a:f7:18:87:56:48:83:90:9f:44:0e:
b4:00:f3:e9:4a:66:08:6a:ee:30:2b:00:d2:8e:e6:
6e:ea:b5:ef:05:1f:37:ca:ff:ab:6e:e7:ad:da:91:
72:1e:35:7b:1b:c4:ec:5b:90:99:f3:c4:cd:9d:7d:
ff:3c:76:57:a9:a3:fb:11:73:47:eb:93:1f:84:36:
46:6f:d4:29:6b:35:26:5b:b4:2b:3c:8a:26:b9:94:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:54:3F:ED:FE:10:DC:25:8A:C7:F5:C3:B9:79:56:AE:D5:09:AC
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/sHNUP-3-ENwlisf1w7l5Vq7VCaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.27.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b0:9b:85:eb:8f:a6:38:2e:8d:5b:18:e6:23:58:2e:6d:51:
87:c1:6e:37:d9:f3:2c:1d:01:26:5c:1c:a6:ad:09:93:ff:e4:
03:da:03:cc:de:ee:d7:af:b8:29:ba:69:79:70:ef:4a:8f:26:
79:7a:a0:9c:22:60:24:3b:e5:d6:b7:d6:07:ed:d8:98:99:f7:
f2:34:8d:2a:0f:75:1a:19:11:4d:0e:c8:4c:05:8e:a9:95:77:
98:fb:99:19:51:ed:62:06:66:b3:9c:e6:92:b9:0e:ee:ad:2e:
36:8d:f2:16:9e:88:ff:48:e7:0e:77:90:ce:77:20:b1:83:45:
bb:23:6d:91:57:c6:b9:fd:25:06:fe:2d:31:42:a4:6e:b3:ef:
53:90:d9:a9:67:00:bb:f0:e2:08:0e:ec:c7:90:25:a9:73:c4:
f5:01:6b:60:3d:c7:77:84:9c:60:5b:e1:3b:e2:10:dc:3e:63:
a3:d4:82:b9:c9:42:a3:db:b7:a0:14:bd:ab:2a:a0:40:8e:3d:
1e:08:70:9b:0e:2b:82:10:78:ad:a7:04:dc:a8:53:56:69:5a:
c8:00:5b:1c:0a:3e:5b:f1:94:c2:4f:4e:4f:ce:16:a5:2e:61:
10:5f:2a:57:b1:e0:90:5a:b3:03:b2:6b:92:a0:20:fc:7d:d3:
76:47:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:05:18 2024 by rpki-client on console-ams.rpki-client.org