Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/d2AQ3l_bs9Fyhv8WHOV-5bJ326w.roa
File: d2AQ3l_bs9Fyhv8WHOV-5bJ326w.roa (raw, json)
Hash identifier: WDeyxX+YSqMX4bpsv4YRs9nGPVShr/aU8HX41yvN8B8=
Subject key identifier: 77:60:10:DE:5F:DB:B3:D1:72:86:FF:16:1C:E5:7E:E5:B2:77:DB:AC
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 018CC5DCEE23B6A9D58AA41E853E0BA6271F
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/d2AQ3l_bs9Fyhv8WHOV-5bJ326w.roa
Signing time: Mon 01 Jan 2024 16:30:39 +0000
ROA not before: Mon 01 Jan 2024 16:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60128
IP address blocks: 46.236.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ee:23:b6:a9:d5:8a:a4:1e:85:3e:0b:a6:27:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 1 16:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=776010de5fdbb3d17286ff161ce57ee5b277dbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a0:29:f8:a1:aa:b5:f0:62:b0:7d:70:55:65:
b4:16:15:34:38:72:95:be:1b:1e:47:21:87:1e:f2:
4d:95:fc:1a:5a:28:85:5c:4e:9a:b0:26:b9:9a:89:
79:7c:4a:fd:0d:d4:02:1d:1d:0c:ca:1b:58:b6:5e:
9e:42:41:21:04:ae:81:6c:9e:7f:46:64:f8:a2:c5:
59:c0:09:ca:2d:46:18:07:c6:f1:e3:89:a0:2f:ad:
28:eb:25:b7:f7:e5:b1:7d:fe:bb:6a:99:34:d9:a5:
1a:24:08:aa:5a:eb:45:1b:3b:7b:2e:d0:65:78:fe:
58:1e:33:b7:6b:3c:99:2f:31:3a:17:45:01:61:4f:
57:1e:d6:78:c5:ae:ac:81:d6:ed:31:8c:84:52:2a:
7a:ab:fe:01:05:3f:78:99:48:dd:96:a8:a1:10:76:
bd:99:ec:b9:07:07:c6:40:bf:7f:12:56:c1:c0:c9:
2e:d8:5e:af:d5:c4:ef:82:bd:75:a4:6a:26:a5:6e:
ea:0d:e7:4a:38:1f:ac:12:39:fb:3a:0b:ad:b4:18:
f1:8d:60:2c:fa:3e:a5:9d:98:b1:c1:34:b7:75:f3:
51:d5:c0:52:03:f3:f2:7f:ae:9d:20:7a:b4:fb:58:
7b:63:2b:02:39:ba:b4:1c:12:f1:d3:b6:8c:c3:dc:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:60:10:DE:5F:DB:B3:D1:72:86:FF:16:1C:E5:7E:E5:B2:77:DB:AC
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/d2AQ3l_bs9Fyhv8WHOV-5bJ326w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f1:19:ec:cd:d7:a4:da:2f:8e:f0:0b:e9:c1:6e:c4:68:1f:
3c:ed:ab:32:89:68:2d:9d:0e:61:73:07:9d:2d:ae:c2:a3:8b:
2e:23:d6:ad:14:24:4c:19:20:4c:d8:0c:d1:ea:bb:7d:75:55:
75:f8:3b:49:f6:36:2d:de:0c:b8:70:f7:64:82:c9:73:f8:b8:
5d:50:cf:f3:61:72:a7:f2:8b:67:d8:4e:5b:0c:e4:9f:ff:43:
b2:3d:0a:66:e7:fe:c0:3d:10:a4:9c:ea:7f:81:67:de:55:c9:
2d:64:1f:c3:fa:c2:72:03:8f:7e:07:13:be:e9:3a:8e:f8:2b:
e8:e6:08:2c:01:53:39:d8:12:35:0c:22:ec:e1:3a:00:c3:d1:
ea:3f:90:98:ad:c9:39:0c:12:9c:a7:85:72:85:d9:b9:4c:21:
28:d9:6b:38:4c:58:3e:40:7f:3c:b6:2c:3b:dd:c3:81:99:05:
80:8d:fa:53:2e:0d:b9:32:cf:ed:0e:dc:93:b8:7e:40:36:68:
52:78:05:06:cc:1c:50:90:16:69:c8:53:5c:46:99:14:fe:8f:
59:e6:9b:29:1a:ad:50:2a:18:f3:6b:79:69:e4:35:61:e2:0b:
4a:52:74:31:1e:bf:6a:dd:e8:3e:1f:a0:50:17:41:31:f9:05:
58:50:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:39:13 2024 by rpki-client on console-fra.rpki-client.org