Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/n0T_0PfIzsdR0D5xf24tAV4VGtM.roa
File: n0T_0PfIzsdR0D5xf24tAV4VGtM.roa (raw, json)
Hash identifier: bVHwE2nlzgxRFKt1/JIGvtiAHWQVNZIa4B0JqZd0jEU=
Subject key identifier: 9F:44:FF:D0:F7:C8:CE:C7:51:D0:3E:71:7F:6E:2D:01:5E:15:1A:D3
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 018CC2DADC9998A2761A097913434542B793
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/n0T_0PfIzsdR0D5xf24tAV4VGtM.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60198
IP address blocks: 46.17.216.0/24 maxlen: 24
2a02:4f63::/32 maxlen: 32
2a02:4f61::/32 maxlen: 32
2a02:4f64::/32 maxlen: 32
2a02:4f67::/32 maxlen: 32
2a02:4f60::/32 maxlen: 32
2a02:4f66::/32 maxlen: 32
2a02:4f65::/32 maxlen: 32
2a02:4f62::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dc:99:98:a2:76:1a:09:79:13:43:45:42:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f44ffd0f7c8cec751d03e717f6e2d015e151ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:d1:30:b1:b8:76:2d:f5:28:45:d8:87:7a:
fb:43:a8:8b:ab:6f:9b:73:14:08:33:ec:16:bc:97:
b8:c2:b1:ad:88:f4:99:31:d2:87:f4:26:a4:eb:73:
9e:ca:bf:86:f5:c6:7c:a3:8b:07:79:91:94:7d:07:
0c:6c:49:56:df:b3:32:e1:02:6e:a2:bb:71:aa:21:
7c:bf:e0:d3:85:66:8a:d9:2a:c7:d5:2b:a6:7c:50:
d1:50:69:6e:95:21:ee:0f:f1:bf:ae:d6:c3:74:db:
83:9e:a2:c9:7b:27:14:db:81:85:f9:6d:ac:58:d3:
b4:1f:11:c1:95:4c:18:4f:57:54:a4:7b:4e:fc:42:
94:14:5b:aa:37:29:a1:e7:a0:24:14:cf:24:29:0d:
0d:86:68:10:20:45:6f:92:40:a2:60:c4:a2:44:09:
b6:20:09:a1:a6:be:3d:37:fa:bd:e9:5e:19:61:da:
8f:bb:86:b8:d8:e2:69:7f:1a:74:b7:e8:60:68:5e:
3d:b7:07:7c:0c:c3:b4:6f:b7:1f:80:2a:50:9b:da:
e0:5e:2c:f6:01:69:67:a5:2d:53:97:f1:2c:5a:b6:
7a:8b:76:95:41:28:4c:f6:ce:ae:74:fc:b2:65:24:
dd:15:ca:f4:9f:d6:73:85:60:4f:cf:bd:c8:10:76:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:FF:D0:F7:C8:CE:C7:51:D0:3E:71:7F:6E:2D:01:5E:15:1A:D3
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/n0T_0PfIzsdR0D5xf24tAV4VGtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.216.0/24
IPv6:
2a02:4f60::/29
Signature Algorithm: sha256WithRSAEncryption
1b:aa:4a:7a:04:b7:b9:e6:d2:e3:cc:0a:ef:4c:37:93:24:a8:
95:8e:23:f4:3f:26:74:c5:f9:ee:32:1e:5d:b1:2b:23:87:1b:
5a:94:99:b6:1d:4f:4c:a2:b4:ab:5a:1a:17:2b:7d:7f:35:0a:
d5:8f:86:40:b0:0c:a6:fc:0a:6b:d9:5b:e3:39:36:6e:e5:38:
b8:f8:47:67:d6:2a:9f:87:dd:f8:31:ff:17:87:71:33:86:a4:
06:9a:c1:47:bf:af:eb:bb:03:36:55:9d:94:4e:c1:ea:45:3d:
5d:18:96:95:12:d2:c4:11:cc:21:31:42:69:e3:1f:01:00:07:
f8:09:c6:7c:c4:ff:3b:30:f6:99:f1:bb:e3:43:5c:41:11:81:
f8:c1:48:58:94:fe:a1:ec:3d:24:61:01:d7:60:86:22:8e:43:
25:15:f4:e8:5b:8d:78:77:55:0a:00:bf:ae:c1:fe:b4:67:6a:
7e:4f:41:9f:5b:2b:fd:0f:03:90:ab:f9:7b:ca:14:13:61:cb:
80:c8:86:6f:84:f9:48:ad:01:95:db:6d:67:ce:62:d0:85:22:
c7:0c:37:ec:d8:31:ed:b8:18:36:8f:98:e2:c6:67:86:26:33:
4f:f9:d6:04:dd:e0:0b:c5:4c:78:73:c8:7b:7c:dc:5e:d7:b9:
a6:dd:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:57:33 2024 by rpki-client on console-fra.rpki-client.org