Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sk0niOO7Dky9hL1fZQQILhq7Nv4.roa
File: sk0niOO7Dky9hL1fZQQILhq7Nv4.roa (raw, json)
Hash identifier: b59YQ6YgL9sazCaRVJMUIDy71Te+bZqB69wY2Y7VpLA=
Subject key identifier: B2:4D:27:88:E3:BB:0E:4C:BD:84:BD:5F:65:04:08:2E:1A:BB:36:FE
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7B5F82202BF0BEC3E8EF756A1FA4
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sk0niOO7Dky9hL1fZQQILhq7Nv4.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58727
IP address blocks: 46.243.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7b:5f:82:20:2b:f0:be:c3:e8:ef:75:6a:1f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24d2788e3bb0e4cbd84bd5f6504082e1abb36fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:32:f2:f1:7f:83:07:57:cb:e3:54:85:07:
3a:f9:a9:1e:ed:39:64:81:ed:b9:45:62:1a:1d:26:
fa:ba:3d:df:a7:d1:41:5a:1a:3b:94:f5:2b:82:bc:
3f:ee:e9:d6:55:dd:ab:07:e5:59:29:eb:45:b0:fd:
ae:34:aa:c6:00:17:ff:31:da:c8:b8:eb:b7:c3:c8:
47:a3:ee:c1:b2:11:5b:51:06:e9:7c:3c:40:7e:03:
87:b4:7c:eb:4d:75:2e:4e:a4:6b:2d:b8:00:7e:4e:
b8:f3:27:8f:59:6f:e3:c9:b7:a7:11:f1:98:57:51:
43:65:01:cc:60:d3:18:c2:13:ad:b7:75:35:bc:52:
4f:12:4a:fe:a8:b0:18:5f:ad:28:82:ee:d5:30:17:
e6:04:1d:2e:1f:a8:35:8d:4c:d5:f8:a9:3a:4c:41:
c8:d7:d8:ef:16:49:4c:ea:e0:bf:f9:6c:0b:4a:82:
77:ba:c6:79:15:36:30:31:28:18:62:47:66:13:92:
6e:6d:4d:6c:44:4c:9b:f0:dd:cc:78:a0:23:ed:54:
d4:42:df:96:ae:c5:75:4e:7d:21:9f:dc:27:ba:46:
1e:a0:1d:30:d2:d1:d8:58:8f:d6:98:50:f1:c3:5c:
ba:08:31:8c:5c:2c:ad:1b:14:d9:24:6f:50:f8:33:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4D:27:88:E3:BB:0E:4C:BD:84:BD:5F:65:04:08:2E:1A:BB:36:FE
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sk0niOO7Dky9hL1fZQQILhq7Nv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.137.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4a:16:89:fd:ea:2e:cd:94:86:83:e9:f5:48:90:24:6a:7f:
88:69:96:4b:a0:56:eb:72:d2:aa:56:bb:a3:a9:cd:31:fc:a5:
16:33:25:a5:07:27:19:48:4f:d4:cb:79:0c:bd:ab:d1:f3:02:
93:6b:79:07:79:df:21:3b:a2:5b:e1:7e:7c:85:0b:bc:c5:e0:
26:0c:e0:6f:4a:f5:1c:e0:19:86:e1:f3:81:a2:f7:a2:46:11:
9b:49:63:14:c8:ad:3c:9b:04:df:91:c6:50:62:e2:4f:11:29:
5c:c3:04:23:59:4a:73:64:0d:fc:c0:7c:6d:11:39:c4:52:71:
7e:8a:96:66:08:33:30:e2:e4:1f:56:f7:11:31:81:5b:ca:25:
38:1a:f8:7b:05:52:53:d3:f5:bd:22:86:85:1f:8e:fe:4d:be:
d4:c3:db:90:d4:6b:4b:54:b9:ea:8b:e8:13:ed:96:a1:91:49:
4a:5d:82:03:bb:c5:fd:31:d9:9f:69:f3:87:41:1d:a4:15:14:
d4:83:06:cd:c3:c6:1a:8c:2a:75:84:6c:e4:84:11:20:cc:27:
58:52:c5:57:03:5b:4e:32:78:7a:a4:cc:15:59:2f:10:7f:e4:
44:98:29:50:e6:b9:7b:f5:be:c0:69:b7:fa:3b:97:89:9d:e2:
76:9c:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:31:40 2024 by rpki-client on console-ams.rpki-client.org