Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6ELMTZ_82I0xaPkQ8LgQXqP3Ovg.roa
File: 6ELMTZ_82I0xaPkQ8LgQXqP3Ovg.roa (raw, json)
Hash identifier: phse0eb84DmbsI2Ap5hipPWWlR7yVxxwjE4JrdxgQU4=
Subject key identifier: E8:42:CC:4D:9F:FC:D8:8D:31:68:F9:10:F0:B8:10:5E:A3:F7:3A:F8
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF47542D1BE810D73FA0DDEB9A651
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6ELMTZ_82I0xaPkQ8LgQXqP3Ovg.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 46.34.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f4:75:42:d1:be:81:0d:73:fa:0d:de:b9:a6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e842cc4d9ffcd88d3168f910f0b8105ea3f73af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:7c:e7:39:92:ef:89:18:9a:2f:dc:08:ca:
b5:35:a5:ca:8b:db:77:c8:1d:52:ab:45:c6:03:9c:
1b:43:e3:94:22:e3:13:0b:fc:ca:b3:6f:76:d8:92:
ee:18:fb:ea:d0:1e:fc:33:1b:8e:1a:75:90:d7:89:
52:eb:8d:e7:b7:bb:4f:69:c7:be:5b:6e:83:b1:da:
1e:7c:2e:ac:c0:bf:49:e0:76:88:78:cc:3d:62:08:
97:bb:44:bb:3e:e2:1b:22:70:ed:20:5d:fe:2d:03:
dc:e9:43:46:5e:7c:76:ed:1d:78:2b:d3:ba:3b:eb:
a3:2e:a2:de:6f:62:4b:57:c1:5e:2c:37:e2:d5:b3:
b6:ab:5e:cd:e6:c9:fb:7a:d7:89:d4:2e:42:f2:4e:
a4:53:2f:44:7d:88:d7:3e:3e:34:0a:52:6b:fc:db:
e5:16:a7:dd:32:bc:88:eb:35:0d:fc:0c:04:d0:8f:
18:86:0a:e3:ec:46:ab:6b:75:d9:5c:90:7f:52:52:
9a:13:f5:74:40:59:3d:3f:5f:98:a1:c1:37:bb:50:
08:2f:cf:42:f4:28:24:d2:0c:66:14:39:71:31:98:
be:d6:7e:f0:ed:ca:20:84:1a:94:c3:db:a1:1b:0d:
fc:40:b4:70:cf:06:ac:1a:b0:ea:ff:e5:d7:a6:d0:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:CC:4D:9F:FC:D8:8D:31:68:F9:10:F0:B8:10:5E:A3:F7:3A:F8
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6ELMTZ_82I0xaPkQ8LgQXqP3Ovg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4e:ff:00:e5:97:02:fa:6b:9f:a7:b8:5b:c8:3e:f0:62:fe:
17:11:6b:14:f9:24:e7:bd:bc:d4:b3:df:e2:b2:f5:0d:6e:0b:
f8:09:8d:b8:75:1d:9a:5e:b6:a0:9e:7d:08:63:43:37:cf:bc:
ca:85:35:0d:0d:40:ce:a8:aa:30:c3:95:47:b0:72:ea:62:ca:
9c:21:d4:2b:ff:e5:2a:e7:b8:e8:21:5e:9b:a7:76:47:10:98:
a3:30:70:40:4c:42:bf:bf:9f:48:05:47:10:98:9c:54:47:fd:
5b:d5:07:9c:51:d7:b9:77:5c:83:38:92:e5:44:d6:11:79:45:
d5:d6:ef:94:5b:9c:10:9d:2a:c9:7a:6c:c7:5c:27:5e:66:aa:
02:78:db:ba:68:47:a8:ae:ea:59:6c:84:d1:c4:39:c3:8e:9e:
7d:40:e4:6f:bc:f8:4b:bf:05:53:70:03:9e:ef:3d:03:33:bf:
8c:e4:79:97:bb:98:12:e9:6e:da:5d:8d:3a:e2:47:07:eb:64:
ad:bb:46:26:a2:b9:b3:4b:61:9a:42:47:f1:68:93:7e:fa:5d:
24:03:7f:4a:89:b3:94:a1:71:25:7e:4c:3d:ef:5c:a4:77:3e:
51:44:ce:6c:40:28:64:1c:a3:9f:7f:2f:29:bf:04:e1:aa:c8:
36:51:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:16 2024 by rpki-client on console-ams.rpki-client.org