Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tBxBjV_mkV_JBOOQ-SUq6_HXMc0.roa
File: tBxBjV_mkV_JBOOQ-SUq6_HXMc0.roa (raw, json)
Hash identifier: at+yBa90AD7FIXRB5xqif20LXtl2Y5N9WcU7TiVWzI4=
Subject key identifier: B4:1C:41:8D:5F:E6:91:5F:C9:04:E3:90:F9:25:2A:EB:F1:D7:31:CD
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF1E3B35084F259586F2B5207C510
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tBxBjV_mkV_JBOOQ-SUq6_HXMc0.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 46.34.60.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f1:e3:b3:50:84:f2:59:58:6f:2b:52:07:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b41c418d5fe6915fc904e390f9252aebf1d731cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:73:22:2d:89:00:8a:10:9c:57:a2:7d:23:
af:e7:1b:57:53:b5:26:b2:21:a1:b3:e9:f8:c7:20:
ef:6d:a4:c8:b1:e1:ae:3a:62:27:03:90:49:2b:39:
0a:4b:9e:7a:4a:05:f4:46:3d:b7:19:90:3f:6b:cb:
92:26:d3:0f:b2:74:dc:dd:bf:ba:46:00:5d:ea:bc:
ef:c8:c0:fe:dd:78:97:b6:27:e9:fb:47:06:c2:2b:
9b:07:66:26:b7:47:d5:bb:ad:92:ab:a7:94:b8:09:
8a:29:21:05:7e:ac:c0:7c:28:a5:54:04:ea:04:9d:
23:ae:54:71:34:7a:b6:1d:44:a2:4d:e0:ec:90:fc:
65:64:70:0e:70:0a:78:64:62:ff:76:40:46:25:f8:
f8:55:59:f2:da:df:7c:e7:5b:e8:35:b2:e0:1d:f4:
5a:63:6f:85:f0:63:39:a6:94:5c:38:ef:97:e4:a7:
0a:a5:f5:1d:ad:03:fa:df:11:af:5b:b5:e6:4a:75:
43:a0:be:ac:dd:c0:be:9b:54:72:33:8f:99:14:be:
1f:40:76:fd:a5:14:07:86:41:6f:08:1e:30:cb:ed:
5c:c5:af:99:fb:7e:95:bd:77:67:f6:7a:7b:d9:5a:
f0:45:ae:15:03:3c:c9:02:ab:be:e6:41:eb:07:da:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:41:8D:5F:E6:91:5F:C9:04:E3:90:F9:25:2A:EB:F1:D7:31:CD
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tBxBjV_mkV_JBOOQ-SUq6_HXMc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:9a:f7:ec:2b:b7:8b:90:52:a4:cb:11:a4:c8:93:4e:82:07:
ef:e7:b9:e8:a5:95:c2:45:b3:30:76:48:d9:ef:f0:e3:14:d0:
c1:06:52:58:66:ca:dc:4b:65:e5:f8:90:d2:a6:94:49:34:4c:
c8:39:a9:d8:32:78:89:81:5f:14:5e:25:81:89:f8:21:21:f0:
de:e1:70:3c:da:3f:33:88:ba:d4:46:a0:33:7d:80:e5:b8:40:
75:c5:61:49:72:f8:f1:2a:86:3d:0c:6c:a9:b5:67:67:08:01:
24:33:7e:50:d8:fb:fb:63:52:dc:b2:ba:47:e6:95:9b:50:57:
87:7c:e8:32:38:eb:76:a2:92:da:71:fc:8e:91:5d:cc:df:d1:
c0:70:ae:c8:b5:25:db:e5:7d:92:32:ac:ab:1e:16:7c:78:e2:
6a:bb:b5:e7:ae:eb:44:4f:dc:12:c8:2c:0e:81:ca:9c:07:5c:
cd:a0:1a:ff:04:92:b5:ce:23:35:b6:ac:a9:2e:c8:4d:e6:b2:
71:ca:52:29:66:9a:52:31:f4:a5:2c:63:86:f3:b1:74:12:d1:
9b:e0:b1:d4:bf:3b:72:25:46:4b:3d:c4:e6:fa:ac:f8:cf:a7:
9d:8a:5f:0b:55:f3:d9:03:f5:01:50:d4:63:84:9b:f5:94:8d:
94:41:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:48:22 2024 by rpki-client on console-fra.rpki-client.org