Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/E6y_rSi4MiKCGmIEiQh6iVvGh_4.roa
File: E6y_rSi4MiKCGmIEiQh6iVvGh_4.roa (raw, json)
Hash identifier: fIi3zY58SP0Irc/EEvjCMy5ASEbvU0QY/Vv7iioCKzg=
Subject key identifier: 13:AC:BF:AD:28:B8:32:22:82:1A:62:04:89:08:7A:89:5B:C6:87:FE
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 018DC3B2F5BEDA0FC1DE0F1B571F6BB8C137
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/E6y_rSi4MiKCGmIEiQh6iVvGh_4.roa
Signing time: Mon 19 Feb 2024 23:28:21 +0000
ROA not before: Mon 19 Feb 2024 23:28:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29686
IP address blocks: 46.243.72.0/24 maxlen: 24
46.243.73.0/24 maxlen: 24
46.243.74.0/23 maxlen: 24
2a09:e080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:b2:f5:be:da:0f:c1:de:0f:1b:57:1f:6b:b8:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Feb 19 23:28:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13acbfad28b83222821a620489087a895bc687fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:51:cf:a5:65:30:8b:18:56:f2:1f:68:ae:
a7:54:7c:ca:56:3c:cc:0c:81:79:93:24:c4:ac:51:
f8:f7:1b:a2:d9:01:fe:14:5d:da:7c:18:1b:78:32:
f9:db:c2:a9:00:aa:03:c2:8e:3e:70:40:fa:25:cb:
db:df:9e:42:ff:26:1b:30:8c:5b:ec:c1:eb:bc:8a:
1d:8b:fd:21:de:d5:47:36:d9:51:2f:c2:87:43:ba:
f7:f7:c3:78:9e:75:43:83:b3:d0:67:b1:cd:5b:b4:
0a:85:f3:fc:b4:e4:7a:8b:db:f7:e1:6a:3f:de:ec:
89:58:85:67:ea:e3:a0:77:a1:78:9e:d6:0b:44:a4:
ad:60:21:ed:ee:1e:9c:4a:41:fb:87:cf:f3:cb:51:
f1:a4:dc:3a:88:e6:fc:ef:5b:80:39:81:ef:68:14:
4c:91:eb:70:18:1e:8c:f3:b2:6b:90:eb:a6:22:c5:
f3:e1:ce:de:a1:e0:b8:78:0e:85:98:1a:6c:b0:48:
77:2c:3c:60:b4:6c:92:f5:59:2f:de:7d:ff:c3:53:
c9:fc:1c:80:65:ff:dc:2a:d8:9c:1a:be:20:fa:eb:
de:45:d9:7a:c8:e9:10:f2:de:b5:87:7b:f4:1c:89:
e3:7f:80:8d:1d:03:30:2a:b8:55:05:dd:26:42:82:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:BF:AD:28:B8:32:22:82:1A:62:04:89:08:7A:89:5B:C6:87:FE
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/E6y_rSi4MiKCGmIEiQh6iVvGh_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.72.0/22
IPv6:
2a09:e080::/29
Signature Algorithm: sha256WithRSAEncryption
70:21:b9:c9:99:a4:47:20:35:db:23:50:06:06:b6:87:5c:f3:
33:87:2d:7e:16:d0:16:ef:2c:e6:59:e1:4d:e3:23:00:91:a8:
57:f8:01:68:77:e6:b1:2b:7b:f6:6a:f6:84:4d:c8:4e:5a:89:
83:d9:b1:17:ce:42:0e:a7:fe:09:9b:e6:67:6b:65:7f:ae:0a:
87:1c:b2:5b:50:19:38:cc:37:ab:93:b0:86:38:06:62:b7:43:
cb:39:76:a7:f8:8d:ec:4a:a1:48:e9:b0:6b:61:c2:8f:6a:24:
62:c2:28:b1:f6:c3:dc:d7:f7:2d:3f:36:c7:9e:ec:b7:70:b8:
07:49:ff:70:fd:dc:15:9e:0d:90:8e:28:92:ed:4a:41:78:dc:
a6:fe:c1:2a:9d:1a:a7:8c:fd:6f:e1:d0:be:53:41:c1:3a:d4:
30:79:3f:d1:6a:e0:fe:10:43:e6:a4:e6:06:7c:61:67:89:8d:
4d:19:7c:a8:6a:5a:50:8d:63:b2:de:80:16:d8:a2:66:fb:df:
d9:95:90:fc:4d:ba:3a:36:63:d3:4b:08:9a:4c:99:0a:3e:07:
01:6b:b6:46:bf:d1:4e:b5:de:2f:7e:96:dc:6f:0d:8b:d0:f8:
50:05:ad:f3:f6:b4:66:f6:1e:b3:d2:dc:fe:16:85:7f:03:af:
3a:05:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:24:09 2024 by rpki-client on console-fra.rpki-client.org