Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Gz2EorJhD7TLoKMiuWRd9DiqM8U.roa
File: Gz2EorJhD7TLoKMiuWRd9DiqM8U.roa (raw, json)
Hash identifier: Iys+JzE3oUxBBZ+9afUHK6atj09OkbajWUa/BiAD94U=
Subject key identifier: 1B:3D:84:A2:B2:61:0F:B4:CB:A0:A3:22:B9:64:5D:F4:38:AA:33:C5
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC3CB97D95BDD5EB657C362E963519
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Gz2EorJhD7TLoKMiuWRd9DiqM8U.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198079
IP address blocks: 46.244.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3c:b9:7d:95:bd:d5:eb:65:7c:36:2e:96:35:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b3d84a2b2610fb4cba0a322b9645df438aa33c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:e7:e2:0f:50:27:51:23:18:59:e9:9f:88:
8e:6f:a6:50:fa:04:7c:29:12:e2:5e:a5:0b:ac:41:
fb:40:58:fe:62:c9:6a:55:a4:a8:15:15:f2:08:5e:
1c:c9:72:76:11:4c:d9:16:a9:72:db:be:da:e0:6a:
95:8b:b9:be:c8:f1:c8:85:ef:b9:90:34:8c:5c:6d:
cc:31:ea:1a:bc:b5:90:b0:9b:3e:ff:28:c6:a2:8a:
3e:b7:16:47:18:56:37:22:20:b5:65:3c:02:eb:22:
d8:7c:c1:a5:b3:15:1b:4f:67:f5:c3:ad:c6:0d:7d:
5b:95:27:73:f2:77:06:8e:16:32:51:e4:04:4a:df:
d2:8b:27:84:79:eb:de:90:f7:7d:84:41:60:55:f5:
50:78:f5:05:b2:42:6a:6a:9c:5b:43:f5:a7:e1:d1:
a5:44:4e:42:aa:40:fa:34:14:65:41:65:d1:3a:7e:
49:b7:5a:e0:6e:07:54:f3:f5:4c:26:1f:46:7d:4b:
d8:cf:78:30:a0:3b:47:55:6e:10:06:4f:dc:3b:dc:
90:ac:59:80:d3:f1:2e:b6:e7:bb:da:07:21:17:f4:
f9:94:14:f0:92:c2:69:e8:08:d4:93:2d:e3:08:c6:
9f:e8:7c:bc:23:78:ff:07:4c:d3:a4:ba:c8:4b:02:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:84:A2:B2:61:0F:B4:CB:A0:A3:22:B9:64:5D:F4:38:AA:33:C5
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Gz2EorJhD7TLoKMiuWRd9DiqM8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fb:3b:ae:f8:f5:2a:0b:57:2e:60:c3:b2:b9:13:48:2e:33:
b6:9b:bf:32:40:9c:b1:01:17:4f:d5:47:1a:09:fc:b6:89:0f:
6a:54:ed:4a:a6:fe:e5:32:36:81:99:ea:68:08:60:8e:5e:e6:
63:cd:80:7a:68:88:ed:8f:94:d1:ff:5b:88:9b:a9:71:c4:6f:
1c:4b:2d:7e:20:69:6b:05:6b:d4:c3:17:16:9a:6c:ce:f8:38:
56:d8:34:ec:48:04:62:55:48:5c:ef:47:ff:e7:ec:2f:65:8f:
f4:89:ec:2b:f5:01:83:a6:ba:1f:2d:bb:c5:a3:76:a7:1b:ff:
71:e0:3c:3f:3d:a4:b9:6a:80:17:41:88:75:e2:9b:66:35:fc:
29:1d:a6:e5:88:b3:c7:67:ca:6b:2c:67:cd:e5:0d:3b:e0:92:
e9:88:f3:06:fa:6b:5c:2d:1e:a2:ad:58:0e:77:3c:c9:cb:cb:
e5:c0:9d:9c:1c:b5:b8:96:6c:1e:a9:d2:3a:9a:53:f9:e4:d6:
92:c7:38:49:0d:50:62:ce:1a:f4:c3:1d:ea:bc:8f:8e:cd:bd:
34:bf:9d:19:9d:56:2f:9f:c3:97:1f:9e:27:11:a1:1d:1b:2f:
8f:01:a2:c9:e7:b9:13:3b:48:d9:81:23:45:6b:5b:de:f5:db:
ba:2c:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:38 2024 by rpki-client on console-ams.rpki-client.org