Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/BPomtTvq0l2iuQnVLyKEZyJRpnM.roa
File: BPomtTvq0l2iuQnVLyKEZyJRpnM.roa (raw, json)
Hash identifier: S/pJV+5d40GWrcTWy35IO3LGxz/WoBBH/5Hd7Mr85Pw=
Subject key identifier: 04:FA:26:B5:3B:EA:D2:5D:A2:B9:09:D5:2F:22:84:67:22:51:A6:73
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B935DDA207AA38C80A88157AD523A9
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/BPomtTvq0l2iuQnVLyKEZyJRpnM.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57914
IP address blocks: 46.234.11.0/24 maxlen: 24
46.234.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:dd:a2:07:aa:38:c8:0a:88:15:7a:d5:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04fa26b53bead25da2b909d52f2284672251a673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:0f:39:61:22:fa:8a:4a:9c:3a:4f:5f:40:
05:45:75:fa:4f:a7:44:2b:ec:73:6a:f9:74:4e:1a:
ac:bf:0c:c9:1c:17:b4:0e:ab:70:ee:de:af:3b:93:
dd:69:4b:3d:48:9e:86:2e:f8:49:c6:08:d2:9b:22:
c6:d1:5d:60:81:b5:eb:f9:f6:c1:4f:78:a5:c6:ba:
98:e2:aa:5b:d6:a7:af:f2:7d:a2:de:86:84:44:15:
f0:30:93:b0:59:a2:d8:cb:6a:15:fc:0e:04:78:34:
ac:76:bb:c6:4d:a5:d7:56:92:cd:1d:be:2a:91:f4:
d5:ba:8f:72:f3:7e:4b:e5:cc:ae:83:7f:31:d5:f7:
5f:38:cf:9f:89:7b:02:37:3b:76:f6:57:fb:49:fe:
d9:40:b6:5b:dc:49:73:0f:d2:42:dc:cd:fb:f9:fe:
33:6a:eb:d9:2a:cc:38:31:4d:b6:8d:ec:a6:8e:50:
f9:c9:67:a5:2c:c5:33:a5:af:41:d2:8b:85:a3:50:
6c:e6:bd:e3:94:6f:c5:e4:be:40:1b:48:f0:0e:83:
6e:a2:c4:3a:e6:bc:26:28:be:68:33:3c:6a:9c:4e:
77:df:2e:2a:23:d1:46:14:6e:bd:37:ef:5d:90:27:
12:04:d3:39:31:0f:15:54:35:fa:16:e9:35:1c:b4:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:26:B5:3B:EA:D2:5D:A2:B9:09:D5:2F:22:84:67:22:51:A6:73
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/BPomtTvq0l2iuQnVLyKEZyJRpnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.11.0-46.234.12.255
Signature Algorithm: sha256WithRSAEncryption
d2:48:b9:bf:49:dd:01:d7:83:78:92:f6:4a:12:c0:2b:91:8b:
9b:84:00:e0:d9:f4:d7:6a:18:33:67:5d:f9:4a:b2:12:55:69:
af:da:6a:6d:d9:37:a3:f9:5b:22:29:0b:13:5d:bb:86:f2:34:
4f:06:ce:b4:d9:73:27:c3:e1:d7:62:da:72:7f:63:e5:27:a7:
55:cd:41:9b:3b:d3:fa:47:de:7f:f0:b0:95:a7:04:fc:53:e0:
cd:b6:7d:8a:82:52:ab:a9:31:14:01:1e:3d:ee:c0:ae:63:8e:
c2:3e:fd:ff:94:6d:d6:5f:12:24:b2:54:22:98:84:3b:a6:79:
49:6a:2b:27:4a:07:cd:c6:7d:0a:d8:ab:f5:e1:35:ea:2f:3c:
a6:ec:d1:42:68:7e:78:22:76:d7:04:2b:02:ef:31:24:62:7c:
7c:ab:60:fd:a0:f9:e1:0d:88:c7:e9:f3:ba:87:b0:39:cb:9f:
eb:30:ca:c4:7f:b5:88:37:69:6f:15:f2:a8:c6:c2:d4:d0:42:
89:b8:c0:a5:5a:5d:ec:4c:3e:7b:e1:4d:92:ee:fc:5d:2a:4a:
35:80:06:2f:f3:c8:aa:eb:03:b8:e3:3e:ea:5a:35:f0:5a:00:
b6:d0:05:e5:1b:93:c7:70:8c:5c:7e:0b:d8:e2:4b:89:96:ed:
d2:f5:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:54:40 2024 by rpki-client on console-ams.rpki-client.org