Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/to38kmYx23Md5hiV3F2SfomnYPA.roa
File: to38kmYx23Md5hiV3F2SfomnYPA.roa (raw, json)
Hash identifier: uqObhmvNuto9tecdYp1Ojm222VbtZwtVA45AahRgMQw=
Subject key identifier: B6:8D:FC:92:66:31:DB:73:1D:E6:18:95:DC:5D:92:7E:89:A7:60:F0
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B9321A83F58144F3076BDA406FF53A
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/to38kmYx23Md5hiV3F2SfomnYPA.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35185
IP address blocks: 84.44.7.0/24 maxlen: 24
46.234.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:32:1a:83:f5:81:44:f3:07:6b:da:40:6f:f5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68dfc926631db731de61895dc5d927e89a760f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:46:07:d5:b5:2d:a2:be:cd:f4:cb:93:1c:d3:
76:dd:da:10:bd:5b:76:e6:f4:8d:09:77:07:a0:ed:
78:b8:fb:93:66:b0:5e:f5:cc:c0:80:44:10:09:78:
b5:7a:8b:1e:48:f1:c4:69:3c:d7:86:54:5e:8c:71:
1e:f9:e9:bc:21:0d:f3:73:b1:11:52:49:88:9b:98:
1d:12:db:16:6a:47:95:e1:ff:ae:6b:82:68:25:2d:
27:cf:f4:04:cc:d3:5a:6d:47:7c:9c:17:89:dd:b6:
c8:36:f3:11:32:d2:88:1b:95:b2:86:c0:bd:23:27:
93:92:04:1e:65:a3:c3:17:6c:22:36:55:c6:40:39:
93:85:11:ff:7e:91:75:60:d0:a9:8e:a9:c1:02:7d:
d5:77:54:77:e5:58:33:2e:f0:34:83:f7:f9:23:fe:
6e:b9:ec:c6:95:b6:05:2b:ba:ae:5d:ec:54:6d:c1:
12:f3:4a:83:94:cb:56:8c:b9:12:61:83:a5:5d:3a:
d1:3d:69:f5:c8:4c:78:0f:93:4e:41:cb:53:77:e8:
40:47:74:b6:58:9f:8d:99:93:87:12:79:2c:0c:7e:
54:fe:5a:db:e6:f7:1e:fd:9d:65:76:48:de:bf:00:
6a:41:36:bd:f4:1d:25:39:f7:28:5f:ec:9b:57:ff:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8D:FC:92:66:31:DB:73:1D:E6:18:95:DC:5D:92:7E:89:A7:60:F0
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/to38kmYx23Md5hiV3F2SfomnYPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.14.0/24
84.44.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:81:b7:52:10:7d:43:52:8e:cd:43:30:ad:16:68:98:fe:8f:
a9:b5:9c:27:60:e8:ed:83:f3:f4:2e:e6:c5:5e:b2:cc:39:15:
eb:b5:5c:b5:aa:5c:45:4b:b5:f9:cc:73:53:76:d1:5a:f2:47:
f2:8c:fe:43:23:5f:cf:1e:16:9c:e1:f3:c7:53:ad:5b:d0:12:
63:1c:91:f5:36:1f:13:4a:5e:f6:53:2f:55:8f:75:27:aa:b6:
b0:a8:34:a3:ff:73:ae:06:bf:d0:7e:0a:b6:e8:46:e6:1f:65:
75:47:df:16:21:85:70:22:9e:c7:03:ae:42:65:21:cc:ca:ca:
e5:ba:8c:cc:06:13:95:1f:cc:e4:c5:8c:30:af:63:4e:71:a0:
ab:37:bb:32:ec:02:44:f2:5d:df:96:53:dc:28:13:c5:8f:fb:
ad:e9:7a:15:6f:a1:91:8b:8e:9f:44:73:ea:6d:d2:4c:32:84:
ac:ba:8f:08:68:02:68:94:c7:85:bf:d1:5d:53:00:5c:21:ce:
1d:39:cd:91:d8:2b:76:92:71:83:a3:61:cd:2f:30:73:53:51:
5f:14:a0:4e:50:54:0f:d1:ba:5c:5e:1a:17:95:7f:31:f4:7c:
f7:42:a8:58:fb:b4:7c:0c:82:7a:b7:20:9b:8f:af:9a:e7:21:
5f:d6:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:53:31 2024 by rpki-client on console-ams.rpki-client.org