Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-EnFpOeoBeic-0KekSatHotm-NM.roa
File: 1-EnFpOeoBeic-0KekSatHotm-NM.roa (raw, json)
Hash identifier: u8EJxfSpg60Qo/mqbob+YFznVNqP6QjpaFeUH6/GDyY=
Subject key identifier: F8:49:C5:A4:E7:A8:05:E8:9C:FB:42:9E:91:26:AD:1E:8B:66:F8:D3
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801258F10CD9E0892581E26B4A02C42
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-EnFpOeoBeic-0KekSatHotm-NM.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25004
IP address blocks: 46.19.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:25:8f:10:cd:9e:08:92:58:1e:26:b4:a0:2c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f849c5a4e7a805e89cfb429e9126ad1e8b66f8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:3d:d9:0c:ad:ea:ca:e6:40:27:65:fb:a0:
fa:8a:d5:0e:75:ce:a5:6c:eb:c6:90:22:27:a6:d6:
75:8a:f4:3a:59:20:48:5c:18:f6:a5:d7:62:42:b9:
0e:9f:5e:85:4c:4d:23:ac:c3:cf:f6:ca:cb:10:c2:
c1:94:63:6d:9d:2c:11:fc:73:ca:95:d9:1d:83:4e:
3c:2b:c1:15:42:b8:6f:3a:ce:1f:34:21:63:f5:99:
0b:5a:65:dd:8e:05:cd:6c:80:ac:c1:ff:89:1f:cd:
d1:57:44:4e:a1:27:88:ae:43:b5:b1:55:78:e4:d1:
49:f6:6b:ef:8b:e7:e9:b2:57:87:db:96:43:bc:e2:
5b:85:dd:e9:a3:c8:86:f8:78:7f:34:bd:3e:92:56:
4b:95:ed:f6:19:23:c0:70:95:8f:d5:18:aa:ee:10:
7b:1e:e0:8c:91:3a:e4:e7:b8:57:33:e3:5d:26:fa:
89:66:a5:11:bb:0d:7c:3b:3f:ca:6a:45:1b:c1:fe:
9c:00:57:1e:b1:cf:f7:89:1e:d5:0e:7a:d6:7a:8c:
f9:61:92:bf:30:fa:63:d5:a5:1c:35:05:c7:63:63:
b8:95:e1:4b:a1:fe:52:2e:fe:39:85:d0:cd:46:ef:
a3:66:c8:03:88:36:41:ae:a3:62:2b:70:09:f5:d1:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:49:C5:A4:E7:A8:05:E8:9C:FB:42:9E:91:26:AD:1E:8B:66:F8:D3
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-EnFpOeoBeic-0KekSatHotm-NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.203.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d8:be:98:ee:b5:3c:09:9b:cf:e7:3e:ee:51:02:e5:58:cd:
36:9b:9a:45:1a:4d:5f:fb:4b:00:59:be:54:b2:db:59:f1:a1:
73:c8:e2:55:f7:d7:40:fe:28:11:10:21:48:d6:98:48:ed:78:
4f:31:82:ba:28:9c:c9:c1:84:05:a2:ba:ae:64:d7:d7:52:9f:
7f:00:73:ce:25:52:46:ad:01:99:19:53:cf:78:8c:04:87:03:
27:fc:fa:fd:33:8d:e9:99:f9:6a:0d:07:cb:98:33:eb:41:66:
9d:ae:79:a3:f8:5b:99:6f:de:a1:a7:a6:ab:b8:ef:d0:43:c4:
2f:10:6a:35:2b:24:73:a6:ed:8f:2c:c2:c7:a8:bd:b3:03:cf:
f2:07:34:9f:fe:4d:9e:47:00:a8:0f:f9:66:22:9b:bf:dc:ec:
b8:f3:bb:e4:56:03:d0:66:67:19:6b:31:f0:89:6b:7b:bb:4a:
d4:71:18:b7:82:cb:49:73:97:85:22:ff:dc:ff:9a:23:30:9a:
03:5d:d0:a8:5b:4d:15:39:ca:87:06:c8:62:8b:2f:85:6f:bc:
a3:92:fb:c6:e3:04:6e:5b:23:2a:c1:6f:9c:1a:06:6e:02:da:
50:14:6b:87:cf:4b:27:79:6d:47:99:3e:f4:18:33:59:b2:c7:
cd:48:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:04:46 2024 by rpki-client on console-ams.rpki-client.org