Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/aRUigTBCcOciLBvaclbhqlbdBd0.roa
File: aRUigTBCcOciLBvaclbhqlbdBd0.roa (raw, json)
Hash identifier: aNHnkD8pW4ioTdee/8mg7stpCc/b3/NwJs7b1+l6LBw=
Subject key identifier: 69:15:22:81:30:42:70:E7:22:2C:1B:DA:72:56:E1:AA:56:DD:05:DD
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018CC6B944E0EF7D01714F8131CF437D0657
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/aRUigTBCcOciLBvaclbhqlbdBd0.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 46.183.186.0/24 maxlen: 24
2a03:f80:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:44:e0:ef:7d:01:71:4f:81:31:cf:43:7d:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69152281304270e7222c1bda7256e1aa56dd05dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:a3:4b:12:a7:11:65:0a:60:1c:00:f2:be:
96:3d:aa:b8:eb:7f:49:1e:ed:9d:c1:59:fe:e1:aa:
33:62:a5:b8:8d:76:4a:51:13:b3:d8:2a:95:34:5a:
14:6e:52:a2:35:95:a6:a4:f8:5f:4e:e8:59:09:b3:
8c:0d:44:86:47:ed:85:75:96:28:fe:00:77:38:46:
16:b0:95:6c:a1:ec:0a:b9:89:6e:da:99:d1:e6:40:
aa:5f:61:f2:4b:7c:93:99:69:41:57:d9:a4:80:c9:
e5:46:c9:15:7c:4a:fb:6d:ea:c0:e2:6c:5a:87:a4:
05:6d:99:26:45:98:08:69:f1:8b:05:0c:5b:3f:40:
0b:0b:85:a8:6b:aa:4d:6d:d7:65:da:24:aa:f1:4b:
6a:d6:5d:a9:db:55:63:0a:ad:1c:39:92:2f:9a:94:
d9:e8:f0:81:c4:31:dd:80:26:b4:bf:70:e7:a5:ae:
a1:c4:cd:96:bf:2a:3c:3e:14:22:15:d5:12:35:c4:
93:2f:0a:13:0e:2c:8e:65:07:62:a0:73:b8:6d:39:
2f:d9:e2:8f:3f:23:e0:b9:34:d3:b0:10:c1:ea:a8:
21:9b:ba:c2:04:f4:0d:58:e8:19:83:fe:c2:4f:15:
dd:d1:aa:04:8a:1b:15:2e:b3:7a:2a:16:ab:48:03:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:22:81:30:42:70:E7:22:2C:1B:DA:72:56:E1:AA:56:DD:05:DD
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/aRUigTBCcOciLBvaclbhqlbdBd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.186.0/24
IPv6:
2a03:f80:36::/48
Signature Algorithm: sha256WithRSAEncryption
b1:79:64:7a:c6:21:bf:7b:3b:10:5d:95:e7:ed:93:38:d8:71:
42:d2:bb:93:d6:4f:23:6b:68:d8:2c:18:cf:32:0c:c2:c5:7f:
11:29:2d:2d:e1:f8:51:36:12:9d:f0:fa:f4:85:82:8d:23:90:
f3:f6:82:02:be:31:1d:e1:72:20:a8:25:c7:82:94:a6:69:8e:
81:90:05:09:63:53:98:0f:81:4e:43:36:dd:7e:9d:6e:f5:b2:
0d:f4:24:8f:e1:5d:6f:e8:2e:84:39:49:fe:b9:82:38:d6:8c:
ca:80:53:68:24:03:b6:de:94:d9:1f:28:8e:4e:3c:da:ea:35:
82:4c:de:71:ba:a4:cd:b9:1c:5a:91:1e:de:55:13:08:dd:e7:
b4:b8:ad:fb:eb:04:d9:05:ab:e8:f2:87:d6:84:dd:4a:34:4c:
0a:29:c4:a6:65:cf:a9:3b:99:39:7d:8a:b7:11:a6:53:a6:a6:
85:38:79:84:4a:8d:41:4e:25:cd:01:c7:9c:df:c8:60:f2:73:
4a:51:f6:93:70:d4:fa:63:7f:a9:2c:cb:b4:5d:42:04:5e:03:
b1:b3:83:5b:7e:f0:6a:e9:af:71:8d:95:82:32:2d:d9:37:52:
9c:09:f5:54:6a:87:15:0b:c1:d0:da:3c:d2:70:68:32:35:eb:
c4:b1:6f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:24:11 2024 by rpki-client on console-fra.rpki-client.org