Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/RhTfyynBamLA7D27KlcImN_HcL0.roa
File: RhTfyynBamLA7D27KlcImN_HcL0.roa (raw, json)
Hash identifier: 6eRSd80tP+v72zSwuG4Im1bZXG1shuWpjaZKjZw+9zY=
Subject key identifier: 46:14:DF:CB:29:C1:6A:62:C0:EC:3D:BB:2A:57:08:98:DF:C7:70:BD
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0191A838D5AFA28AE768F871D6D01068FB8D
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/RhTfyynBamLA7D27KlcImN_HcL0.roa
Signing time: Sat 31 Aug 2024 11:36:22 +0000
ROA not before: Sat 31 Aug 2024 11:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 94.154.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a8:38:d5:af:a2:8a:e7:68:f8:71:d6:d0:10:68:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Aug 31 11:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4614dfcb29c16a62c0ec3dbb2a570898dfc770bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:da:8f:94:a8:0d:87:31:85:00:d9:91:42:
20:f7:ce:e4:47:f1:25:ff:b3:b7:b7:8e:6d:36:90:
74:cc:42:3c:b9:28:09:b7:f7:97:ca:b2:c7:ab:4c:
99:14:3f:e2:6d:64:b7:9b:bf:bb:fa:52:e8:3d:b7:
d1:e0:c8:33:29:67:e0:67:97:35:10:13:c9:14:3a:
06:2e:1f:f6:d7:71:e0:23:4c:8d:6c:3d:a9:b9:1f:
42:df:e1:54:90:e0:2b:7a:c2:36:3d:33:12:cf:6e:
84:4b:c8:80:f8:7c:57:5c:57:0a:5f:47:11:bb:5c:
fd:e8:ff:c8:a3:b5:a4:57:89:b2:ed:32:13:25:1a:
73:bf:3c:d4:09:01:70:5d:25:21:05:fc:58:13:c0:
48:50:0f:e5:b6:a4:90:d5:b6:a9:44:a3:0e:7e:72:
17:14:9c:30:c1:f6:34:bb:49:b1:a6:f4:30:ac:55:
5f:a6:48:16:a4:a1:4c:03:3b:bf:41:22:f9:1a:a6:
74:67:df:f8:25:1e:ed:e8:d3:7d:6f:d3:f4:4e:3a:
db:1c:25:42:d5:c9:23:3f:43:1b:c8:f8:2a:c4:bb:
c3:0b:39:e5:66:12:88:0c:5c:09:53:2a:1b:ac:14:
d2:5c:1a:02:93:8d:6c:c3:8f:ae:65:46:d0:14:45:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:DF:CB:29:C1:6A:62:C0:EC:3D:BB:2A:57:08:98:DF:C7:70:BD
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/RhTfyynBamLA7D27KlcImN_HcL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d2:80:1c:4a:0f:6e:c4:f6:f1:a6:4b:27:7c:0f:f0:70:ef:
d1:35:43:48:bb:bf:51:4b:1f:5e:8e:d4:57:18:37:a0:d1:58:
74:a0:95:f9:77:a1:d3:7e:02:88:5b:cc:0b:95:69:b8:59:25:
4b:41:06:50:79:ff:97:f8:4a:a4:f0:2c:7a:28:13:93:94:cd:
b2:e0:36:62:34:9a:75:d9:77:b9:22:cb:c4:ae:72:a8:ee:ca:
f4:05:e0:9c:25:ab:82:6d:93:b0:b6:08:ae:28:a7:e1:bc:3a:
16:a2:4e:fd:b9:78:ca:4a:a9:cb:ea:ef:0c:16:a9:3e:94:e5:
f7:3c:0a:57:cf:5c:cc:11:01:38:20:92:3c:ce:07:7d:97:5e:
ca:35:cc:64:e7:a8:1e:c9:19:76:92:ee:f0:85:63:85:39:c1:
81:07:d0:66:8f:15:f7:71:97:58:bf:d6:c1:04:49:af:ed:56:
b3:35:49:b2:53:19:80:bb:65:d0:18:45:dc:22:4a:82:98:62:
3f:f5:26:cc:a1:51:95:14:3c:cb:87:0e:77:ad:a5:72:57:8e:
ca:8e:47:cd:fa:e5:2c:b4:22:03:63:ce:46:6c:a1:25:5e:16:
10:5c:e9:1c:5c:e4:31:a3:2d:17:a1:1c:48:54:8a:7a:51:07:
d6:6a:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:50:38 2024 by rpki-client on console-ams.rpki-client.org