Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/_OcpgAvfQkcc36FaJ701pafbFEI.roa
File: _OcpgAvfQkcc36FaJ701pafbFEI.roa (raw, json)
Hash identifier: AzTnpTr86XyTd+u6GWo4CpdimH+vtoyNd1ah7cVY/ws=
Subject key identifier: FC:E7:29:80:0B:DF:42:47:1C:DF:A1:5A:27:BD:35:A5:A7:DB:14:42
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 018FCDB8BDEC5C588764D55256539D285400
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/_OcpgAvfQkcc36FaJ701pafbFEI.roa
Signing time: Fri 31 May 2024 08:16:27 +0000
ROA not before: Fri 31 May 2024 08:16:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196791
IP address blocks: 46.172.112.0/20 maxlen: 20
193.169.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:b8:bd:ec:5c:58:87:64:d5:52:56:53:9d:28:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: May 31 08:16:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fce729800bdf42471cdfa15a27bd35a5a7db1442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:30:0c:bc:a1:14:f6:5d:88:3c:a6:0b:0b:
ad:be:2c:78:4a:d2:14:fa:f8:64:44:8d:e7:d4:43:
e0:64:30:e2:2f:31:02:7d:55:3f:38:7b:dd:7f:35:
82:00:e0:26:4e:38:6c:4c:9e:0b:e3:ed:09:4c:6d:
e9:df:8d:86:2c:df:28:93:67:0e:74:c2:29:3a:4a:
f0:69:78:25:99:bd:bc:53:a9:50:f6:27:79:ca:ec:
c5:0a:2c:b4:3b:0f:36:59:3a:69:d9:55:48:f4:08:
3d:58:a9:3f:34:d3:34:34:a9:af:3c:46:f8:81:f9:
71:8c:c7:3e:fe:b5:a5:aa:54:cd:8a:29:74:39:67:
49:2a:f9:a9:80:c1:90:61:79:d8:bd:75:77:94:d6:
7f:fe:d6:d5:13:80:fc:28:da:d8:dc:22:ac:b0:72:
e3:7b:e4:75:6f:1b:ea:1b:0c:6f:9e:7e:6b:3b:65:
ab:de:a1:3d:0e:6a:74:aa:b4:fb:98:47:ca:ca:eb:
bd:c0:d4:83:3c:95:00:57:c7:2d:42:ab:95:ff:9a:
8f:fe:35:59:0d:fb:d9:1b:fd:65:42:f7:b0:31:40:
8b:54:e1:8f:33:88:39:c0:98:03:f2:09:aa:6f:e0:
b3:ab:86:71:76:5a:5b:47:24:23:0d:62:d7:48:0f:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E7:29:80:0B:DF:42:47:1C:DF:A1:5A:27:BD:35:A5:A7:DB:14:42
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/_OcpgAvfQkcc36FaJ701pafbFEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.112.0/20
193.169.60.0/23
Signature Algorithm: sha256WithRSAEncryption
77:8d:92:85:f7:7d:41:92:ac:3b:a0:ff:cd:11:8d:4d:91:55:
c9:e5:34:df:ef:37:db:05:94:08:38:e7:dc:8f:8d:f1:bf:0c:
aa:bf:95:f0:35:29:b3:56:c0:56:47:46:95:32:24:a4:ab:97:
c6:d7:dd:89:5c:32:65:c4:11:83:a5:af:4e:87:9a:76:70:7c:
38:ac:47:3c:2e:99:b2:97:ef:36:93:fe:aa:f1:34:78:f4:99:
e9:2b:96:36:55:8e:af:19:04:55:c0:9f:d9:77:a6:c4:2e:93:
10:ad:18:2c:ff:e3:65:32:79:59:82:33:55:49:cb:99:a0:06:
a5:6d:ee:7d:44:ad:8c:e2:a2:73:31:8b:a5:be:4e:7f:f0:23:
d8:7f:42:7c:6b:ac:81:33:db:d1:e2:bd:57:f5:f4:3e:15:86:
58:7a:53:f2:7a:0b:93:1e:56:ac:90:12:07:e2:bd:53:cf:55:
7c:59:da:ea:1d:f1:ee:b6:8d:c4:42:b8:4f:25:76:5b:7c:8a:
ee:37:2c:b3:67:5a:1a:0e:0c:59:e2:d3:a7:4c:ae:4e:2b:ee:
9e:f4:38:8d:80:fa:83:94:94:69:e3:f9:38:ef:af:1d:8a:68:
d5:e1:0b:e9:af:33:5c:28:95:c2:08:55:fe:dc:e7:7c:0b:3c:
ac:04:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:36:58 2024 by rpki-client on console-fra.rpki-client.org