Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/11mDY_WAyffjgrg6UR7cuV1-Ctw.roa
File: 11mDY_WAyffjgrg6UR7cuV1-Ctw.roa (raw, json)
Hash identifier: t8+XQWYpPZY4iq5iQQ1yD2gO81XI1tetULz8vd6rIyk=
Subject key identifier: D7:59:83:63:F5:80:C9:F7:E3:82:B8:3A:51:1E:DC:B9:5D:7E:0A:DC
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 018CCA29D7C1F22C16A1CAA253F9E55CF068
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/11mDY_WAyffjgrg6UR7cuV1-Ctw.roa
Signing time: Tue 02 Jan 2024 12:33:08 +0000
ROA not before: Tue 02 Jan 2024 12:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52214
IP address blocks: 46.226.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d7:c1:f2:2c:16:a1:ca:a2:53:f9:e5:5c:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7598363f580c9f7e382b83a511edcb95d7e0adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:c9:a4:cc:51:5e:b5:f2:77:b7:76:65:ba:
d9:fa:03:d0:82:78:a3:93:7f:c9:ae:53:24:5d:9e:
d9:5d:c3:e1:2c:c3:37:26:e1:0a:af:c0:e3:f6:fd:
86:52:ff:22:ab:4f:7a:c1:de:16:53:4a:78:d1:e8:
ae:36:9c:4a:19:17:78:78:bc:53:b5:c4:c8:8b:ba:
fc:01:db:bb:7b:70:39:f0:8a:a5:ee:b6:ae:d7:78:
7d:a2:06:0e:b7:7a:b9:16:67:3a:82:f9:13:e1:27:
58:db:f8:75:c3:11:9b:67:cf:28:db:6d:46:e7:0f:
9c:b8:e7:cb:1e:49:74:3e:a2:c3:a1:bf:35:8b:99:
b9:fa:62:a1:0c:0d:fb:be:cb:00:e0:38:28:ee:02:
60:4e:f3:ac:6c:1d:fd:94:24:c5:f7:c0:3a:8c:62:
fd:bf:00:c6:0a:8a:56:73:59:5c:f3:aa:8b:55:14:
e4:ac:32:90:3c:3b:57:67:1e:fe:ab:6c:80:54:27:
03:04:a9:18:9e:32:61:6c:5f:47:85:71:ba:6d:c2:
e0:b1:02:f4:e9:dc:99:8f:8a:5d:89:41:3f:e0:51:
19:9b:1a:91:df:4d:b6:c5:01:75:34:21:88:df:d7:
f3:d0:b1:c7:f7:af:81:b5:3a:10:fe:40:b4:ea:fd:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:83:63:F5:80:C9:F7:E3:82:B8:3A:51:1E:DC:B9:5D:7E:0A:DC
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/11mDY_WAyffjgrg6UR7cuV1-Ctw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.210.0/24
Signature Algorithm: sha256WithRSAEncryption
91:84:07:0c:e2:10:ae:8d:ae:66:96:64:16:90:d3:29:46:e6:
b1:32:e3:dd:d6:59:35:c1:2d:ba:ef:11:24:df:c0:58:76:0d:
dc:56:72:c8:da:72:c7:ce:36:98:4b:5a:f5:50:6b:4f:2b:87:
80:f3:a9:8f:ea:06:f2:12:58:3e:c3:fa:9e:57:b5:b7:84:33:
56:0d:8e:d2:68:15:53:f5:2d:08:05:b7:45:75:bc:d4:3c:8d:
02:e4:47:57:58:0a:4f:0c:16:bb:ec:80:64:3d:5d:32:08:2d:
c2:68:9b:f8:69:17:f7:98:23:5a:b5:37:91:f4:b2:f4:7a:c6:
20:ca:24:37:a3:c7:50:46:c0:ff:3f:d9:3c:d0:46:cf:b4:1b:
6b:76:08:1e:5a:85:08:de:0a:75:67:fe:75:ec:d9:7d:26:7b:
b9:3d:d7:b5:6a:73:f1:e6:3a:61:84:50:1c:a1:91:2b:ef:7b:
3a:2a:a5:6d:a7:1e:5d:d6:e4:f0:0e:a4:2e:13:65:55:80:e1:
0b:fe:37:ff:9a:b9:68:d8:70:86:4b:8d:be:fc:d9:34:17:3c:
a8:41:33:47:82:c8:a8:ba:a5:e4:ee:b0:c2:a6:7e:2c:87:46:
99:20:46:02:a7:bf:87:a4:91:95:a8:31:bf:31:3f:fa:6d:3f:
5e:31:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:53 2024 by rpki-client on console-fra.rpki-client.org