Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/9LhloSjE8YTbTqnUR5iaRv2Cwwo.roa
File: 9LhloSjE8YTbTqnUR5iaRv2Cwwo.roa (raw, json)
Hash identifier: wmygWmo/EFSBlVvc9JnYtL3j3MjA6dnnhXbuGBlf798=
Subject key identifier: F4:B8:65:A1:28:C4:F1:84:DB:4E:A9:D4:47:98:9A:46:FD:82:C3:0A
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 018CCA29D814CADEB8A5994DE3184AFE2CA7
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/9LhloSjE8YTbTqnUR5iaRv2Cwwo.roa
Signing time: Tue 02 Jan 2024 12:33:09 +0000
ROA not before: Tue 02 Jan 2024 12:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202773
IP address blocks: 46.226.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d8:14:ca:de:b8:a5:99:4d:e3:18:4a:fe:2c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Jan 2 12:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4b865a128c4f184db4ea9d447989a46fd82c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:52:86:41:9c:e9:cb:24:75:d4:b4:86:95:
7a:60:44:27:56:b0:ac:ae:31:1e:44:95:4c:d7:b6:
a8:07:82:04:90:c4:8d:48:46:fb:d5:db:a8:9e:8b:
af:ea:f9:e6:2a:19:4d:f4:10:81:2e:75:8f:12:f4:
9e:b0:23:ef:9b:87:71:49:24:44:cf:98:17:50:1f:
9c:ae:23:a5:04:c1:ad:72:ff:51:88:9e:0f:3d:d0:
ae:16:bb:c5:aa:f4:ce:eb:cc:d3:bf:ac:e9:61:5f:
e1:eb:7a:e1:eb:db:f1:03:a5:83:e7:ce:db:37:e6:
6c:ce:a8:7b:a4:a9:a2:c1:a4:dc:bc:4e:98:e0:97:
2b:56:32:eb:21:f0:4c:28:b1:43:03:99:24:ad:14:
ad:0a:62:9f:9c:81:4d:28:62:b9:a7:35:17:ba:c3:
14:53:7b:88:47:ef:33:70:f6:ce:94:e6:b9:87:7c:
5e:f5:5f:f2:f4:f6:0b:78:d8:a3:7b:56:82:73:89:
50:9c:34:3e:82:dc:a2:e3:91:4d:4f:75:2f:72:62:
29:da:0d:a1:8c:54:c7:32:52:9d:90:e9:fd:a3:43:
f4:9c:b5:4d:e1:4b:ad:bb:c3:56:75:0e:d0:ef:fb:
70:d6:5b:ba:80:49:fa:3a:f2:fe:c8:38:1e:5b:01:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:65:A1:28:C4:F1:84:DB:4E:A9:D4:47:98:9A:46:FD:82:C3:0A
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/9LhloSjE8YTbTqnUR5iaRv2Cwwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d3:fc:3f:51:09:e7:a2:da:88:d2:ed:6a:da:fb:88:dc:5b:
85:ad:12:f5:56:af:d6:7c:39:56:e3:bf:5d:9d:08:1d:6a:b4:
ea:55:90:65:70:bc:88:da:34:ec:bc:2c:a0:13:4c:0d:7b:ea:
36:16:e8:a1:c9:a6:12:6a:de:5d:dc:b1:fb:12:c4:3f:f8:72:
fd:36:b3:20:fd:3c:81:c6:f5:8e:d8:da:7c:8e:c5:68:fc:f6:
de:84:6e:46:10:07:89:97:25:73:c6:f4:09:c3:5c:14:45:17:
f4:19:93:3a:b3:67:fe:a7:a2:c6:f3:7d:de:65:93:91:f6:57:
37:01:0b:0d:e9:54:6d:9c:b2:b7:5d:ee:2c:a3:09:78:63:c1:
c5:5b:2b:e4:5c:cc:a7:ad:fa:f2:33:0a:ac:ad:61:b2:46:90:
5f:63:04:88:51:e8:9b:b9:f1:30:7d:33:76:19:24:4e:91:18:
52:8b:84:0b:cc:bc:0f:e7:89:59:a2:0f:a3:8b:2f:fe:5c:39:
e0:a2:54:58:a8:27:63:93:16:10:77:54:8b:36:17:09:fe:0c:
bb:69:63:81:7b:cd:cc:a7:00:28:be:fb:55:2d:c7:18:f8:8d:
3d:16:62:f3:01:b4:65:2a:f7:2a:17:ee:6a:52:7e:f2:ae:f4:
13:9c:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:53 2024 by rpki-client on console-fra.rpki-client.org