Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RvItEGwpBJr5RrqxNSSrbYH69QA.roa
File: RvItEGwpBJr5RrqxNSSrbYH69QA.roa (raw, json)
Hash identifier: s3LNLwRCyrzskra05ngG7wu6RMLXJwtKiuQc/1M17mk=
Subject key identifier: 46:F2:2D:10:6C:29:04:9A:F9:46:BA:B1:35:24:AB:6D:81:FA:F5:00
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0191041BED5D15E9158D6AC39A6E5D2DC1C4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RvItEGwpBJr5RrqxNSSrbYH69QA.roa
Signing time: Tue 30 Jul 2024 14:47:04 +0000
ROA not before: Tue 30 Jul 2024 14:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203218
IP address blocks: 204.11.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:1b:ed:5d:15:e9:15:8d:6a:c3:9a:6e:5d:2d:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 30 14:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46f22d106c29049af946bab13524ab6d81faf500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:e4:60:51:42:fc:90:79:cb:d2:6a:95:f5:
5f:ec:fd:0a:6a:4f:00:31:e7:10:a6:14:c3:24:62:
40:5d:45:b2:76:b4:a6:e1:9c:d7:4e:23:02:b4:c4:
b0:bc:6a:e4:61:38:ec:d1:b4:26:92:f8:a8:fd:a1:
ef:6c:f6:e6:e6:c1:c4:d2:a2:fb:b3:c5:8f:9e:ba:
bd:2c:c7:ed:ac:70:00:92:4e:ab:d0:8a:ad:f3:22:
11:52:05:d2:b2:10:dc:1e:c9:67:e0:3f:81:7d:d0:
fe:50:91:58:b6:64:59:61:18:ae:3b:ac:d4:e1:e1:
1e:1a:bf:5e:91:d2:e5:45:ca:9b:50:8a:d9:17:e8:
e5:a9:fb:32:49:df:68:ab:16:01:0b:65:69:95:89:
fe:31:6d:31:71:26:5e:7f:42:3e:4a:c8:33:20:48:
02:26:40:e7:11:b5:83:08:ee:9b:e0:f8:54:9c:1e:
0a:46:79:ae:30:0e:64:90:f4:03:4c:b6:5e:48:86:
87:99:e8:c6:c0:f7:ed:da:1e:39:41:27:c3:78:cf:
4a:6f:15:44:e9:8f:eb:3f:20:61:cd:d4:70:69:ae:
0a:ca:d5:69:50:14:2a:6c:a6:35:ca:4e:11:4b:49:
f8:ba:d0:e0:f9:18:97:3b:c7:21:30:2d:d1:9e:33:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:2D:10:6C:29:04:9A:F9:46:BA:B1:35:24:AB:6D:81:FA:F5:00
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RvItEGwpBJr5RrqxNSSrbYH69QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.11.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4b:cc:82:67:ff:4c:93:0f:2c:83:bd:e0:8b:67:a3:23:90:
79:83:79:70:c8:37:e9:9d:2b:12:0e:5a:d2:92:92:03:01:b8:
34:ce:89:84:17:8b:8f:38:0c:a5:6a:5f:e5:cd:21:8e:18:f6:
e1:09:9a:df:1c:9d:c5:72:6b:51:44:e5:bb:d8:02:8c:7f:9e:
2c:63:af:28:71:8c:d4:00:95:2a:08:54:16:b2:21:db:b3:f7:
a7:29:74:37:25:69:9c:2d:1d:aa:8d:6c:9a:34:40:c6:d3:15:
5c:ab:d3:df:95:52:c4:f1:b8:56:bc:f9:8d:17:68:c8:c4:51:
d3:b9:04:15:ef:06:dd:a7:b2:78:ad:ab:3f:6e:84:79:88:30:
28:99:4a:49:61:3a:69:cb:c2:ea:69:36:f1:c3:01:6f:09:f4:
86:33:64:ef:ef:df:6d:e2:52:8c:b1:8e:67:4c:de:ae:f4:be:
b2:a0:eb:5b:11:31:d7:c7:5a:43:c6:c4:65:bc:8e:a2:f3:94:
58:8c:22:85:42:c1:e4:72:a2:d2:9a:0e:3d:3d:fd:f5:35:dd:
7c:b8:3c:0c:ab:ac:d9:f4:79:30:e0:87:fd:1d:35:08:12:06:
54:cd:14:6d:38:95:2d:3b:cd:6e:07:89:87:77:e0:64:1e:42:
59:c9:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:01:45 2024 by rpki-client on console-ams.rpki-client.org