Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AEjGqz2K0trskV5EQIjGyd2-sLI.roa
File: AEjGqz2K0trskV5EQIjGyd2-sLI.roa (raw, json)
Hash identifier: OlYu1pFXFUbYo1wqh/P9uYnk+ZpO4NO0G4K21vtnmw8=
Subject key identifier: 00:48:C6:AB:3D:8A:D2:DA:EC:91:5E:44:40:88:C6:C9:DD:BE:B0:B2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E1302066EBE95CA9F6286617B6330
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AEjGqz2K0trskV5EQIjGyd2-sLI.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212128
IP address blocks: 46.161.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:13:02:06:6e:be:95:ca:9f:62:86:61:7b:63:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0048c6ab3d8ad2daec915e444088c6c9ddbeb0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:65:58:08:75:9d:17:cc:f7:b9:e8:af:64:
7f:8d:58:33:ea:d3:dc:b2:c9:b4:a1:f8:ee:ca:33:
82:fe:ad:e1:05:b0:15:40:ea:d6:34:fa:55:e6:da:
1e:f3:d7:19:16:91:e8:7d:23:39:58:e3:c0:ed:90:
ab:da:28:3c:41:1f:f5:a7:73:c0:c4:f6:46:e8:5c:
8e:19:31:a4:e1:f3:82:27:3b:6c:07:98:16:b4:c4:
93:3f:b3:6d:e3:52:8a:b8:80:91:a3:78:30:3a:12:
e7:6f:3c:32:75:01:2a:0a:75:5d:c7:00:e8:f6:59:
23:64:0b:4b:9a:02:5a:71:93:0f:a4:61:97:4c:18:
87:0e:b3:fb:3d:f8:55:50:42:7e:09:12:72:21:49:
bf:9a:26:3a:41:53:f6:66:80:18:e2:7d:0d:b2:e6:
1a:f3:a8:70:54:7a:98:a7:f6:46:b8:19:0f:a7:cb:
fe:20:cc:3b:13:7e:fb:d4:3e:04:2c:aa:9b:b6:d2:
3d:25:b3:07:05:23:82:a6:3f:ea:f8:39:21:d0:ac:
c9:3d:78:b7:ea:63:a0:f0:83:a0:36:b5:d7:cc:24:
fb:d3:02:6a:e0:f7:33:7f:44:50:dd:a1:d4:f1:84:
0f:09:f6:95:dd:08:e0:87:87:76:49:ce:9b:44:d5:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:C6:AB:3D:8A:D2:DA:EC:91:5E:44:40:88:C6:C9:DD:BE:B0:B2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AEjGqz2K0trskV5EQIjGyd2-sLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.4.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e2:b2:58:88:62:c9:46:f2:cc:e9:67:08:f1:c2:61:f7:fa:
19:a8:91:22:0a:07:80:c4:ae:c4:c4:ad:85:42:0b:4a:c3:96:
41:11:b8:95:9d:3a:03:36:dd:bc:4d:45:61:d9:d4:2a:d9:65:
73:62:bb:19:81:f7:d7:b2:b1:b1:eb:57:1c:a9:1c:10:eb:03:
df:bf:37:cd:06:1e:04:e8:43:df:b7:a9:29:b0:88:10:a7:62:
c6:be:20:4b:f5:52:90:e8:46:d2:d9:6e:a6:8d:49:37:3c:75:
39:80:c2:f2:34:69:13:bf:18:67:86:23:1a:39:22:72:ba:e2:
ec:e9:11:31:98:5d:1f:46:97:f2:6c:51:e8:ec:b7:56:3a:a2:
a7:e6:bf:25:09:ec:64:fb:93:d6:06:8d:35:66:d7:18:f5:56:
de:ae:16:8f:a1:56:8b:60:b2:f8:74:d5:f4:5c:8e:d4:56:3b:
b2:16:1a:03:df:56:18:59:63:89:c6:db:eb:1b:47:6b:d5:3e:
2c:55:86:53:b2:91:72:39:f8:90:a1:45:2b:ec:08:e4:28:73:
46:35:19:b9:fc:af:09:80:6b:63:9c:2b:93:13:f5:4b:f6:1e:
37:46:2c:50:7e:06:7d:8e:ad:3a:02:8c:58:ce:4c:db:2c:71:
09:18:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 10:23:34 2024 by rpki-client on console-fra.rpki-client.org