Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/D9aRxkxJTsO8YCtU7ww6L8mPbHk.roa
File: D9aRxkxJTsO8YCtU7ww6L8mPbHk.roa (raw, json)
Hash identifier: hp2EHG6JYiNShMrPfNlx5dHwJ6LXfV2MLrsTpM87+7Q=
Subject key identifier: 0F:D6:91:C6:4C:49:4E:C3:BC:60:2B:54:EF:0C:3A:2F:C9:8F:6C:79
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E5BE3E877A5E78B0CBF529FB9FF4
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/D9aRxkxJTsO8YCtU7ww6L8mPbHk.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204393
IP address blocks: 46.209.135.0/24 maxlen: 24
46.209.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e5:be:3e:87:7a:5e:78:b0:cb:f5:29:fb:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fd691c64c494ec3bc602b54ef0c3a2fc98f6c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:90:e6:a9:23:ef:55:72:a7:8f:c5:7e:e2:
f7:92:42:8c:d1:9e:16:c2:78:94:8e:fc:7d:f7:46:
ae:63:c3:c6:72:de:64:61:d1:4c:ab:42:01:87:e0:
33:11:29:13:8f:16:ac:fa:70:a9:4d:05:e7:1f:1e:
38:44:33:a2:33:4a:5d:4e:9a:8c:b8:25:8c:3b:44:
50:33:59:b7:d2:9d:b0:13:0b:b8:e1:56:51:f9:ff:
aa:20:51:a0:0b:56:8d:d6:62:75:85:d3:8b:0c:57:
f0:e4:97:b7:9a:2e:28:ac:53:36:ec:c2:f4:ea:e4:
47:86:eb:fc:19:60:d8:f6:4a:b3:21:76:01:2c:a6:
f5:ed:c8:5a:1a:3d:bd:0f:14:e7:98:aa:1c:41:24:
dd:77:98:1d:df:76:1d:dc:e9:84:2e:cf:cc:64:a2:
01:ec:c6:42:37:27:3e:c2:be:ac:da:c6:73:76:35:
1f:75:8e:f2:8d:f8:a3:7f:85:ce:16:cb:43:9f:53:
d2:e6:b3:df:2d:99:fe:97:39:38:8f:0c:60:43:aa:
23:e4:0d:77:b6:7b:71:4c:d1:00:6f:0a:7f:cd:a0:
da:bd:de:54:25:98:80:91:b8:ab:15:d6:1b:bf:cb:
53:9f:7d:55:da:11:1c:fa:16:1e:96:68:85:06:81:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:91:C6:4C:49:4E:C3:BC:60:2B:54:EF:0C:3A:2F:C9:8F:6C:79
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/D9aRxkxJTsO8YCtU7ww6L8mPbHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.135.0/24
46.209.242.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f3:16:85:d9:ac:ac:9d:9d:96:fe:f0:95:1d:f9:9d:91:5b:
44:3f:1f:87:b2:97:11:a7:d7:f7:ee:88:d9:08:0c:7f:c1:87:
37:2b:02:6b:00:6a:4e:1f:d9:cf:83:06:ae:e8:aa:c1:6f:90:
4a:fb:47:fc:88:6f:52:f9:a4:27:df:19:ab:bc:05:55:2b:99:
d0:47:3b:de:c7:4b:fe:4f:9c:e2:b1:53:3f:d0:01:6b:e5:67:
66:d4:0f:e0:6c:b0:da:ab:4f:e6:a1:71:85:37:58:17:40:8d:
03:54:03:03:7d:ba:10:22:01:30:52:8b:40:0a:6b:2f:91:ac:
91:c5:5c:85:c6:59:0b:29:aa:94:be:17:c3:3c:1c:9d:86:73:
0c:61:0f:e4:12:88:01:44:b8:4d:7c:69:41:55:82:97:6a:6e:
66:b8:d7:d6:1c:84:25:f5:7e:05:28:5b:10:73:3c:09:2c:c4:
a5:2f:52:13:b1:79:42:d4:48:5f:d5:76:e3:b4:b0:47:a5:20:
a5:94:93:1b:86:6d:db:16:1e:28:0c:43:f0:e4:5f:a9:8f:05:
49:76:8a:32:ed:ab:e8:61:b8:de:c3:59:0c:3d:8e:0d:c0:55:
08:b8:1b:ca:7d:ce:c3:b6:a5:64:0a:3b:f1:0b:72:f9:3b:e1:
ed:ec:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:29 2024 by rpki-client on console-ams.rpki-client.org