Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/PjF0rL1oMhEgZloql5Qblt7q124.roa
File: PjF0rL1oMhEgZloql5Qblt7q124.roa (raw, json)
Hash identifier: ZtzyRG2AnKolvrhwcyOArpl82D9zb+hOs2l1YtS0Sbg=
Subject key identifier: 3E:31:74:AC:BD:68:32:11:20:66:5A:2A:97:94:1B:96:DE:EA:D7:6E
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492DBE1ACC21BA22591F8D6B2B6A083
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/PjF0rL1oMhEgZloql5Qblt7q124.roa
Signing time: Mon 01 Jan 2024 10:30:08 +0000
ROA not before: Mon 01 Jan 2024 10:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57241
IP address blocks: 46.209.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:db:e1:ac:c2:1b:a2:25:91:f8:d6:b2:b6:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e3174acbd68321120665a2a97941b96deead76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:99:ae:c6:f0:87:8d:a6:28:73:9a:19:ae:
c0:ad:23:6a:49:1d:aa:77:20:41:1a:d0:b1:4f:81:
f9:67:c6:0b:94:88:46:0e:48:34:12:de:00:23:da:
3d:6a:b7:16:f1:3a:c5:df:02:d6:22:ac:e9:b4:65:
54:5f:c4:ca:3a:98:d5:25:35:28:2a:10:ed:4d:9c:
1a:cd:47:00:cd:d3:de:6a:0d:fb:58:da:fb:5f:23:
a5:fc:fa:b1:4b:7e:fe:7b:e4:18:5b:4a:42:c4:ef:
26:36:e4:08:ec:e6:14:34:3f:49:bb:a7:ea:2a:6b:
f2:d9:cb:51:fa:b9:96:5e:51:cd:68:7a:60:01:d3:
2e:fa:40:d4:93:12:72:97:a8:4b:0d:a2:0e:f6:07:
43:48:ed:6c:92:3d:38:ca:7d:45:a4:2c:17:c2:0b:
58:b1:6f:f8:e7:09:d6:e9:c7:51:c9:9c:81:1b:6f:
eb:95:12:08:0e:fe:41:4b:1a:61:27:de:2a:bc:2e:
a2:21:e0:a3:3f:b9:13:b0:1e:15:85:db:3f:d9:71:
a9:94:c9:96:a4:48:bf:9c:74:59:c3:88:1e:75:09:
09:71:0f:9c:e5:c2:7f:b5:29:5e:e4:3d:25:ab:ad:
f3:ee:e8:06:03:6f:d7:80:33:65:bb:c9:15:a6:97:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:31:74:AC:BD:68:32:11:20:66:5A:2A:97:94:1B:96:DE:EA:D7:6E
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/PjF0rL1oMhEgZloql5Qblt7q124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2e:7a:d4:15:c9:ff:3b:cb:53:af:e5:f4:a4:13:a0:ca:6d:
76:bf:74:68:bc:03:4d:fe:22:b3:1e:b0:c7:af:80:db:fb:49:
b1:70:4a:e2:5f:aa:58:97:31:60:76:38:dc:66:90:91:12:10:
28:a6:86:07:4f:48:20:29:15:26:9a:80:8c:1f:df:8b:fb:1e:
74:96:23:87:e6:ae:5b:23:1c:a2:df:1a:fd:d2:0f:e9:08:c6:
80:7b:8d:e8:db:c9:94:e5:b5:fc:4d:3c:e2:19:de:e5:97:f4:
1f:00:75:6d:4a:9f:11:01:0e:1b:1c:ca:5a:14:40:68:82:82:
bf:68:98:6f:d7:b8:69:b7:45:fe:68:8d:11:3b:aa:38:f6:15:
b2:5d:ed:74:52:a2:3f:a9:05:60:35:59:eb:09:ce:42:57:64:
ea:21:ac:a7:a3:7f:a8:a8:1b:78:d3:4b:49:69:36:99:08:e8:
22:b5:91:49:db:68:fd:61:00:aa:44:df:73:75:bb:1a:8b:c5:
d0:60:9e:ad:a8:9b:fb:b4:e9:f8:f1:f7:29:c4:f0:a3:ed:e2:
e3:20:6e:6c:3a:f6:c6:c3:44:1c:d3:92:b3:8e:86:f7:4a:31:
5d:09:a3:47:7d:e1:7d:9d:86:b0:ab:36:39:15:62:6c:de:c0:
79:0b:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:25 2024 by rpki-client on console-ams.rpki-client.org