Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/1VHog9gXNkPkGxGH7YI0lbzEmfY.roa
File: 1VHog9gXNkPkGxGH7YI0lbzEmfY.roa (raw, json)
Hash identifier: zw8agcYN8xE5N75PKEziy6EbiC7wpemt9KffXT8K+KM=
Subject key identifier: D5:51:E8:83:D8:17:36:43:E4:1B:11:87:ED:82:34:95:BC:C4:99:F6
Certificate issuer: /CN=9caf9a0d78a6811cd1686deb117788af866c8091
Certificate serial: 018CC94E5360631F92C296C83CCC0279A05E
Authority key identifier: 9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/1VHog9gXNkPkGxGH7YI0lbzEmfY.roa
Signing time: Tue 02 Jan 2024 08:33:22 +0000
ROA not before: Tue 02 Jan 2024 08:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12494
IP address blocks: 46.148.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:53:60:63:1f:92:c2:96:c8:3c:cc:02:79:a0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9caf9a0d78a6811cd1686deb117788af866c8091
Validity
Not Before: Jan 2 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d551e883d8173643e41b1187ed823495bcc499f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:7b:dd:7f:9d:4a:f4:bd:3a:58:7c:b6:cf:
87:64:f5:62:ae:f9:46:0c:75:d1:0a:75:aa:1a:6d:
1d:b3:46:ae:64:73:56:31:c6:1d:18:25:59:fa:2d:
ad:47:65:3f:33:90:83:fd:66:36:ef:45:d3:33:d4:
6d:66:3b:97:0d:b2:2d:db:5f:97:36:32:a0:a5:89:
e0:1f:66:b4:44:75:46:60:ea:7c:48:3f:da:25:10:
41:d1:89:09:fe:48:2b:d7:08:ed:bf:70:f5:31:f4:
f5:6a:28:5e:32:f1:27:74:86:a6:29:5e:e0:45:9d:
e1:77:2a:71:53:24:64:65:1c:5a:4d:c9:7d:7e:85:
96:22:5d:f9:df:08:91:b5:b0:0d:bf:4b:d6:e8:5f:
17:37:e8:75:a9:cb:ae:9a:57:e5:c5:3b:10:f1:78:
1d:97:89:1f:66:5e:67:d7:3f:f5:2a:2e:d9:19:7a:
6d:6b:d0:31:08:fb:c4:31:a5:52:88:84:7f:b2:04:
f3:72:c8:70:06:27:75:64:17:6f:6b:44:d6:23:ab:
de:70:8f:7c:b0:48:75:40:fb:10:1f:ef:18:10:3d:
43:ad:20:cd:53:63:25:91:b2:ec:95:9e:0c:f8:39:
cb:d5:53:f2:67:e8:80:b1:43:60:37:d7:27:94:33:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:51:E8:83:D8:17:36:43:E4:1B:11:87:ED:82:34:95:BC:C4:99:F6
X509v3 Authority Key Identifier:
keyid:9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/1VHog9gXNkPkGxGH7YI0lbzEmfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.212.0/22
Signature Algorithm: sha256WithRSAEncryption
25:92:d0:4c:ea:e5:c2:ce:aa:02:e4:ae:8c:e8:b8:cc:66:3f:
56:3b:4e:e0:3a:10:45:5b:04:ee:e5:79:bb:b0:0d:02:7f:3f:
fd:e5:ae:2a:a9:ca:48:e3:07:31:91:66:68:74:d0:c6:66:8a:
bf:b0:1e:36:ae:ac:1d:9c:27:51:ca:ba:19:c0:02:15:a8:81:
d7:7c:4a:b2:cc:8c:54:2d:7e:fe:dc:65:40:05:ee:b7:9c:88:
0d:ce:72:b1:f1:55:6e:bf:96:f2:c5:f4:26:e4:1f:ec:dc:e1:
21:76:29:72:e0:d2:ad:d2:b8:78:e2:4d:12:a3:3f:2b:7a:65:
c6:ba:f6:10:f2:2d:6e:97:40:b5:b7:0d:ac:5f:64:7b:60:c6:
61:21:e5:d6:85:fc:bb:73:3e:97:69:8f:46:6b:67:a2:3a:3b:
89:f9:fa:c5:84:ec:7c:b7:c9:f9:cd:b3:98:05:8d:f6:7a:b6:
08:ca:83:fe:52:67:1c:b7:18:50:d6:0b:d1:d6:fe:68:b3:a4:
88:b6:c3:cf:2e:f3:eb:11:92:2d:14:cd:b7:18:62:f5:02:cb:
44:08:10:7a:ca:31:0c:a0:0a:72:3b:d1:f2:e8:5b:29:07:a7:
71:9c:12:f0:73:9a:03:7c:7e:13:76:63:2a:77:4d:ef:3e:68:
d2:79:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:57:36 2024 by rpki-client on console-fra.rpki-client.org