Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/1HTEdtOFPw7bsXtcUH8Xpc851zs.roa
File: 1HTEdtOFPw7bsXtcUH8Xpc851zs.roa (raw, json)
Hash identifier: 5+ZjqOy2VeKmcUbvSCFq8e49i1ar147IH/LE+9bJ3YM=
Subject key identifier: D4:74:C4:76:D3:85:3F:0E:DB:B1:7B:5C:50:7F:17:A5:CF:39:D7:3B
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 018CC26D72B8A7327954F65AAAFEB122DABB
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/1HTEdtOFPw7bsXtcUH8Xpc851zs.roa
Signing time: Mon 01 Jan 2024 00:30:01 +0000
ROA not before: Mon 01 Jan 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212523
IP address blocks: 46.22.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:72:b8:a7:32:79:54:f6:5a:aa:fe:b1:22:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d474c476d3853f0edbb17b5c507f17a5cf39d73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:19:7f:d8:87:45:45:2b:cb:67:38:23:39:
92:0b:63:49:08:f1:92:5c:f5:f2:b1:0c:80:3c:6f:
75:7d:43:d2:66:f8:c2:d8:4d:80:45:e8:54:26:52:
b4:2f:a4:42:38:28:11:2d:1c:47:0c:58:7b:86:a6:
f7:1a:d2:5f:34:c4:73:2f:ee:b3:79:55:37:86:39:
f3:98:e6:90:e3:69:ed:ce:ac:b6:ed:d9:ef:f7:26:
a6:11:24:dc:32:1c:1b:d0:73:bc:f3:c0:4a:af:f4:
e7:0e:5f:65:fb:5c:6b:53:f8:eb:be:fa:dd:18:5c:
ee:34:8e:a3:b9:4d:c9:ff:52:1c:9e:95:08:c5:33:
b7:d8:f6:b0:f1:c1:67:f0:e4:05:8c:96:26:9c:bf:
69:3a:c3:f1:2e:30:28:ba:65:95:14:41:cd:09:12:
02:5e:ad:99:50:fa:17:3e:28:c9:3c:d0:60:d5:4a:
06:c2:73:db:6d:f4:f4:8e:44:18:f8:ad:e1:ac:4b:
3e:06:04:9a:96:43:77:40:1e:18:27:15:e5:10:bf:
81:52:74:a3:c6:cf:95:ee:80:c5:44:d7:ce:02:6f:
6b:5a:54:ba:d4:80:f3:e2:d5:d0:6f:81:96:8e:66:
0c:12:86:7b:72:98:3f:f3:30:3d:05:7f:df:54:28:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:C4:76:D3:85:3F:0E:DB:B1:7B:5C:50:7F:17:A5:CF:39:D7:3B
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/1HTEdtOFPw7bsXtcUH8Xpc851zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cc:48:ff:e3:58:1f:1b:f9:41:3b:71:bc:fc:ac:3f:ef:24:
f7:c8:19:e8:33:65:5c:8a:10:eb:40:00:a2:80:0f:9a:ee:2f:
36:95:5a:9c:90:81:9b:b7:68:27:75:53:6c:1f:4b:78:cd:f8:
ec:c4:de:ff:4f:e7:ea:c5:f3:be:48:53:ea:ed:ce:e6:8f:81:
35:71:2f:5d:90:b4:d6:ea:99:7d:0f:2b:5a:f4:16:b7:3d:54:
e0:d8:d5:00:35:37:71:de:5f:be:52:05:84:18:96:c8:7a:26:
9e:30:ce:4d:70:75:59:a0:a2:02:73:ae:b8:e7:bf:7b:28:9b:
3d:e2:b6:d4:53:16:88:7b:63:ab:13:37:fd:1b:b5:3d:4a:33:
b0:ea:7a:a0:49:cc:b5:b2:59:93:e6:57:7d:e6:c6:06:7c:32:
8a:9e:19:bf:a0:d2:31:ad:18:a4:7e:29:11:83:dc:2f:9c:9b:
2c:82:6b:e8:df:04:b5:71:d2:0b:ae:bd:22:bc:ba:1b:ec:b3:
1b:e0:79:ad:2f:8c:0c:61:97:0d:8e:64:84:09:a2:96:68:42:
ac:b8:33:7f:78:93:c9:a2:46:74:dd:15:95:6c:58:55:8c:ba:
34:d3:67:10:46:9c:cd:c7:7f:58:bf:b0:5b:01:ca:a6:e0:3b:
9f:d8:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:21:41 2024 by rpki-client on console-ams.rpki-client.org