Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/_KNyKSAp9L-4GYdO2YAaSrWfw10.roa
File: _KNyKSAp9L-4GYdO2YAaSrWfw10.roa (raw, json)
Hash identifier: HKhWMkN4eIx9XbqZVe/j/ehlw3gQF8OpHoLbzxzOufQ=
Subject key identifier: FC:A3:72:29:20:29:F4:BF:B8:19:87:4E:D9:80:1A:4A:B5:9F:C3:5D
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 018CC26D6FA385193A76C55472CED55A464D
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/_KNyKSAp9L-4GYdO2YAaSrWfw10.roa
Signing time: Mon 01 Jan 2024 00:30:01 +0000
ROA not before: Mon 01 Jan 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49785
IP address blocks: 46.22.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6f:a3:85:19:3a:76:c5:54:72:ce:d5:5a:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fca372292029f4bfb819874ed9801a4ab59fc35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:38:16:19:fd:f1:44:4c:37:46:67:a9:16:
30:ce:44:e4:7a:e8:74:fa:67:82:51:e7:f3:ec:fa:
7a:b8:db:50:a0:08:ac:3b:a1:66:1e:02:c4:59:78:
96:0b:f5:31:11:97:f5:00:18:f9:f8:6d:50:76:14:
38:cb:99:aa:94:07:8e:80:d1:ba:4a:ad:39:f3:c6:
81:bb:84:1f:2a:b7:7b:b7:a7:5a:e0:83:a0:8a:d6:
41:4c:68:d8:07:81:e3:d7:d4:2f:15:9a:00:1d:cb:
31:b9:ef:f9:5d:70:98:37:e5:98:84:eb:69:2e:bb:
c4:00:39:f9:f3:72:6e:68:e9:05:89:f7:a0:33:4b:
b3:5e:7b:b1:23:59:cf:90:65:56:b5:c8:6f:18:7b:
25:43:ea:7f:61:9d:94:f4:06:a0:ed:58:79:20:8e:
0c:ee:17:aa:7d:3b:c5:0a:88:05:d3:1b:99:b7:85:
f0:bd:d8:11:c3:00:3d:2b:d8:0a:3b:0b:c4:31:34:
96:59:64:7c:9d:0d:94:07:c4:12:8c:e4:cd:b9:70:
c0:33:d7:97:25:47:96:4c:9e:4d:9d:c3:71:09:9a:
99:ec:11:15:7e:b9:fe:58:78:0e:ec:78:70:15:3d:
84:da:03:f1:d0:8d:bc:0f:d3:56:2e:e1:ae:62:3d:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A3:72:29:20:29:F4:BF:B8:19:87:4E:D9:80:1A:4A:B5:9F:C3:5D
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/_KNyKSAp9L-4GYdO2YAaSrWfw10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.174.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cb:0a:41:7a:08:01:35:b6:e3:16:da:5f:a7:13:c6:5f:ff:
52:f0:14:16:e2:cd:5b:9c:3c:57:a7:38:20:2d:1c:8b:f7:8d:
fa:56:d0:14:82:05:44:71:a9:52:4d:fd:88:7c:a9:8c:b4:5b:
23:97:c9:a4:7e:94:12:9b:fc:0c:24:97:02:67:81:4a:ea:da:
cb:e6:00:ab:28:d8:16:26:8d:b8:2f:55:d5:c6:d9:de:6e:cd:
8b:30:0b:e3:02:9d:37:9b:20:f0:5a:6f:4f:2b:e8:f6:af:da:
28:42:a5:5f:0c:bc:d4:54:9d:70:04:e7:ec:11:6d:fd:83:03:
a8:e6:a1:8f:43:b3:a1:95:16:74:75:25:7b:7b:67:cb:53:69:
a9:74:e9:57:fd:6a:f7:57:38:33:8c:7b:b1:11:d9:35:83:0f:
ab:4f:ac:f0:a3:b9:87:78:f6:c2:21:6c:79:23:a7:b6:62:6c:
61:71:7e:eb:56:e2:bb:55:93:0a:b9:99:40:f1:36:cc:f5:96:
73:2d:55:f1:dc:85:69:5f:e5:9e:da:d8:33:d1:4a:03:26:a3:
1d:9f:f9:25:54:82:d4:c7:a6:91:8a:b6:41:e8:5c:46:9f:dd:
a0:b8:50:12:7f:a0:72:ea:3f:f9:a2:b6:9f:ca:2c:6e:dd:13:
4d:bc:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:41 2024 by rpki-client on console-ams.rpki-client.org