Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/2GjJw2976bzdtLaY8TiwGo7AE90.roa
File: 2GjJw2976bzdtLaY8TiwGo7AE90.roa (raw, json)
Hash identifier: CDkI7Qd6bLfRCLyHrHQp9qOUeS2SBbN86b7V/j8bjsc=
Subject key identifier: D8:68:C9:C3:6F:7B:E9:BC:DD:B4:B6:98:F1:38:B0:1A:8E:C0:13:DD
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 018CC56E7B9DBF1C100227C567D44D0F7BAA
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/2GjJw2976bzdtLaY8TiwGo7AE90.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 65989
IP address blocks: 46.221.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7b:9d:bf:1c:10:02:27:c5:67:d4:4d:0f:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d868c9c36f7be9bcddb4b698f138b01a8ec013dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:60:78:bf:3d:07:49:fe:c1:8d:e2:36:27:
6b:8d:17:e6:ff:7c:9d:02:8c:b7:55:3a:41:ba:fb:
23:c6:09:b7:39:da:17:c2:19:4a:17:50:02:0d:c9:
91:05:9e:50:3a:05:14:67:18:49:fc:1d:e8:c7:35:
c0:c7:bd:61:8a:15:ce:71:41:68:74:5c:0b:fc:bc:
a4:0e:bd:14:c1:11:d3:de:5e:83:b3:45:c7:78:2e:
af:06:3f:42:d2:66:e7:99:0c:f1:48:02:24:8e:fb:
16:41:24:b4:64:0d:96:75:ed:ca:a5:6c:3c:0a:49:
75:69:c2:3e:5f:ed:e7:c1:27:b2:a1:a4:d3:88:50:
1a:0e:e4:c0:92:19:c2:d9:67:09:fc:3a:23:ed:fd:
57:5d:cf:c5:5b:0a:f9:a9:e2:6a:e5:e2:67:e8:7c:
e9:b7:bf:96:43:28:03:e7:15:e5:29:43:49:75:8f:
3f:f7:e2:da:3d:e5:c4:72:79:50:9e:48:60:4d:be:
9c:c7:11:4a:9d:ee:60:b6:fd:b4:ae:cb:a1:15:c0:
4b:c7:73:ff:54:91:af:42:e1:9e:74:2d:ea:3c:7a:
40:85:f0:d0:5a:22:1d:4b:bc:dd:38:48:c5:54:cc:
46:63:c9:a7:52:d6:57:8b:8e:8d:a2:9e:77:a6:0e:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:68:C9:C3:6F:7B:E9:BC:DD:B4:B6:98:F1:38:B0:1A:8E:C0:13:DD
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/2GjJw2976bzdtLaY8TiwGo7AE90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.221.6.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8e:6d:2f:81:44:60:ea:cc:6f:57:ab:db:08:34:5e:0b:3e:
57:4b:e4:e5:fb:67:be:a0:6c:80:05:9d:51:d1:67:ca:53:16:
60:7a:a0:e0:0c:e0:34:67:37:3f:6d:e3:d4:da:c8:5d:e8:4d:
4c:46:5b:e6:09:5b:80:b0:b5:3b:58:be:97:a2:ad:87:6e:dc:
29:a2:57:da:60:e3:5b:0c:1a:c5:08:11:21:4c:5e:20:0b:ef:
67:9e:05:12:bc:c3:52:d4:96:bb:91:07:14:24:26:c3:2c:ad:
a2:34:df:7a:fb:75:fd:60:d2:90:31:7a:58:d9:c8:e6:4e:9b:
dd:86:06:9c:4b:ee:4b:64:80:7e:28:da:c3:77:86:83:fa:72:
14:18:a6:3f:33:52:fc:fb:ef:c2:59:a1:c5:5d:89:38:e3:b4:
dd:6a:34:c5:b7:ea:d3:68:a1:f5:4f:a2:8c:5f:79:a6:e0:7f:
8e:47:91:ab:dc:e3:dd:9a:ec:34:66:3c:ef:25:9a:76:65:7b:
44:cd:98:3f:0c:fb:fb:44:03:4c:3f:5d:30:d7:45:04:2d:01:
2d:c9:82:4a:a3:0b:c7:79:a7:1c:a3:4e:1b:0e:6c:ed:48:29:
d2:34:af:03:97:e6:78:72:0b:52:01:f2:46:c4:d4:8e:64:ba:
30:34:56:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:33 2024 by rpki-client on console-fra.rpki-client.org