Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/fTt43zC5Wd2S6iQDNwuoykSZk7s.roa
File: fTt43zC5Wd2S6iQDNwuoykSZk7s.roa (raw, json)
Hash identifier: 1iiHUe4uiH//hCI8wrOkmqd/IzWYbYgNrS7SWrdTo0Q=
Subject key identifier: 7D:3B:78:DF:30:B9:59:DD:92:EA:24:03:37:0B:A8:CA:44:99:93:BB
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 018CC500F8CA645B38E5DF8378C00177A1DB
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/fTt43zC5Wd2S6iQDNwuoykSZk7s.roa
Signing time: Mon 01 Jan 2024 12:30:24 +0000
ROA not before: Mon 01 Jan 2024 12:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41942
IP address blocks: 46.31.0.0/21 maxlen: 21
46.31.4.0/24 maxlen: 24
46.31.6.0/24 maxlen: 24
46.31.5.0/24 maxlen: 24
91.102.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f8:ca:64:5b:38:e5:df:83:78:c0:01:77:a1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jan 1 12:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d3b78df30b959dd92ea2403370ba8ca449993bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:d3:8d:f1:db:38:65:f5:9d:e0:ec:0e:86:
93:b6:52:8f:fb:d7:27:a1:ae:8b:e4:53:3e:ca:c5:
2b:07:1f:9a:6c:a0:df:ee:26:a1:be:89:7a:0b:71:
e9:e2:47:a1:35:f8:02:d4:a1:c3:34:e5:b6:6c:fe:
a1:dc:23:6b:35:21:fc:0e:f6:ea:4e:98:e7:7e:1c:
5f:d7:17:26:97:7a:0e:57:0f:95:f8:b8:a6:03:d5:
db:6a:c6:f3:ff:ff:6f:23:68:95:b5:35:de:30:f7:
b2:54:b0:b9:a9:be:e4:57:de:72:69:a3:a6:05:37:
e5:76:60:40:bd:b5:8f:af:b5:db:81:d3:57:25:03:
bb:2c:c2:6d:4f:6b:5c:61:60:98:b5:0c:d5:ab:aa:
73:c5:16:89:5a:67:45:25:63:b1:c9:dc:f9:11:b8:
12:03:28:1f:02:a8:fb:61:2a:89:81:8b:18:07:e4:
62:f9:a6:6c:57:4a:df:1f:c3:60:b8:3b:51:34:02:
b0:ef:7f:52:d8:ee:cd:a3:fa:8d:6a:ba:ca:61:44:
f7:f0:b3:86:f8:7c:35:65:7a:bd:43:71:d1:9f:18:
c9:ef:a7:61:55:9f:52:f6:3e:b1:ca:2a:6f:53:1b:
93:e7:20:3f:a5:19:55:d2:0b:3e:20:ae:9c:ec:9a:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:78:DF:30:B9:59:DD:92:EA:24:03:37:0B:A8:CA:44:99:93:BB
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/fTt43zC5Wd2S6iQDNwuoykSZk7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.0.0/21
91.102.200.0/21
Signature Algorithm: sha256WithRSAEncryption
36:af:b2:44:5f:b4:cc:94:65:5f:a9:be:91:32:93:62:cc:1d:
ff:8d:7b:9b:8f:8e:7e:18:54:e3:fb:2d:ac:66:df:d1:89:20:
5c:13:2c:22:23:a0:ec:1a:9a:0e:01:d8:31:bd:13:1a:7c:60:
0b:5e:88:a1:f4:67:c1:a5:e1:a0:f2:89:16:69:4a:56:cf:aa:
f2:da:72:51:da:a4:1a:30:f7:9b:6a:77:e9:29:8f:07:9a:fb:
7f:60:b1:9d:a3:66:3c:d5:09:ee:67:3c:64:f8:f4:38:fa:26:
a1:34:93:be:23:74:76:da:d0:1e:ee:18:79:fa:fa:8c:28:4b:
2a:d8:f6:c1:5d:11:cf:7c:1e:92:ec:42:0a:7e:8e:84:1b:1e:
f6:ac:bf:b4:72:dc:93:c8:48:bf:c5:48:65:1d:fc:f1:5f:30:
c9:20:e9:36:e3:3d:85:95:2d:de:3b:87:78:7b:33:63:e1:d2:
25:70:6a:58:d7:63:b4:a7:b5:2e:06:8f:81:ec:06:fe:cc:69:
4f:48:64:65:6d:0d:01:d7:7a:25:b4:be:ad:86:0c:82:42:09:
72:b0:f0:42:f8:ea:d5:db:e0:dd:16:21:c2:68:c1:98:3c:7c:
ed:cf:58:cf:98:e6:db:e2:27:04:30:76:8e:a6:4e:c9:3f:ac:
62:88:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:38:36 2024 by rpki-client on console-fra.rpki-client.org