Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/j6ASnjcrErt1QLCRxNqcBq63-ws.roa
File: j6ASnjcrErt1QLCRxNqcBq63-ws.roa (raw, json)
Hash identifier: ArPhcTuxR69GCD4t4yU6JgzJGEInUjA/DpQ9eGA0uq4=
Subject key identifier: 8F:A0:12:9E:37:2B:12:BB:75:40:B0:91:C4:DA:9C:06:AE:B7:FB:0B
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 018CC94E6A8C6282574D5C1151C7EDA90F31
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/j6ASnjcrErt1QLCRxNqcBq63-ws.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51514
IP address blocks: 46.31.48.0/21 maxlen: 24
185.79.82.0/23 maxlen: 24
2a02:23e8::/32 maxlen: 48
2a02:23ea::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6a:8c:62:82:57:4d:5c:11:51:c7:ed:a9:0f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fa0129e372b12bb7540b091c4da9c06aeb7fb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:41:ff:7a:f4:91:9d:e6:2e:97:c9:6a:4a:
46:07:9d:2f:27:e0:ea:32:8d:5a:f1:0f:82:f0:9f:
d5:26:cf:7c:84:30:1b:e0:85:47:dc:66:ae:3e:77:
0e:62:3a:a8:4e:54:99:94:c1:29:24:b9:01:e1:e4:
25:83:92:1b:56:51:1c:2b:da:5e:b8:13:55:91:3e:
f9:e8:46:e7:9f:4c:f2:e3:58:3d:b1:62:7c:46:65:
31:58:a1:3c:28:82:85:25:63:3e:1e:94:aa:a6:d9:
b0:78:38:80:0a:8f:70:51:4e:fc:86:73:ad:8a:19:
8e:ed:7e:66:6e:9c:55:e2:7e:3e:5d:da:6f:9b:51:
cc:5d:b2:7c:c3:18:d0:2a:f4:63:b2:d5:95:66:c5:
33:06:cf:ca:d6:44:22:62:cd:c5:93:18:70:91:c6:
87:51:52:06:7f:64:cf:7e:83:55:97:4b:f9:3f:54:
60:0d:e7:ca:08:c9:c5:2f:db:4a:c7:4f:18:5e:d9:
95:81:32:7d:be:b9:86:04:96:40:01:a2:6a:87:78:
10:b0:8a:33:c4:27:51:81:82:22:be:d2:6b:f6:4d:
51:5a:4e:87:b9:67:ed:1b:c9:62:9d:65:fe:88:8c:
ca:18:a8:d1:e6:bd:d4:ec:19:7a:12:27:f2:cb:cf:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:12:9E:37:2B:12:BB:75:40:B0:91:C4:DA:9C:06:AE:B7:FB:0B
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/j6ASnjcrErt1QLCRxNqcBq63-ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.48.0/21
185.79.82.0/23
IPv6:
2a02:23e8::/32
2a02:23ea::/32
Signature Algorithm: sha256WithRSAEncryption
03:b9:2e:00:0f:ba:79:1a:37:de:fc:3a:18:e6:68:67:49:c8:
76:a5:fd:a9:4a:c2:9e:d3:b4:8e:6b:4a:94:39:fe:49:36:c4:
40:d4:af:f7:8d:c6:53:c4:f6:36:a5:b5:1d:03:b2:48:07:31:
12:a1:16:8c:8d:17:3e:4e:0b:38:6f:73:f8:1f:bc:2c:9e:c2:
08:c7:89:4d:78:17:81:11:4e:ff:74:e8:66:66:54:30:75:b1:
82:bc:48:9a:3b:ca:9c:fb:b5:c8:c7:f3:25:b4:c6:52:d9:8a:
86:e0:de:c1:b3:31:73:e9:97:e3:9f:56:cc:8a:c5:ec:d5:16:
5a:15:ae:34:e5:9e:bf:bf:ab:d6:c9:ab:ec:45:f9:a0:50:b7:
e5:ca:52:6f:ce:87:b0:f0:b9:59:13:f4:8c:ec:79:0b:47:12:
4f:d1:26:d7:e4:fb:81:5b:c6:b9:04:80:d1:f2:c7:6e:66:93:
ab:37:8e:58:17:29:9b:48:69:64:61:11:f6:05:3c:c6:26:cd:
1c:fc:70:49:94:05:2e:14:27:81:06:12:d0:fa:ce:db:b3:f0:
24:a1:bb:0f:e4:1b:10:f0:b4:ee:9f:ca:0f:a0:6b:08:bc:36:
f2:45:15:6c:fd:a3:80:62:d2:93:e5:b0:38:00:fc:e1:02:00:
3c:7f:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:11:32 2024 by rpki-client on console-fra.rpki-client.org