Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/htmwoq6Ybfz4ANEgU6_avtbHSuU.roa
File: htmwoq6Ybfz4ANEgU6_avtbHSuU.roa (raw, json)
Hash identifier: CchTUUvBxvtVLdxCoDb9xCF7MThS2wjj62jN/12RfYw=
Subject key identifier: 86:D9:B0:A2:AE:98:6D:FC:F8:00:D1:20:53:AF:DA:BE:D6:C7:4A:E5
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 018CC5005EFC2B16B90F763AEEB8095190C8
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/htmwoq6Ybfz4ANEgU6_avtbHSuU.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48702
IP address blocks: 83.137.243.0/24 maxlen: 24
83.137.242.0/24 maxlen: 24
83.137.244.0/24 maxlen: 24
83.137.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:5e:fc:2b:16:b9:0f:76:3a:ee:b8:09:51:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86d9b0a2ae986dfcf800d12053afdabed6c74ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:f9:fa:b0:b3:ec:e6:e7:7b:c8:a5:6e:b8:
f7:49:d9:07:0e:7e:5d:62:7d:7e:1e:34:10:35:30:
2c:b9:1c:67:43:11:c2:c2:2d:bf:66:44:82:45:ee:
3d:89:b7:26:2f:3c:d5:a7:b0:88:30:fa:e0:3f:a7:
09:c3:70:ca:f3:13:96:0e:ba:02:b9:38:db:db:4e:
63:fd:78:81:fb:60:2b:c7:36:b9:23:51:d9:58:10:
e1:ed:54:29:9d:d3:e3:1e:f3:34:99:76:9b:32:17:
ae:10:c9:6f:34:ab:7e:a3:3b:6a:67:20:d1:cf:7b:
2d:76:0f:df:72:0e:cd:f6:42:ed:d0:72:25:54:8d:
16:d0:59:7e:1c:b6:fa:f5:94:27:ef:f3:2f:3a:49:
47:75:a6:1c:11:fc:06:f0:e1:e7:47:25:17:9e:40:
00:18:e5:e7:65:cd:b5:27:07:46:fb:26:e8:07:fb:
d4:e2:6a:61:ed:7e:46:bf:61:b2:6c:6d:69:ff:62:
1d:e2:26:71:08:af:d9:a7:9c:ef:99:f6:dd:1b:2c:
0a:c8:19:5f:e8:77:39:b5:ed:3b:23:95:00:3d:49:
56:45:3d:d7:18:79:fe:38:72:10:c8:46:61:f6:c7:
ad:a4:0a:0c:bc:22:0f:3d:d9:ff:89:8f:e9:d2:cd:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:B0:A2:AE:98:6D:FC:F8:00:D1:20:53:AF:DA:BE:D6:C7:4A:E5
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/htmwoq6Ybfz4ANEgU6_avtbHSuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.242.0-83.137.244.255
83.137.247.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0b:38:93:c4:74:c7:58:c1:d9:1a:44:31:31:dd:1f:e4:6f:
41:d3:12:19:07:8f:4c:72:38:7e:19:07:ca:ea:9a:ae:af:d1:
0e:87:c0:b2:cd:96:56:d7:9c:6d:db:36:0b:e0:c5:d3:a1:bb:
c5:e6:61:45:19:b1:d5:32:cf:3f:68:be:18:6e:1d:7f:22:7b:
e8:72:53:a4:9e:ef:ed:e2:60:e7:f1:af:b9:de:c9:de:9e:dd:
9d:d9:5d:7b:a1:2f:38:c0:eb:03:4f:9f:9c:1d:98:3b:49:f2:
30:07:48:ef:9b:1d:1a:b3:fb:eb:9c:77:42:d1:2d:4e:e5:ad:
fe:d8:28:f0:67:88:33:50:05:d5:6b:1f:3b:8b:7f:49:02:28:
32:d3:d1:ab:b4:e1:e1:1c:74:d9:dc:a0:15:46:3c:75:53:91:
55:41:cd:e4:46:af:10:e4:97:43:44:4b:f3:d1:46:b9:fe:36:
04:ee:1a:27:16:80:d7:5b:a0:79:dd:f5:e5:4d:18:60:e6:ea:
e2:0a:2b:09:bf:4c:34:9d:1a:4e:cc:86:92:0d:c4:6d:b2:0a:
f4:ce:c7:38:85:ba:b8:1e:14:44:d3:68:1d:55:ec:66:c1:1c:
4c:00:61:cc:71:19:88:c2:64:19:77:02:d3:f8:e5:ec:06:90:
fe:a3:59:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:32:36 2024 by rpki-client on console-fra.rpki-client.org