Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/RqzU4bO-wPg8xEpSLzZ5CpN8AeQ.roa
File: RqzU4bO-wPg8xEpSLzZ5CpN8AeQ.roa (raw, json)
Hash identifier: +ETCKG1R8zYIY/9m7rGuF80mOtbn1yNfyB+Nz4uIxnw=
Subject key identifier: 46:AC:D4:E1:B3:BE:C0:F8:3C:C4:4A:52:2F:36:79:0A:93:7C:01:E4
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 018CC8DFB37F38E499A1F530B7576B6B0E27
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/RqzU4bO-wPg8xEpSLzZ5CpN8AeQ.roa
Signing time: Tue 02 Jan 2024 06:32:32 +0000
ROA not before: Tue 02 Jan 2024 06:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201791
IP address blocks: 45.155.212.0/22 maxlen: 24
195.35.114.0/23 maxlen: 24
185.103.76.0/22 maxlen: 22
2a06:2a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b3:7f:38:e4:99:a1:f5:30:b7:57:6b:6b:0e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46acd4e1b3bec0f83cc44a522f36790a937c01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e6:51:07:9e:db:45:6f:12:6a:86:81:1f:2c:
ec:89:24:83:13:3d:70:10:a9:d0:b7:2f:20:50:8c:
5e:d0:46:f5:c7:28:9b:cb:c1:1a:c4:da:cb:f4:af:
e4:70:92:58:01:e8:72:27:09:85:48:09:d8:55:a0:
d8:26:78:e9:c8:1a:44:ef:7b:8b:11:fb:c5:44:f0:
89:d4:29:01:d6:e2:2f:95:eb:a2:c4:c4:74:c9:82:
7a:a3:32:80:c8:3a:c5:fb:85:40:60:a9:79:3d:de:
2e:47:1c:91:d8:6a:d7:a4:c4:bc:95:67:69:90:0f:
5e:ae:b6:0c:d8:9c:33:da:64:22:80:f7:57:fe:3a:
70:28:b0:04:a7:cf:65:5e:06:d8:d0:24:79:4c:5b:
73:bb:8c:1b:48:5e:e8:ec:db:d3:76:08:df:3f:bb:
76:eb:ac:6f:77:17:07:18:2a:48:52:a4:aa:2c:2b:
38:77:99:95:38:5a:a2:f1:07:f9:e7:3b:ca:6b:d0:
c7:6e:2a:62:0b:d4:14:7f:da:2e:09:e7:1e:8e:52:
3e:3c:16:da:28:60:ff:31:4b:73:b2:a1:fa:f0:c4:
2d:55:3e:ee:70:d6:e9:73:27:2c:e3:8a:d7:9a:26:
d2:05:f7:61:6e:54:01:fe:47:78:f9:0b:ff:b5:0e:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:D4:E1:B3:BE:C0:F8:3C:C4:4A:52:2F:36:79:0A:93:7C:01:E4
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/RqzU4bO-wPg8xEpSLzZ5CpN8AeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.212.0/22
185.103.76.0/22
195.35.114.0/23
IPv6:
2a06:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
6c:68:5e:cd:b0:b5:0d:2e:b2:ac:61:e8:92:2a:03:19:ee:12:
9f:a9:74:79:6e:b9:7b:c5:04:aa:c6:6c:c1:5a:7a:e9:9f:a0:
99:3d:da:0b:59:ad:4b:2c:90:f0:17:34:5c:81:36:5c:20:cd:
29:6e:38:fa:f3:d2:55:26:98:93:4a:af:55:78:9d:05:f3:e8:
8a:8a:bd:eb:09:34:6e:6e:4a:6b:f6:fb:68:0f:1f:cd:81:15:
60:97:f5:5b:1c:e9:d4:d6:aa:89:b9:49:f3:f4:c3:c5:7d:72:
05:7b:6a:8c:8b:16:0b:d6:33:ec:49:57:13:5a:9c:ab:b0:79:
71:c5:de:f6:46:88:28:85:fc:04:63:a7:9b:3b:a6:c0:17:0c:
c4:21:ab:35:16:38:17:1f:89:91:ca:c9:89:bc:77:53:58:f6:
84:3a:37:d0:bb:5f:ae:db:f6:0c:e9:ea:5b:e7:1c:29:b3:e6:
74:72:f5:1d:52:b5:6e:33:37:34:d2:a0:fa:54:ab:0a:d3:58:
92:76:e4:26:40:77:cd:2a:39:4f:ab:14:76:c2:18:67:9c:1f:
68:74:66:37:0f:15:b7:51:1f:18:59:23:fc:56:4d:42:6b:9f:
f2:d5:5e:48:75:dc:31:de:87:bd:ca:27:2c:3d:2a:f4:04:0a:
40:9d:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:51:06 2024 by rpki-client on console-fra.rpki-client.org