Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/KqmeXwhk_pB4xkGxpNTTDTeiS90.roa
File: KqmeXwhk_pB4xkGxpNTTDTeiS90.roa (raw, json)
Hash identifier: eMpxO11wdE075wjBA9FLiiVnMrmiLtPj0r0REiNl7bo=
Subject key identifier: 2A:A9:9E:5F:08:64:FE:90:78:C6:41:B1:A4:D4:D3:0D:37:A2:4B:DD
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018F013C6EC4038AEBD218FDD60D6B8B959C
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/KqmeXwhk_pB4xkGxpNTTDTeiS90.roa
Signing time: Sun 21 Apr 2024 15:18:08 +0000
ROA not before: Sun 21 Apr 2024 15:18:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 46.148.35.0/24 maxlen: 24
46.148.36.0/24 maxlen: 24
46.148.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 13:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:01:3c:6e:c4:03:8a:eb:d2:18:fd:d6:0d:6b:8b:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Apr 21 15:18:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aa99e5f0864fe9078c641b1a4d4d30d37a24bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:d2:e6:5b:10:a3:5c:da:28:d9:c9:aa:cf:
da:7c:86:86:fb:7e:34:17:66:4b:9c:38:ee:d2:cc:
89:dd:f8:31:3d:70:3e:75:c4:c3:5a:1b:9e:6d:2f:
9e:da:ab:8a:ea:da:23:7e:38:e7:df:5f:dc:6d:39:
66:d6:df:a3:cf:5b:a7:23:2b:44:83:99:a2:e1:80:
d3:0a:5b:9e:49:48:ab:16:4f:23:6d:b2:fb:47:dd:
ce:e6:c5:a9:49:af:7b:ec:42:57:d1:0a:12:93:15:
b2:24:5d:a8:09:14:29:1a:ac:69:51:e2:8e:86:ca:
9b:69:ad:e7:62:e5:a8:0c:36:2c:cd:f1:b3:2d:f8:
5c:d9:17:3d:d4:49:82:4e:78:57:0e:7a:cb:2f:c1:
94:30:b5:46:a1:f6:6c:aa:be:d5:20:71:5d:16:bd:
87:9d:9c:6d:c6:68:fc:25:a9:7d:0c:fc:bd:40:89:
88:ea:30:7c:3d:e0:56:c5:51:78:e5:ee:e2:4b:01:
ce:ec:f8:4a:11:77:d7:ff:83:ac:cb:94:f2:5f:83:
d9:9d:03:5b:ea:40:60:d8:6b:a1:d2:48:61:8f:1d:
38:98:02:aa:dc:e2:5d:07:c7:a5:61:52:f8:ab:14:
90:89:24:8e:2b:99:cb:f7:99:90:99:e2:94:bb:12:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A9:9E:5F:08:64:FE:90:78:C6:41:B1:A4:D4:D3:0D:37:A2:4B:DD
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/KqmeXwhk_pB4xkGxpNTTDTeiS90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.35.0-46.148.36.255
46.148.45.0/24
Signature Algorithm: sha256WithRSAEncryption
54:eb:c8:a8:2b:e8:f3:53:c3:99:08:2f:39:d2:99:c0:c1:73:
d7:54:5f:9d:6f:37:10:ba:25:7b:17:f2:f6:c8:eb:1a:90:68:
85:0f:5e:c4:56:96:e5:b6:3d:59:bc:4a:fc:72:9e:e6:2c:69:
2e:a8:3e:a6:5c:05:54:44:58:33:d0:8c:51:25:a6:35:ee:98:
3f:19:e9:0e:19:c9:ab:67:2b:ed:d1:2c:1b:97:9d:d4:53:6c:
68:cb:04:7c:c1:16:72:8a:22:55:c3:c1:3b:56:35:63:bb:15:
78:7b:1c:99:17:8e:2a:e3:dd:8d:db:08:d2:67:0f:1b:a0:e1:
5e:84:e7:f2:2a:be:1b:7e:2a:0c:f5:8d:1f:a8:57:4f:29:ff:
d9:b1:6c:60:13:89:91:e7:8c:d0:91:f6:fb:a3:70:00:b3:a9:
61:0b:75:4f:64:fc:d6:53:f2:00:ee:62:45:26:c0:22:07:81:
b4:86:b0:d3:30:aa:09:44:22:15:03:67:97:9c:da:ee:68:76:
76:09:c5:26:23:f0:30:36:e0:ef:b9:91:0e:b4:52:3b:de:51:
44:23:b6:98:13:c0:57:de:60:cf:b4:e2:e4:cf:28:07:98:da:
78:90:60:fd:63:29:99:bb:59:81:5e:a0:c4:c9:c5:8a:91:30:
3c:37:16:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 29 19:08:58 2024 by rpki-client on console-fra.rpki-client.org