Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/RsV9Lmn9X03tMTdOJayM7n8GOIU.roa
File: RsV9Lmn9X03tMTdOJayM7n8GOIU.roa (raw, json)
Hash identifier: f0BBAwxYMbpGjfOAZX61Ihc95Lu3ra5BRRNFjyDWnC0=
Subject key identifier: 46:C5:7D:2E:69:FD:5F:4D:ED:31:37:4E:25:AC:8C:EE:7F:06:38:85
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018DF90D3358CCB5661708BA575ADEA4A7F9
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/RsV9Lmn9X03tMTdOJayM7n8GOIU.roa
Signing time: Fri 01 Mar 2024 08:06:48 +0000
ROA not before: Fri 01 Mar 2024 08:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216235
IP address blocks: 84.47.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:0d:33:58:cc:b5:66:17:08:ba:57:5a:de:a4:a7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Mar 1 08:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c57d2e69fd5f4ded31374e25ac8cee7f063885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:e5:af:14:b4:dd:84:eb:e3:20:19:a1:9d:
26:b6:8a:0a:63:8f:32:a3:9b:b9:56:72:2d:e4:86:
ff:48:95:9c:e8:fc:8e:f0:a2:7c:ad:51:c4:63:42:
3a:8a:80:51:9c:55:12:af:f4:4b:4b:47:c7:2b:5f:
fd:a3:72:39:3b:cb:7b:e6:f6:b1:6c:5a:6e:f5:1f:
32:b1:3b:ff:4c:4a:b7:24:f5:cb:8f:2b:9a:6f:7b:
4d:cd:d4:3a:e8:f8:a8:e9:8d:f7:8a:c4:6f:70:f3:
df:27:be:47:66:95:98:e0:9b:f7:b3:0e:0d:75:40:
36:bf:da:1b:94:89:aa:73:fa:d0:cc:7e:43:d1:29:
a5:f6:57:99:b3:bd:68:07:b3:a7:1d:39:7e:8f:02:
02:1c:63:4d:a0:47:72:d3:20:89:fc:e9:22:6a:36:
f6:d7:cc:1b:b8:cf:64:dd:c1:2e:ee:fa:94:a5:8d:
19:aa:18:e8:d8:73:5c:4b:86:91:79:18:a1:47:76:
1a:6b:ee:93:54:e8:99:f4:f0:25:23:a6:fd:da:ab:
8a:da:b2:f4:0b:4f:f9:48:bd:ef:5f:bc:ef:ea:d2:
b9:60:8e:ee:b1:4d:d7:41:50:5a:30:16:35:00:0f:
0c:3c:ce:e6:7e:bf:cf:fd:78:3a:cd:d2:11:34:fe:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C5:7D:2E:69:FD:5F:4D:ED:31:37:4E:25:AC:8C:EE:7F:06:38:85
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/RsV9Lmn9X03tMTdOJayM7n8GOIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.172.0/24
Signature Algorithm: sha256WithRSAEncryption
89:51:1c:f9:e1:24:af:8b:79:35:6f:10:90:5f:25:ff:dd:d4:
bc:29:dc:c1:7b:59:58:fa:5e:47:48:bd:c2:08:9c:7c:85:76:
35:8f:ca:aa:cc:b5:ef:df:7b:6b:84:47:89:8d:d6:90:a5:86:
21:61:2f:b4:dd:a3:4c:4a:a2:b6:70:74:e8:d4:fd:5f:04:33:
31:f5:75:9e:26:6d:7c:e2:da:6e:9b:0f:10:d6:07:32:67:6b:
08:cf:0f:b4:cb:7d:df:78:0b:6e:22:3f:01:41:84:d8:e6:53:
b9:2c:1a:a2:ba:bb:26:e9:db:15:4d:9e:d6:b3:4d:90:86:81:
5c:c4:78:75:5d:f2:c0:64:f0:00:d1:24:89:a5:a7:e5:9c:1d:
09:c8:97:55:53:b3:3a:f6:da:d3:7e:65:84:6b:90:4e:f3:89:
0d:12:7c:bd:61:c5:43:45:d1:93:c7:03:4d:8a:36:e6:60:96:
2d:4d:05:dd:93:e8:8f:52:71:1d:36:71:79:7b:f6:9b:38:57:
92:11:71:4b:15:5e:91:c0:8f:5c:ad:7c:f2:e2:e7:bf:0c:19:
ea:e6:54:46:85:0d:9e:1e:46:9a:e8:7b:6b:82:9c:8b:b0:41:
36:25:73:56:da:12:d3:eb:35:b1:60:fb:c3:24:12:e1:20:a4:
68:b7:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:48:55 2024 by rpki-client on console-ams.rpki-client.org