Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/0SifAl25xuvaFBgVZeN_Pmex7n4.roa
File: 0SifAl25xuvaFBgVZeN_Pmex7n4.roa (raw, json)
Hash identifier: Wf5HEDjS/zLGEAfefwGRzORxY1QEtqTQSfiAp1h4ixA=
Subject key identifier: D1:28:9F:02:5D:B9:C6:EB:DA:14:18:15:65:E3:7F:3E:67:B1:EE:7E
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018CC3B6D37F69CAFEEEDC594C7793476407
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/0SifAl25xuvaFBgVZeN_Pmex7n4.roa
Signing time: Mon 01 Jan 2024 06:29:47 +0000
ROA not before: Mon 01 Jan 2024 06:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 158.46.179.0/24 maxlen: 24
158.46.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d3:7f:69:ca:fe:ee:dc:59:4c:77:93:47:64:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 1 06:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1289f025db9c6ebda14181565e37f3e67b1ee7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:62:40:34:44:40:1f:75:6a:b9:e4:e1:7b:
c7:0d:90:98:05:b4:69:0f:0c:9c:62:c2:f2:a0:c1:
c8:86:d2:58:e9:6b:c4:5e:7c:0d:e9:62:da:f4:a9:
de:38:4f:af:5d:e9:5d:e4:c3:1d:0d:54:24:c1:02:
e4:2e:aa:7c:d0:a4:62:0b:18:95:47:d2:11:50:b1:
82:97:2a:5b:4c:5e:9f:13:c8:df:00:a3:2a:dd:a2:
d1:e6:f2:b8:b1:4e:5f:7a:f2:9b:c8:fb:03:d4:ca:
15:63:46:e8:75:eb:97:69:51:6e:01:6e:47:74:2b:
91:55:53:bb:0b:cc:31:ce:43:ae:f2:ad:ab:f0:72:
38:c6:dc:6a:d6:7d:1e:ae:9d:dc:f7:ae:13:ce:39:
74:5f:76:f1:41:21:d5:13:92:f2:2e:9c:55:70:a1:
7d:bf:d5:2a:10:a6:c4:6b:9d:dd:56:41:4a:0b:67:
d6:68:41:63:82:d8:f6:85:3d:ed:c8:0f:db:43:95:
02:c4:33:d8:db:5b:87:f1:22:38:21:94:8a:06:02:
30:19:53:34:96:68:f0:4f:83:30:9c:bb:53:af:96:
90:3f:eb:10:31:3a:b1:8b:f5:dd:74:f1:97:92:31:
27:56:de:59:02:14:9c:95:21:71:b7:cd:46:84:2a:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:28:9F:02:5D:B9:C6:EB:DA:14:18:15:65:E3:7F:3E:67:B1:EE:7E
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/0SifAl25xuvaFBgVZeN_Pmex7n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.178.0/23
Signature Algorithm: sha256WithRSAEncryption
94:86:61:de:38:b8:49:a4:0c:4d:5f:63:6c:8a:e8:43:63:21:
b6:a3:8c:c3:90:4b:38:36:35:1d:0c:79:2b:db:68:9b:9f:4d:
05:aa:98:10:eb:73:41:c8:53:32:7e:92:03:a4:cc:ac:08:23:
41:30:ca:96:01:3e:fb:78:32:62:a9:3d:6c:6d:cb:7e:41:89:
97:65:9f:24:8e:2a:c8:b5:99:ee:a2:65:43:71:11:41:67:99:
65:1f:e7:e6:48:33:43:24:d9:7a:1c:af:9b:09:28:3a:6b:3a:
bc:39:09:7f:24:f7:d3:1f:f1:0a:e4:95:fd:0c:fe:40:8a:cd:
df:c9:c3:aa:67:f2:94:a8:f7:1a:6b:c5:70:f2:b2:b0:82:af:
ce:bb:60:1b:de:4e:cb:d8:01:3a:a3:15:c5:39:36:25:48:7d:
b8:5d:73:5c:c0:00:b8:da:35:29:9c:ae:83:00:e7:89:e8:dd:
42:39:e0:89:c0:6b:7b:38:6b:c0:eb:7d:2d:1b:cc:90:90:89:
97:0f:88:69:b6:19:b4:07:fe:f6:4e:27:79:a5:25:1f:84:5d:
59:9c:dd:3e:0c:a1:d6:b7:1c:28:5c:1b:e3:c2:20:a1:00:7f:
df:63:6d:5f:16:13:73:49:cf:5e:79:8e:aa:f2:69:fb:7f:ec:
63:59:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:24:33 2024 by rpki-client on console-ams.rpki-client.org