Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wbZyVf1u8Nm7B8v2_YxQLhD0E9g.roa
File: wbZyVf1u8Nm7B8v2_YxQLhD0E9g.roa (raw, json)
Hash identifier: FhRJoolpOlmWQRLLTijkmReHSEsEiffqGPNngWFDPM4=
Subject key identifier: C1:B6:72:55:FD:6E:F0:D9:BB:07:CB:F6:FD:8C:50:2E:10:F4:13:D8
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01930C84AB9C3C43E4D6C1E05568583507C7
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wbZyVf1u8Nm7B8v2_YxQLhD0E9g.roa
Signing time: Fri 08 Nov 2024 16:04:01 +0000
ROA not before: Fri 08 Nov 2024 16:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 46.29.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:84:ab:9c:3c:43:e4:d6:c1:e0:55:68:58:35:07:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 8 16:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1b67255fd6ef0d9bb07cbf6fd8c502e10f413d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:a8:45:8a:63:88:e6:9b:c0:55:14:3a:ba:
19:b6:96:fc:68:dd:e8:3d:46:8f:06:e0:a4:b7:75:
45:dc:5b:33:cb:f2:dc:c4:cd:06:10:94:1a:96:08:
e4:e8:a5:7c:b3:52:e3:82:27:3f:9c:16:c8:d5:a2:
13:2e:8c:e8:0a:64:be:8d:87:0d:49:c2:7e:6c:d9:
27:e7:98:14:a3:f9:f5:ff:24:50:68:82:f0:98:8d:
81:c0:b5:55:99:28:c0:31:cd:9b:a3:57:a8:90:92:
7a:c9:38:69:12:6e:b5:77:b8:62:58:8a:a6:10:51:
bc:7a:3a:bc:d4:86:6f:ad:ab:46:04:a6:ce:e7:71:
9e:68:76:59:62:63:cd:82:ca:97:df:46:a4:61:fa:
ba:28:09:a6:28:67:13:22:fe:0b:33:a9:7e:62:1b:
dc:43:79:ae:42:b7:96:c0:00:ff:c1:47:68:14:d4:
a0:53:86:9b:49:bb:53:10:19:04:1f:72:31:c6:e8:
58:76:08:0c:3e:97:1b:c5:73:42:0c:ed:12:54:df:
6a:8f:99:9b:b3:b5:9a:f5:41:9b:25:5e:0d:8f:dc:
09:c6:00:4b:14:04:0a:59:45:87:2a:36:a8:48:6d:
aa:44:7d:d0:b7:13:f3:b3:ab:f3:39:ad:2a:90:e1:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:72:55:FD:6E:F0:D9:BB:07:CB:F6:FD:8C:50:2E:10:F4:13:D8
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wbZyVf1u8Nm7B8v2_YxQLhD0E9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:7f:8e:60:75:f9:64:07:d7:28:72:26:0b:76:1b:84:9c:9a:
7d:82:b2:3b:47:0e:34:c2:c1:d8:39:8b:0c:38:0d:c5:d7:6c:
73:14:76:ea:82:11:ff:37:49:6c:75:71:42:cd:d6:13:cb:06:
ab:1c:b1:31:ea:21:55:cc:13:d0:da:9b:c3:ac:29:ab:65:89:
a6:ea:59:b3:d2:42:e8:04:52:2b:3f:9e:fe:de:57:38:5c:cd:
03:55:f5:14:1a:30:5a:81:3b:75:8f:b2:12:f0:8e:d5:61:f7:
44:52:db:33:a8:50:b4:15:e3:2d:f6:07:00:c8:9f:33:c9:50:
07:fe:a8:4b:50:02:69:f8:aa:7e:72:02:1f:7d:54:03:b1:ef:
e6:7e:9c:4d:fa:6f:07:ef:b5:0a:eb:22:ae:52:cc:f8:7a:88:
23:da:2e:85:08:20:49:12:0f:91:2d:83:86:4a:b6:ce:88:f7:
e2:ab:e4:c5:63:49:b8:93:76:7c:71:c9:00:e9:2b:a8:43:6f:
ba:6c:84:c6:07:6c:4b:25:36:d0:f2:32:67:2e:7b:ef:ae:f6:
e7:75:00:94:7e:76:b0:d2:62:37:d0:51:5e:19:ac:46:53:95:
94:c2:7b:d3:93:cb:52:dc:29:41:f4:e5:0a:2c:e5:74:e5:fa:
0f:fd:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:38 2024 by rpki-client on console-ams.rpki-client.org