Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/pXokXhKd1jwv0F9lskutFeODHJA.roa
File: pXokXhKd1jwv0F9lskutFeODHJA.roa (raw, json)
Hash identifier: w91xeoJaC4G0Y3Sa/p4IwvEDj1kaXedER5omD9+b61M=
Subject key identifier: A5:7A:24:5E:12:9D:D6:3C:2F:D0:5F:65:B2:4B:AD:15:E3:83:1C:90
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 018F0CB91E0545B4AE1944DCA9D1C2FE2C37
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/pXokXhKd1jwv0F9lskutFeODHJA.roa
Signing time: Tue 23 Apr 2024 20:50:09 +0000
ROA not before: Tue 23 Apr 2024 20:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/22 maxlen: 22
94.240.132.0/22 maxlen: 22
94.240.136.0/21 maxlen: 21
2a09:65c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:b9:1e:05:45:b4:ae:19:44:dc:a9:d1:c2:fe:2c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Apr 23 20:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57a245e129dd63c2fd05f65b24bad15e3831c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:cd:3b:a0:bf:d7:29:27:6f:38:7a:9f:af:
df:99:f1:68:28:fb:b9:2e:c9:7b:9b:90:50:03:c4:
a6:f4:e2:8e:77:d3:22:2b:d1:d9:09:b0:fb:a1:db:
f8:dd:cf:76:3e:25:42:d2:e2:e6:2b:f1:d9:24:5c:
39:3f:fa:89:1a:51:1f:9b:70:e0:ae:0e:7a:b8:45:
88:4a:d2:a1:df:24:ac:a0:c7:19:f9:bb:e2:4a:bd:
9a:01:31:35:44:a3:e6:5e:1a:40:69:65:aa:16:f3:
bb:ab:33:a7:6d:2f:3b:53:ad:26:b0:cd:13:a8:23:
11:d9:00:18:17:68:cc:e1:fb:ad:63:ba:bb:19:c7:
df:42:a3:65:27:2d:f7:e7:e5:75:db:ce:70:18:ae:
d5:c8:ed:2f:15:12:f9:3f:2d:82:0b:08:b6:2d:07:
e1:31:7c:72:e4:04:29:49:8c:6c:11:ef:73:0c:56:
ce:33:66:33:84:df:0e:47:6a:01:de:2f:b5:b6:3e:
fa:db:6c:f8:be:95:b3:5d:67:b6:89:d9:32:c6:94:
cd:c2:e7:6e:fa:59:a4:bf:23:58:95:1c:a6:a2:4c:
2f:9e:d8:3b:c5:7b:90:ac:97:dd:d8:b3:fd:fa:8d:
4e:1b:8e:75:99:39:60:b2:30:8a:7b:c0:5d:ec:db:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:24:5E:12:9D:D6:3C:2F:D0:5F:65:B2:4B:AD:15:E3:83:1C:90
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/pXokXhKd1jwv0F9lskutFeODHJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/20
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:6c:20:7e:b0:0a:0e:ad:75:0e:63:a6:32:91:b7:38:9a:f7:
25:bc:45:c0:71:30:6c:72:ce:bb:5b:6d:a7:ff:c7:6b:50:6c:
b9:8c:22:e3:0b:a6:7f:39:e2:d2:ee:70:34:c8:4d:ef:93:da:
31:19:cd:77:bc:f7:c7:6e:81:c7:5b:d1:02:e1:1c:f0:db:e4:
00:8d:cf:39:43:bb:dd:e6:51:15:50:88:a6:3f:d5:a6:68:31:
cc:38:02:16:eb:dc:97:14:09:ec:4b:5c:62:fc:70:7a:06:b6:
90:69:ff:e6:4c:6d:ab:c0:f4:19:a4:35:35:08:59:0b:65:0c:
f4:ab:89:80:fc:85:29:a7:4d:5b:c6:9a:e8:c5:32:b2:72:2b:
82:0f:c9:4e:70:fa:47:a7:92:2a:e9:27:64:c6:d2:99:15:7a:
7d:04:3a:a3:ed:03:23:34:f9:e4:2c:ed:17:66:85:e4:96:25:
f4:2a:21:e7:b4:d3:8f:e1:71:fa:42:25:07:b9:a0:6a:51:07:
e3:41:81:53:fd:3a:92:37:51:4e:28:56:79:71:eb:1b:5e:b2:
7e:26:a7:12:ca:db:58:b9:1e:f6:73:e6:e8:8d:73:44:85:ff:
53:99:db:66:70:ef:cc:ff:b1:46:b6:8d:36:18:88:bc:01:de:
51:9c:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:33:44 2024 by rpki-client on console-ams.rpki-client.org