Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/48at2ZMR99ROahgr-1NyP-sOJJo.roa
File: 48at2ZMR99ROahgr-1NyP-sOJJo.roa (raw, json)
Hash identifier: yt+tGqJBFSQBduhDwDDs+8sz/MdcPyjfYuSw8iYskY8=
Subject key identifier: E3:C6:AD:D9:93:11:F7:D4:4E:6A:18:2B:FB:53:72:3F:EB:0E:24:9A
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 018CC348B4997575D2CA39C1195274BFEDF6
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/48at2ZMR99ROahgr-1NyP-sOJJo.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49798
IP address blocks: 46.228.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b4:99:75:75:d2:ca:39:c1:19:52:74:bf:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3c6add99311f7d44e6a182bfb53723feb0e249a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:e0:f5:33:c0:a0:89:7b:7e:4e:17:91:47:
00:b3:93:b9:8b:cb:b1:f6:c1:7e:19:32:2d:e6:2b:
09:bc:22:91:0a:cb:a4:83:10:f1:d2:2b:00:bb:19:
27:f3:13:34:d3:1a:cf:8e:e1:dd:1e:4a:2a:59:85:
d5:0b:36:7f:9e:b9:c8:e0:b6:10:e2:c2:93:36:bc:
01:1f:a3:21:ed:4f:09:72:f1:d6:b4:db:02:89:df:
ca:de:43:51:3a:7c:1b:ef:c9:80:fd:b8:a0:63:c4:
58:ac:4f:95:ca:fd:5d:39:d8:3f:71:89:ed:96:a2:
1c:24:6a:2f:f1:d9:5e:e5:f8:e1:7a:08:da:01:51:
94:ab:80:17:d2:b4:94:b0:18:b4:d3:6f:10:0b:c5:
35:ad:06:ab:b5:60:88:23:b1:14:f3:ae:33:44:ba:
85:60:bb:a2:54:5c:35:8c:d7:a6:11:75:3d:30:1d:
a8:19:3a:0c:4e:b4:5a:f4:73:63:87:a1:7c:71:f6:
34:5d:93:a2:c9:8b:63:79:18:1a:4c:28:b7:2f:8e:
78:ba:54:30:94:88:95:5d:48:3f:4a:b2:c3:7a:60:
22:a6:b8:9b:ee:8a:59:1c:fb:59:b8:c2:d9:3f:f2:
0e:17:52:b5:4f:00:92:5a:b3:6c:ef:aa:cc:e4:18:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:AD:D9:93:11:F7:D4:4E:6A:18:2B:FB:53:72:3F:EB:0E:24:9A
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/48at2ZMR99ROahgr-1NyP-sOJJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:28:21:dd:4c:f6:0e:0f:e1:28:bc:bd:d8:81:14:55:11:c1:
1c:1f:ee:55:34:50:75:fa:ba:e7:81:14:22:1e:a5:42:0c:56:
1e:71:4d:01:28:8d:d8:01:9a:8e:a8:1a:45:83:fd:32:54:7c:
9f:1d:a5:70:bc:af:db:7c:bf:4f:95:66:78:1a:57:8e:72:ae:
69:64:cb:cb:4e:91:fe:c7:74:cf:0f:3d:1f:a3:45:fa:4b:74:
a1:7d:d7:e0:f0:95:bf:67:8d:2d:4a:db:3a:a2:6b:45:42:3c:
a0:f1:5d:49:4f:30:55:bd:39:a6:5b:a9:0f:eb:e5:93:98:3b:
23:90:61:72:22:3c:28:fe:e8:ed:d9:16:2a:93:05:d1:91:23:
5e:0d:38:82:2a:6a:fa:72:01:d0:aa:bc:c4:76:be:31:b1:8e:
80:31:41:c9:48:47:87:45:c5:e4:d8:dc:4d:a9:fa:cf:12:27:
7a:51:56:1b:e2:89:6b:02:10:ea:71:b8:ed:b0:9c:ed:00:7a:
b9:fe:57:35:7e:40:bf:73:f0:ff:19:5b:96:bf:78:79:77:e2:
1c:81:9c:7c:6e:e4:57:c7:4f:eb:f1:e6:55:5e:b0:97:b4:67:
c8:70:b6:6a:d1:94:20:ec:e3:cc:47:85:65:7c:57:57:87:36:
9c:ad:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:49:07 2024 by rpki-client on console-ams.rpki-client.org