Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/CaqiOsNrkqrGtQqaMbPS7J9bUuY.roa
File: CaqiOsNrkqrGtQqaMbPS7J9bUuY.roa (raw, json)
Hash identifier: YKkQnFiU3pZ5puGZfR6TUQswrrUvhuCud2uFOYPCmgQ=
Subject key identifier: 09:AA:A2:3A:C3:6B:92:AA:C6:B5:0A:9A:31:B3:D2:EC:9F:5B:52:E6
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 018CC64B5580EA03939C3E1D5D9DC0D0367A
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/CaqiOsNrkqrGtQqaMbPS7J9bUuY.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210299
IP address blocks: 46.16.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:55:80:ea:03:93:9c:3e:1d:5d:9d:c0:d0:36:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09aaa23ac36b92aac6b50a9a31b3d2ec9f5b52e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:52:4a:eb:84:8f:57:0e:25:be:0c:30:bc:
c8:e7:92:d6:1b:0f:e7:21:b1:d9:49:b4:49:f6:90:
15:65:44:1a:c9:7e:92:97:05:0f:f0:85:66:63:7b:
ae:de:1d:ce:e7:49:8c:56:25:58:cb:49:2c:e0:ea:
16:06:59:ad:d3:7c:08:1e:8a:23:86:55:5d:bd:3c:
78:92:43:81:47:bf:b6:aa:24:4d:ed:21:ae:7a:11:
6a:da:3a:ef:bf:2f:81:7c:dd:82:74:43:ee:e7:cf:
d9:bd:2a:13:55:fb:cf:aa:6b:9e:7a:37:8a:a9:5f:
9d:6c:23:68:cf:58:87:62:d2:5d:e7:82:ac:45:9d:
f8:1b:14:61:46:3a:a2:89:f7:4a:42:68:6c:8f:d9:
29:54:43:b9:f7:86:ef:8e:bf:d1:9c:ae:5c:4b:8d:
57:84:4e:aa:aa:40:8a:c1:33:fa:b6:4a:55:98:38:
ce:f3:e3:76:95:f0:dd:82:ff:4c:08:98:71:02:a7:
0d:56:4f:3c:f1:e3:d6:c2:32:7a:28:25:fe:88:ae:
5f:88:6e:40:3e:bf:34:9c:36:14:4b:24:14:e2:a7:
65:6a:9a:47:5b:ed:d9:b0:15:76:fd:dd:4e:2d:cf:
80:10:56:dc:2b:2e:af:a0:7c:3f:1b:dc:7c:cb:18:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AA:A2:3A:C3:6B:92:AA:C6:B5:0A:9A:31:B3:D2:EC:9F:5B:52:E6
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/CaqiOsNrkqrGtQqaMbPS7J9bUuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.199.0/24
Signature Algorithm: sha256WithRSAEncryption
48:cf:c3:30:3c:f0:99:42:9f:91:cd:32:bf:99:dd:74:5f:1b:
85:35:03:b8:5f:91:7e:38:b0:86:78:a8:16:fd:83:7b:88:e1:
a9:1c:94:14:b7:21:dd:4b:84:20:ce:ed:ca:32:cd:f1:c1:b1:
06:54:e5:4b:2f:68:ae:f2:56:24:4f:6e:0c:45:9a:37:36:a6:
f4:ab:2c:73:a2:21:e1:c3:78:89:21:0e:c8:f1:8a:44:ab:b4:
08:7d:b3:84:ae:46:e6:5a:25:da:6f:f9:c7:a7:5d:83:7b:a9:
53:f5:cb:37:a1:f7:d4:a7:53:83:80:8d:42:da:e7:64:8f:e1:
2e:cf:64:c9:5c:3b:1c:81:0f:a1:8b:41:15:93:93:f1:d6:14:
77:28:d0:88:7c:62:10:d4:d0:eb:ed:43:0e:aa:e9:73:6c:0e:
71:6d:db:c8:b2:fa:0c:6c:f0:7e:30:0a:a3:5b:c6:99:b4:57:
0a:7e:03:a4:e4:dc:5e:a1:cd:03:56:6a:ff:6f:54:34:67:d3:
60:42:37:c3:3e:47:fe:5e:33:3e:7a:ff:09:b7:fc:79:ad:15:
16:ca:0e:a5:b5:e0:cf:ce:fc:03:a6:95:af:28:0e:40:d4:0f:
28:49:d7:61:0e:15:f1:03:5b:44:55:ee:cf:34:aa:1a:8e:ba:
f2:ab:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:59:45 2024 by rpki-client on console-ams.rpki-client.org