Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/1-QoQrsxBiA8gUhogiPJxJU5aQ28.roa
File: 1-QoQrsxBiA8gUhogiPJxJU5aQ28.roa (raw, json)
Hash identifier: ZiWQO70O5OS+omIR0bGuJjT+r54t0vgxC/v2DvsQebI=
Subject key identifier: F9:0A:10:AE:CC:41:88:0F:20:52:1A:20:88:F2:71:25:4E:5A:43:6F
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018CC26D499771F55DF50EBC1F68A249DA1F
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/1-QoQrsxBiA8gUhogiPJxJU5aQ28.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51910
IP address blocks: 46.17.77.0/24 maxlen: 24
46.17.72.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:49:97:71:f5:5d:f5:0e:bc:1f:68:a2:49:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f90a10aecc41880f20521a2088f271254e5a436f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:4e:22:1e:79:4e:4f:84:08:eb:e8:b7:4e:
15:92:56:d3:64:5f:fa:1a:16:c5:5b:1a:e6:db:2f:
1e:af:89:b0:95:9c:0a:2a:4c:4b:dd:77:b1:3c:1a:
29:3d:e2:f5:2d:86:c3:c1:8c:8f:fa:7d:2c:93:a9:
35:47:08:4b:2f:85:bf:fe:01:2e:8e:45:f3:46:02:
9a:1b:ba:84:26:95:ce:0a:3c:ff:84:f3:83:dc:2c:
ac:db:1a:6e:54:23:6d:e1:63:1e:98:9c:f2:6b:d7:
f2:48:49:17:af:25:f2:3c:ac:8c:aa:f8:16:57:1b:
7c:2c:07:2a:81:89:7c:1b:b9:c0:fa:3d:3c:88:0f:
f7:69:9c:c5:3e:5d:18:34:ab:ff:03:c1:0c:8b:2d:
5d:3f:1c:4d:fa:96:47:74:d3:f7:f5:3e:e8:60:b0:
fe:4b:c2:0d:b7:86:0d:16:00:7b:8a:83:0c:2b:68:
ae:6e:73:9d:28:6f:c0:69:48:eb:3e:54:c3:ed:9e:
4f:da:c4:c6:25:a6:40:20:13:dc:4b:0c:ee:fd:59:
d5:06:9e:16:35:77:05:0a:4d:77:d0:1b:4f:14:fc:
81:01:d7:be:68:97:11:8e:a5:f9:41:2e:e0:6c:d6:
78:fa:68:79:02:7c:82:31:a4:d4:33:ab:46:e0:39:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:10:AE:CC:41:88:0F:20:52:1A:20:88:F2:71:25:4E:5A:43:6F
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/1-QoQrsxBiA8gUhogiPJxJU5aQ28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:ef:e1:e0:c0:f5:d1:f2:41:3a:6d:51:2a:87:ac:32:9f:fe:
4b:21:d2:8c:0f:59:fe:32:8d:88:75:d9:18:f9:26:69:c6:5a:
5f:da:67:57:9c:c4:48:6c:1d:fa:5f:7f:df:a8:82:84:20:3c:
95:f2:b1:71:f0:28:f1:45:09:10:79:38:dc:8a:c9:c1:b3:a6:
fd:d6:51:e4:c0:7b:a5:a8:b2:4b:1f:28:4d:0f:c8:b2:40:7b:
74:0e:77:04:6e:99:9b:81:56:39:e9:21:98:68:cb:e3:0e:82:
23:7c:30:5c:9b:9b:09:d2:81:fb:16:16:88:39:0b:d4:77:52:
f0:7f:27:aa:09:cb:ab:ce:b6:70:6c:7e:0d:ec:25:d7:e5:52:
61:74:27:81:81:2b:91:03:b0:7f:20:ec:a1:e6:3f:01:46:2f:
ee:a3:15:1e:77:19:11:20:5c:ac:4f:94:b7:9a:45:99:e8:a2:
f7:4c:80:e9:c3:63:c3:fa:ca:cb:fd:4f:1a:f0:60:b7:68:0e:
52:0a:e4:de:46:08:4e:59:c2:4c:45:e1:8e:51:e9:fb:b4:b2:
30:a8:2d:0e:9e:90:2c:09:63:6b:8b:83:c7:99:37:d3:56:6b:
dc:bd:f1:a7:de:a8:0a:4f:a1:bb:b8:41:72:66:9f:62:14:6b:
d3:99:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:11:46 2024 by rpki-client on console-fra.rpki-client.org