Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/T277SPSlZ-lAoFdlXuuivHspqKQ.roa
File: T277SPSlZ-lAoFdlXuuivHspqKQ.roa (raw, json)
Hash identifier: 5A8/bpIovQ9y2LPE88b+lQl67wFZNSCaD2DIwMzSdQs=
Subject key identifier: 4F:6E:FB:48:F4:A5:67:E9:40:A0:57:65:5E:EB:A2:BC:7B:29:A8:A4
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018CC26D4886E5AF406A70380AF154972D53
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/T277SPSlZ-lAoFdlXuuivHspqKQ.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 46.17.72.0/21 maxlen: 24
46.17.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:48:86:e5:af:40:6a:70:38:0a:f1:54:97:2d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f6efb48f4a567e940a057655eeba2bc7b29a8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:20:cc:1e:f6:36:23:c4:97:50:3b:c1:ff:
56:19:d1:af:bf:5f:5e:6f:24:cb:00:9b:44:8c:5c:
dc:e0:01:5c:6d:a1:f5:c7:b1:a0:d0:4c:ef:43:c0:
67:a6:ae:86:4a:1e:da:76:e5:1d:7a:85:f7:3a:f2:
73:dc:14:37:1e:78:e2:b8:b8:f8:af:70:96:b8:a5:
74:60:f8:9b:57:72:bd:83:20:30:fc:81:f9:59:15:
6e:a2:13:10:dc:82:41:bf:93:f2:49:f2:90:44:19:
17:ac:ae:a9:9b:a9:44:f5:f8:c0:1d:30:f4:4f:87:
4c:77:cf:1b:34:0d:4c:73:08:8f:99:a7:3f:b4:0e:
f0:37:f3:15:c4:e9:44:1c:99:7f:e1:09:98:c9:57:
ce:69:e2:db:33:b0:04:7b:2b:5d:d0:ea:b9:f9:a5:
af:dc:0f:9a:f8:a6:30:eb:09:0d:de:f3:6f:4d:91:
0d:2a:74:0a:4c:75:ed:04:7c:88:de:bb:f2:bd:2a:
dd:3f:bc:fe:aa:57:f6:31:57:fa:e7:e0:05:0c:97:
94:bd:0d:b0:a3:42:8a:03:0f:3b:f3:80:a6:74:4e:
46:ce:bd:77:29:32:4c:4f:50:4a:d3:01:6d:ea:47:
66:cb:fe:56:4d:b3:9e:ba:c3:d9:70:7d:15:e9:c9:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6E:FB:48:F4:A5:67:E9:40:A0:57:65:5E:EB:A2:BC:7B:29:A8:A4
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/T277SPSlZ-lAoFdlXuuivHspqKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
20:1a:21:84:8f:e0:0f:6d:12:67:97:33:49:66:f9:66:c5:5f:
40:38:07:5d:52:54:ba:55:fb:10:ce:7f:4f:5e:64:70:80:f0:
47:dc:a2:f6:22:ea:af:97:af:28:57:6d:01:7e:d1:a5:a9:48:
c5:ad:c4:09:15:91:33:cb:eb:d9:db:51:a8:03:a8:12:9f:a2:
27:40:8a:c4:3b:c5:d5:1d:e8:ed:14:d4:d7:95:17:28:d2:a4:
88:06:ae:0e:d1:2b:ce:e6:51:58:bb:35:db:40:e4:b2:fc:29:
ca:8e:90:11:92:b3:f6:b6:d8:56:a1:7b:c1:1f:77:9a:43:88:
d7:47:d3:b5:77:3c:fc:a3:3a:ec:bc:dd:43:a0:17:ad:ab:43:
b0:2c:0f:a7:1d:23:95:f4:e3:ef:31:15:2a:69:4b:df:d3:8b:
3f:c6:1a:4e:4a:78:44:74:46:2e:e3:a1:d7:e8:30:d1:7c:d3:
60:fd:e2:29:ca:1b:ce:08:3f:59:4d:57:0a:14:ac:5e:40:18:
16:b1:36:27:cc:e7:15:ea:6c:39:16:0d:4b:fb:61:b8:29:e6:
c9:d9:3b:7d:95:8b:32:2e:88:39:fc:e6:3a:4c:c8:4f:a4:b5:
2b:0a:d8:6f:9d:17:10:ca:31:67:01:43:b4:78:d1:4d:c8:fe:
e7:30:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:23:02 2024 by rpki-client on console-ams.rpki-client.org