Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/cvFJ8pL0gvxVzAvHIy7JuBHR3Us.roa
File: cvFJ8pL0gvxVzAvHIy7JuBHR3Us.roa (raw, json)
Hash identifier: +rBv0ViN64g0uaaeknicM0X1g4jZ+XZq41zbQ3kwUBo=
Subject key identifier: 72:F1:49:F2:92:F4:82:FC:55:CC:0B:C7:23:2E:C9:B8:11:D1:DD:4B
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018CC26D4B14533438686F9630BAED4BABC8
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/cvFJ8pL0gvxVzAvHIy7JuBHR3Us.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207658
IP address blocks: 46.17.76.0/23 maxlen: 23
46.17.76.0/24 maxlen: 24
46.17.72.0/24 maxlen: 24
46.17.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4b:14:53:34:38:68:6f:96:30:ba:ed:4b:ab:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72f149f292f482fc55cc0bc7232ec9b811d1dd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:c4:2c:ac:de:85:1c:6b:40:05:73:ad:cc:
50:bc:37:32:59:3c:e6:b6:f8:bd:80:f0:2c:61:08:
04:5a:f6:ea:42:b6:9d:5c:db:87:ad:73:ac:c5:85:
38:96:24:a5:e6:dc:dd:6b:a9:4c:43:7b:0b:79:66:
4c:13:3b:71:3f:a5:89:64:61:7b:fc:12:bc:f8:9a:
92:35:02:37:6e:0a:19:e9:ba:71:5b:56:7a:9d:1a:
ca:97:87:e0:2e:43:6f:d5:95:51:49:6e:a0:a7:f8:
42:ac:12:00:6e:ed:60:91:4d:20:d9:b4:fe:92:54:
fe:d9:5a:9e:84:8d:aa:9c:3d:bd:60:5b:3c:95:12:
b2:cd:9c:58:37:7a:23:b6:2e:33:9b:20:7a:ab:12:
4c:ea:a8:49:2c:69:bc:67:9f:24:a7:3b:3d:ac:3c:
fb:3e:d2:42:21:42:59:1a:a7:a6:72:1a:bb:c4:60:
ad:6a:05:11:81:03:08:91:20:1d:5b:16:c6:41:b0:
c6:f9:6d:4f:ec:22:b4:2b:70:03:a0:bd:10:95:74:
ef:e0:d9:ca:ab:47:25:de:11:67:bb:92:0c:8b:1e:
0a:d7:4b:da:a7:6b:56:65:75:a0:09:d2:19:1b:06:
76:0d:5f:84:1c:08:16:33:ba:43:67:df:4a:0d:4e:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F1:49:F2:92:F4:82:FC:55:CC:0B:C7:23:2E:C9:B8:11:D1:DD:4B
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/cvFJ8pL0gvxVzAvHIy7JuBHR3Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/23
46.17.76.0/23
Signature Algorithm: sha256WithRSAEncryption
36:05:2b:50:df:4c:de:03:76:9e:e7:3e:b5:d6:12:b4:d9:18:
9f:3d:b7:68:e6:ab:4d:9e:ee:c8:08:a0:c2:bb:20:30:48:80:
5d:a3:c7:c3:5a:91:04:73:55:35:df:d9:00:72:9e:4f:14:fd:
ce:1b:2a:b2:b0:22:8a:1b:7e:5a:a5:76:93:c1:fa:9d:79:ba:
c3:63:3e:b2:4d:10:0c:08:b4:79:e1:a6:b1:b9:82:e9:ab:f7:
a9:10:af:ba:a4:c3:30:48:77:dd:59:10:d6:db:67:b1:4a:c1:
39:f2:0e:d8:8b:ca:7a:0d:fa:31:49:37:5d:be:01:09:41:f8:
c4:53:55:7d:0b:89:a1:39:88:4a:54:02:9c:2d:a5:29:73:a6:
a1:a6:ac:24:96:da:e3:1a:05:65:d7:94:c9:0c:2a:7c:40:ae:
de:de:79:fd:e4:37:a3:69:51:dd:38:be:c6:29:9a:2a:b3:39:
14:8b:ac:34:74:1f:57:f4:b8:93:c2:03:2a:be:72:ac:b5:a3:
ce:50:f9:a9:ca:bb:fc:eb:65:5e:56:66:d9:55:cf:20:db:08:
4f:f3:3e:19:3e:79:85:a3:4a:57:0f:12:7b:48:3f:27:96:c5:
ea:cc:7d:ba:81:fb:64:5b:5a:e0:97:bc:01:fd:e4:9c:f1:c5:
a7:fb:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:20:41 2024 by rpki-client on console-ams.rpki-client.org