Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/toLfcjUXr5Fv7m8I3ZqcEfTJ5N8.roa
File: toLfcjUXr5Fv7m8I3ZqcEfTJ5N8.roa (raw, json)
Hash identifier: nm/X65Fir2zuukKfLOrebn/74+TfFPwFPOEvgfpsfFc=
Subject key identifier: B6:82:DF:72:35:17:AF:91:6F:EE:6F:08:DD:9A:9C:11:F4:C9:E4:DF
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018CC492C597516A147B3DD670A6DA1C07C8
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/toLfcjUXr5Fv7m8I3ZqcEfTJ5N8.roa
Signing time: Mon 01 Jan 2024 10:30:02 +0000
ROA not before: Mon 01 Jan 2024 10:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206346
IP address blocks: 46.253.11.0/24 maxlen: 24
46.253.13.0/24 maxlen: 24
46.253.14.0/24 maxlen: 24
46.253.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:c5:97:51:6a:14:7b:3d:d6:70:a6:da:1c:07:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 10:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b682df723517af916fee6f08dd9a9c11f4c9e4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:62:79:64:a2:6d:4d:79:77:c1:b7:60:79:
b3:3e:42:9d:0e:6f:98:6d:70:c9:c5:a4:44:9c:e1:
fd:32:9b:1e:e9:d5:83:d7:8c:73:5f:ab:2d:2b:d8:
ac:77:a6:e1:68:ac:fe:04:54:22:77:89:cc:a3:ae:
7f:58:5e:76:42:d3:35:c7:34:cd:af:00:a8:f8:0d:
b8:fa:09:c6:54:9e:d3:bb:87:c1:84:79:d1:4c:74:
9f:cc:df:eb:5a:98:d6:d5:60:a7:0f:64:45:84:ea:
cb:5c:15:a3:fa:bc:33:02:55:e2:a2:de:6c:7c:2a:
91:16:e7:17:e5:4c:9b:15:0c:35:d3:92:14:69:51:
9d:08:06:a2:8d:2a:7e:93:ab:78:cb:c0:41:58:f7:
c8:26:45:14:82:ef:b5:7a:a5:8c:58:e6:58:68:bd:
62:85:91:ec:86:30:44:e2:7c:c5:4d:be:9b:3a:a8:
2e:6a:3c:2b:a5:5c:59:36:4d:98:9d:99:b7:25:ee:
0c:31:c8:21:d7:76:91:96:e2:48:36:bd:e0:23:54:
b7:79:59:75:72:29:58:19:28:66:be:37:1d:7d:a0:
39:de:8e:60:3f:a5:ad:58:43:f3:9f:09:ef:a0:97:
b1:18:b1:55:21:89:54:8d:53:e4:17:09:10:54:ad:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:DF:72:35:17:AF:91:6F:EE:6F:08:DD:9A:9C:11:F4:C9:E4:DF
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/toLfcjUXr5Fv7m8I3ZqcEfTJ5N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.11.0-46.253.14.255
Signature Algorithm: sha256WithRSAEncryption
38:cd:1c:44:ef:03:f6:4b:2a:3e:54:51:20:88:c3:e6:19:6e:
e5:13:39:7d:65:32:35:27:02:59:de:f6:58:f1:24:a1:9c:45:
72:10:1d:8f:bb:67:20:ba:f0:4f:d4:40:38:3b:01:14:aa:16:
ce:b4:08:56:68:31:64:be:ad:45:25:cf:6d:59:af:f7:ae:9d:
4a:92:28:a2:40:94:6f:ec:df:a0:3b:64:ff:69:c4:64:46:20:
f7:a5:9a:ca:e3:b9:85:a8:20:69:1c:da:d3:08:f2:42:73:21:
ed:eb:96:c2:03:65:d1:d7:20:1e:bb:a2:2d:43:e8:99:5b:30:
81:0c:08:88:38:42:45:54:9a:a9:0f:83:85:a0:34:d2:4a:5f:
19:0a:65:5d:b3:8d:bc:68:c9:d3:fa:94:2f:8a:30:5e:43:da:
6a:07:27:3d:3d:e7:70:75:f8:22:6b:13:04:20:e7:95:79:b9:
e5:68:40:70:05:fe:ba:f4:3b:be:a9:5b:6f:b2:18:34:64:7b:
47:f9:b8:ce:ef:f8:d0:90:e8:95:9f:37:a7:78:33:6a:b0:e8:
49:2e:eb:85:2e:e9:9d:a3:e4:d8:1c:13:16:46:30:fb:ca:b9:
79:88:45:65:dc:25:cf:f5:4b:a3:11:ec:99:1c:76:c9:8b:bb:
ef:47:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:05 2024 by rpki-client on console-ams.rpki-client.org