Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OxFgBe1ePoQsZaYeo1KKTz7V4Ug.roa
File: OxFgBe1ePoQsZaYeo1KKTz7V4Ug.roa (raw, json)
Hash identifier: qrN8wJuSsGub/S6fQ5kefzEn4thckAfiqDbjg33UL9o=
Subject key identifier: 3B:11:60:05:ED:5E:3E:84:2C:65:A6:1E:A3:52:8A:4F:3E:D5:E1:48
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EF2595B5FE5A567ACEDF662423796CFA7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OxFgBe1ePoQsZaYeo1KKTz7V4Ug.roa
Signing time: Thu 18 Apr 2024 17:55:26 +0000
ROA not before: Thu 18 Apr 2024 17:55:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41957
IP address blocks: 46.16.37.0/24 maxlen: 24
46.253.128.0/24 maxlen: 24
62.3.48.0/24 maxlen: 24
91.242.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:59:5b:5f:e5:a5:67:ac:ed:f6:62:42:37:96:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 18 17:55:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b116005ed5e3e842c65a61ea3528a4f3ed5e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:61:27:39:7f:2b:e0:a8:7d:58:fb:fc:94:
74:e1:26:7b:74:53:6c:24:ac:57:91:6a:b5:13:fd:
e1:83:aa:64:6a:9b:65:fb:dc:62:33:d2:f7:bc:dc:
bc:34:85:b5:e0:9d:41:55:f1:6f:3b:b6:63:1d:8b:
85:38:9f:16:77:ca:20:81:96:18:66:2c:98:5d:36:
a4:e3:2b:8a:15:d6:05:55:83:52:67:93:f3:62:46:
89:bd:5a:8d:1d:11:41:ae:2b:cd:ba:25:bc:ef:d6:
8e:3f:40:aa:3d:bd:84:4d:14:02:93:f2:e3:fb:14:
10:12:dc:67:cb:2b:81:22:84:ca:f8:63:88:87:63:
a5:da:db:03:ce:a5:3e:a3:85:22:1d:41:53:53:99:
34:c6:4c:98:02:c3:78:92:7b:b1:90:76:da:c7:5b:
46:10:8a:4f:52:6e:da:ce:b7:d1:50:9d:cb:b9:7e:
69:fa:18:93:46:29:2c:47:9a:40:14:5f:60:73:9f:
52:55:25:de:a0:cc:8f:f8:4f:fe:4b:ee:74:3a:c7:
22:f9:e8:41:15:69:b6:ff:2c:e3:60:77:e5:5b:90:
6d:20:1a:87:b3:48:17:6c:25:f9:df:86:2c:89:d2:
e8:0d:28:b1:aa:4c:cf:ca:8f:ad:95:7a:7d:be:65:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:60:05:ED:5E:3E:84:2C:65:A6:1E:A3:52:8A:4F:3E:D5:E1:48
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OxFgBe1ePoQsZaYeo1KKTz7V4Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.37.0/24
46.253.128.0/24
62.3.48.0/24
91.242.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:72:a2:67:de:c3:2b:a5:45:1b:69:30:de:c6:d4:45:1c:0c:
b9:bd:a5:f8:1e:5f:fc:49:c6:34:97:f2:77:26:3f:01:9d:6f:
64:42:f4:8d:b6:20:66:dd:01:2b:56:e2:33:ed:1e:80:76:83:
d9:2e:b4:f8:a5:39:be:39:fe:e7:c9:8d:b3:15:c2:c6:64:75:
2b:1f:c6:9e:b3:0b:e6:5c:ee:13:e7:00:a6:e9:af:28:01:8d:
3d:51:e3:04:f3:2f:d2:a1:63:54:37:aa:69:32:54:55:f9:36:
72:8e:5a:15:80:7c:da:08:cd:c0:98:06:5b:51:d3:fc:5b:eb:
96:55:c1:08:f0:eb:2f:f6:f1:c7:be:51:73:a3:64:21:f1:06:
87:dd:be:5f:f3:f4:07:5d:19:13:d2:aa:7f:87:a0:58:b5:eb:
08:73:dc:cc:7b:f3:a7:58:97:12:f9:3b:29:d3:e1:e1:32:45:
11:98:74:2d:49:c8:ee:08:85:d3:76:4d:de:17:4d:75:e2:57:
18:11:4a:d8:20:7e:93:57:29:61:f5:1d:50:50:19:b6:b5:09:
6f:2b:8f:fa:21:2c:9c:49:14:41:22:d4:4a:02:5a:ba:a7:dd:
db:e5:14:66:b4:7d:dc:5e:74:a9:cd:3e:fc:de:05:a9:ff:22:
32:40:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:27:56 2024 by rpki-client on console-ams.rpki-client.org