Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/01KpnBfhWsvo3qS-VUybfS0bDKQ.roa
File: 01KpnBfhWsvo3qS-VUybfS0bDKQ.roa (raw, json)
Hash identifier: D4gtVqcLTv/dg6wHmZrejMRF4kBYMKCWWNY8apnkzlE=
Subject key identifier: D3:52:A9:9C:17:E1:5A:CB:E8:DE:A4:BE:55:4C:9B:7D:2D:1B:0C:A4
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0191B1D79A81D5D40A1797C39DDA3763B012
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/01KpnBfhWsvo3qS-VUybfS0bDKQ.roa
Signing time: Mon 02 Sep 2024 08:26:22 +0000
ROA not before: Mon 02 Sep 2024 08:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:d7:9a:81:d5:d4:0a:17:97:c3:9d:da:37:63:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Sep 2 08:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d352a99c17e15acbe8dea4be554c9b7d2d1b0ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:35:a1:14:d3:bd:8f:ba:e1:37:a4:e3:7b:
7c:b3:f4:d2:0e:47:04:72:1a:c3:b8:d5:6d:5d:d0:
19:5d:5d:48:9b:a9:9f:31:f6:b1:81:d6:b5:2d:e7:
f7:dd:e7:c2:dc:82:99:16:2d:9f:21:96:fc:bc:71:
36:f4:a3:1c:4a:bb:94:cd:ad:2c:8a:4b:ab:b3:52:
03:9b:88:19:59:6c:0c:90:a9:89:e0:9d:e5:22:47:
81:6f:c7:c6:2f:cc:9a:34:da:3d:6f:1e:de:e3:cb:
92:32:a4:ba:9b:3d:4b:aa:f1:27:30:ff:c5:5b:b2:
80:db:e2:52:f8:39:29:f3:66:36:da:c2:bf:e7:18:
8a:e9:dc:e6:87:3d:4e:97:5d:82:ad:d0:51:49:6c:
54:37:84:5a:2e:4d:29:47:63:28:5b:c7:77:e6:64:
d6:b2:89:a7:15:84:11:94:a7:d9:55:bb:ff:14:b2:
f8:02:f3:f1:b6:af:a6:6d:ba:3b:f4:b9:3f:d5:13:
90:86:e8:12:ef:30:6b:ba:b1:9c:98:06:8c:b5:4e:
66:7a:9c:da:13:ea:0d:2f:9e:97:28:16:91:63:f0:
9a:cc:9a:01:cd:65:fd:d9:be:8b:78:48:e4:c2:f5:
aa:5c:88:4b:4e:a8:ea:79:62:52:54:c2:a0:77:33:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:52:A9:9C:17:E1:5A:CB:E8:DE:A4:BE:55:4C:9B:7D:2D:1B:0C:A4
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/01KpnBfhWsvo3qS-VUybfS0bDKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.105.0/24
46.20.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c8:cb:42:44:9c:84:6c:68:e2:ec:dd:ec:d6:fd:1d:47:24:
0f:76:65:44:17:bd:d0:be:08:f2:ef:f0:cb:bc:a2:4a:d9:c8:
b4:bf:0c:99:2b:df:4c:e9:7b:9c:f8:f1:d7:14:bd:27:70:7a:
c1:e8:64:5b:38:3d:65:60:44:a3:37:2f:0b:32:37:fd:c6:69:
9f:d3:c6:2c:02:6e:f8:e6:e7:65:fd:0c:d4:1c:da:07:80:7a:
8a:c0:eb:3a:71:d1:57:15:b3:72:68:b5:8d:77:c7:cb:42:e2:
e5:a4:8f:5c:3d:cc:28:d5:f2:89:f5:1a:f3:e9:92:c0:92:28:
7d:8e:df:51:2c:73:3a:af:1f:01:ff:ff:c4:ce:c8:6a:cc:04:
75:2c:6b:74:5f:29:0c:49:f7:95:41:c7:93:86:39:d5:cb:9c:
4d:c6:7a:a2:88:6b:e2:fa:c3:f1:65:5a:59:58:31:7d:50:fd:
6a:a5:f5:1d:f5:94:8c:15:46:33:48:cd:c8:77:f9:a0:1f:88:
65:9d:2e:53:fc:1b:b7:b3:7c:5c:cd:15:c7:b9:51:44:60:0c:
9a:91:9e:3a:79:79:b1:57:25:8a:32:2a:0d:9d:1a:4c:ad:c2:
3c:c7:df:54:f3:e0:0b:5a:b3:8d:e7:b8:31:c1:03:af:1d:65:
70:9d:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:25:04 2024 by rpki-client on console-fra.rpki-client.org