Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ShMq3S0U5MAknSkTbkZyIbAlruk.roa
File: ShMq3S0U5MAknSkTbkZyIbAlruk.roa (raw, json)
Hash identifier: +Iv+jibUD7s0J8cakm4dNNQmxcdo8g4axc0WgYSrkwY=
Subject key identifier: 4A:13:2A:DD:2D:14:E4:C0:24:9D:29:13:6E:46:72:21:B0:25:AE:E9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01926D08E3A38F0F2EB85AF3ED106B3615F6
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ShMq3S0U5MAknSkTbkZyIbAlruk.roa
Signing time: Tue 08 Oct 2024 16:49:12 +0000
ROA not before: Tue 08 Oct 2024 16:49:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 46.38.154.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:08:e3:a3:8f:0f:2e:b8:5a:f3:ed:10:6b:36:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 8 16:49:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a132add2d14e4c0249d29136e467221b025aee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:9e:10:52:40:b6:3e:1f:8b:41:a0:9a:29:
d2:1b:85:9a:49:01:ed:9f:c7:19:ef:42:17:90:98:
5f:71:bb:61:35:db:d8:32:7d:1f:e6:52:a6:d3:b9:
f5:52:39:a9:bd:79:71:9e:3f:82:9a:4f:96:cd:c5:
20:28:45:16:a7:bd:f0:14:b2:28:ce:b6:50:24:2a:
09:f8:b4:9e:b2:c2:19:53:4e:f2:e2:eb:1a:44:4c:
2c:27:59:ba:32:85:ba:f2:98:7b:2c:8c:74:1d:71:
5a:4d:84:6c:75:86:52:48:d6:c4:97:57:72:d9:56:
72:f2:cd:a5:b5:f9:f0:63:c0:ee:97:bd:f1:ac:35:
64:be:fd:a2:b6:0f:48:1a:c9:3e:4d:a0:71:ac:1f:
d6:67:7d:8d:9b:f8:d6:c5:97:c4:88:30:ae:e2:6a:
b8:2b:3e:d8:d6:b5:e2:90:42:49:70:a7:4c:78:ed:
65:2a:9e:fc:9a:c9:59:f7:95:28:2b:af:0a:f0:c4:
2d:2d:de:f4:ab:17:f1:0b:94:8f:b1:b9:0c:44:41:
1d:d9:b2:16:9c:2f:fe:d1:8a:53:5d:e1:3b:a1:bb:
98:d6:6f:0a:fa:45:9d:52:0b:1d:c0:8a:22:8f:d5:
26:d7:1d:72:91:cb:fd:a6:03:04:94:93:15:e6:bb:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:2A:DD:2D:14:E4:C0:24:9D:29:13:6E:46:72:21:B0:25:AE:E9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ShMq3S0U5MAknSkTbkZyIbAlruk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
212.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9e:33:06:3a:e9:4c:73:1d:e2:47:b6:01:c8:e7:0a:3c:f0:
73:56:04:7e:79:f7:4f:dc:ff:bb:e3:6f:82:ca:03:65:7f:a9:
9d:59:72:2d:c7:3f:ab:8e:1d:a7:9e:05:cb:2d:7c:ac:e1:7f:
8d:d4:f7:f0:5c:b5:af:c9:0c:5e:4c:16:07:e7:df:d9:8d:c3:
5b:cc:3c:91:b7:e7:5b:16:37:5a:ef:0a:15:a0:8d:fb:50:19:
cd:b5:1a:1d:96:90:04:9b:6e:dc:0a:02:3a:82:cb:df:6c:40:
ef:e0:a1:b4:48:c5:50:2f:b6:1c:5b:ca:13:fb:f2:69:4f:92:
e1:b3:c4:6b:ac:f8:9f:31:d3:23:e7:0e:e1:39:ae:4a:bb:1c:
aa:ce:a9:4e:5e:77:85:c4:6f:8f:54:fc:36:ef:6a:a6:c0:e4:
5e:41:5f:0f:43:60:09:47:a9:ff:b3:87:d4:7d:40:d4:65:09:
52:1d:fb:f7:d2:eb:27:39:c7:13:de:ba:2d:6c:91:27:03:61:
bc:c0:4e:54:8f:53:da:ca:30:16:ef:91:a6:6d:02:71:99:7f:
ec:3e:c8:57:95:e7:0d:a1:13:bd:52:a9:1f:73:31:e3:8a:4f:
9a:29:b6:53:7d:80:7f:0c:81:a4:ec:bb:45:dd:42:6d:04:f8:
ba:51:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:44:32 2024 by rpki-client on console-fra.rpki-client.org