Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/MfaD7R6G7HHYd3LIObnW0d76ZBc.roa
File: MfaD7R6G7HHYd3LIObnW0d76ZBc.roa (raw, json)
Hash identifier: qU1anVLAG26hFBzm4SlQlaEAlyStUxvUCpFWC/xm5Kc=
Subject key identifier: 31:F6:83:ED:1E:86:EC:71:D8:77:72:C8:39:B9:D6:D1:DE:FA:64:17
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01915518E242714378718704D71D9321A3A3
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/MfaD7R6G7HHYd3LIObnW0d76ZBc.roa
Signing time: Thu 15 Aug 2024 08:12:59 +0000
ROA not before: Thu 15 Aug 2024 08:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214367
IP address blocks: 46.8.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:18:e2:42:71:43:78:71:87:04:d7:1d:93:21:a3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 15 08:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31f683ed1e86ec71d87772c839b9d6d1defa6417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:1c:ab:df:d0:5d:a8:e4:be:4c:2c:1e:28:
92:29:f2:d5:8b:ac:f7:da:bd:c9:8e:30:23:c0:32:
16:c3:bd:47:72:74:63:17:ad:97:b7:2f:85:e0:43:
8d:bc:44:d7:3c:1f:9c:09:58:37:9c:45:76:5b:6f:
d2:42:34:84:a7:25:5b:22:79:14:ab:a9:23:6d:84:
b8:a4:83:21:0d:c8:a3:cf:fe:42:2c:0a:dc:a0:ab:
11:e5:a0:62:6e:62:93:d0:01:71:78:b0:b8:bd:87:
89:f0:82:7f:4e:af:e3:7c:2a:ca:5f:32:75:99:85:
6f:bf:3f:65:89:ee:57:46:93:cf:39:e4:0f:22:af:
9e:b2:da:a7:c8:c7:8d:c0:08:17:5e:55:e9:ff:8a:
2a:a1:25:68:b8:98:ae:a6:c5:f6:75:8b:79:33:d1:
16:ca:f8:0e:eb:94:fb:65:0e:37:d3:9a:6c:16:fc:
ea:92:e0:af:78:f5:6a:00:9e:c9:9a:7e:25:1e:10:
e8:47:67:59:55:71:8e:ef:84:42:2b:52:14:89:06:
48:52:06:29:d9:01:97:92:e8:6a:cc:ea:6f:55:aa:
93:31:ce:61:35:e6:b5:c9:e1:1f:7e:40:85:ab:7d:
d3:f8:8f:05:f3:fd:44:70:fc:0f:90:12:aa:d8:b5:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:83:ED:1E:86:EC:71:D8:77:72:C8:39:B9:D6:D1:DE:FA:64:17
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/MfaD7R6G7HHYd3LIObnW0d76ZBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8a:fa:2d:18:87:5a:d0:3a:75:65:e7:89:f3:37:29:18:7e:
47:1a:de:48:63:45:13:17:73:a2:46:51:28:72:8d:48:0b:43:
f6:2f:2b:cb:f1:85:78:f8:e5:04:73:e9:62:b0:b6:5c:c3:b8:
07:39:b8:46:28:65:9b:25:50:37:a7:92:76:2b:5d:17:33:a8:
2a:5c:ff:02:c9:5a:c0:50:89:c5:ff:c9:07:08:4e:bd:be:32:
5e:1d:9f:75:78:f0:ae:a8:b3:2a:24:ff:61:19:88:52:d9:84:
ce:f8:bc:d8:2c:28:d4:45:44:a0:85:44:71:32:44:1b:fd:9c:
a3:8c:8b:2e:af:aa:91:0f:b5:d3:ad:8e:71:73:87:b2:a3:55:
8b:ca:11:e4:c7:d8:49:bb:33:42:72:e5:a4:f3:92:c8:4a:b9:
16:e9:b9:53:1d:51:93:05:72:14:d1:30:a9:d6:84:29:8b:92:
7e:cf:1c:2b:bc:ba:b2:fc:96:5c:62:8a:eb:d8:51:2c:0a:a5:
8c:97:5b:7b:45:4b:6b:8a:a2:21:59:25:bc:0b:21:5a:c3:db:
28:d1:cb:11:68:5c:ff:e8:54:8e:5d:f1:9e:65:c6:82:53:a9:
30:b7:94:51:4b:ae:63:ff:17:bf:e7:1f:b5:84:89:12:04:58:
f2:4d:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:05 2024 by rpki-client on console-fra.rpki-client.org