Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SjeN1iQuOhlATihukxwWcXkM6NU.roa
File: SjeN1iQuOhlATihukxwWcXkM6NU.roa (raw, json)
Hash identifier: I5mol8yme21nExfEMf3xp6Q57uY7pjD5kQ/ja7hoTd8=
Subject key identifier: 4A:37:8D:D6:24:2E:3A:19:40:4E:28:6E:93:1C:16:71:79:0C:E8:D5
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC7941E7F35F502665B22887E73529837
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SjeN1iQuOhlATihukxwWcXkM6NU.roa
Signing time: Tue 02 Jan 2024 00:30:22 +0000
ROA not before: Tue 02 Jan 2024 00:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60592
IP address blocks: 46.8.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1e:7f:35:f5:02:66:5b:22:88:7e:73:52:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a378dd6242e3a19404e286e931c1671790ce8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:02:61:00:c0:4e:dc:a9:9f:0b:9d:62:76:
ea:12:de:54:c2:82:2e:73:93:cc:1b:d2:d0:be:9f:
98:bb:57:cc:9a:06:fc:db:26:ac:e2:fd:93:1d:43:
a4:2f:8c:04:cc:a7:2b:3a:55:31:9b:8d:17:a9:da:
77:f2:ff:f5:08:e0:16:0a:46:4b:04:0a:99:10:ea:
89:75:8c:70:7e:c6:d4:11:68:c0:c6:93:62:08:e4:
54:1a:68:8a:0e:15:c7:b7:c7:67:66:39:ad:89:ce:
fe:b9:a8:99:15:fd:bb:9a:ca:f8:65:e6:4b:8b:c3:
81:5c:9b:4c:34:a0:c5:cb:3e:fa:a2:fd:00:3b:5a:
30:82:6e:76:b2:57:0b:d5:97:ae:87:ea:45:4d:b8:
6f:f8:ee:3e:2f:78:27:5b:d9:e8:d3:43:52:e8:e2:
05:19:16:b8:f9:31:dc:69:41:11:fc:41:f3:a7:78:
16:37:27:7b:f4:2a:8b:27:27:6f:6e:6e:af:33:21:
cf:11:9c:34:59:c6:d7:4a:3d:e1:5f:80:4c:23:0b:
bc:d5:c1:7e:c4:e5:79:87:20:a0:9d:1b:c5:65:ff:
e3:fb:82:6a:4b:59:5c:54:97:5d:10:19:10:ed:7c:
7a:38:03:4c:50:e1:41:35:1b:ad:02:b8:f5:d0:bb:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:8D:D6:24:2E:3A:19:40:4E:28:6E:93:1C:16:71:79:0C:E8:D5
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SjeN1iQuOhlATihukxwWcXkM6NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.8.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ca:f8:79:ea:a4:23:a8:5f:ac:94:28:3a:7c:83:f8:18:e8:
7f:2a:43:a5:89:46:87:6d:54:3f:52:5e:67:08:e1:32:05:f7:
2b:00:60:c9:54:ad:4f:4b:16:6a:cd:5c:2d:75:18:ba:e8:22:
12:32:f9:6a:2d:af:c1:83:0e:78:a7:e4:3b:bc:93:41:e6:92:
bc:11:b0:a3:c2:7b:6e:d7:0d:4c:91:96:26:c5:6b:36:83:83:
f6:27:de:c0:44:14:37:a9:e5:d5:90:bc:d0:2d:ae:6d:c6:b5:
21:d8:76:79:e4:4a:4d:26:55:eb:23:b2:57:17:a8:21:a8:09:
8a:61:e6:5c:25:33:41:ba:3d:22:91:78:8a:09:50:78:cf:ba:
a9:bf:03:ec:80:99:68:a4:49:12:eb:e7:87:27:92:da:af:ff:
84:e1:02:93:46:ff:34:3c:8b:61:50:c1:62:64:21:86:b8:ea:
f0:83:ed:b8:a6:aa:c4:54:57:52:c5:6d:36:39:22:b9:f1:b8:
19:eb:84:9d:b6:64:36:d5:59:e1:e2:0d:17:8b:2d:7e:d8:d4:
68:4a:19:e7:fd:de:cf:ba:24:66:57:f1:29:05:f5:7d:fe:8d:
2c:bd:24:de:0c:1c:56:ef:6a:5f:28:cd:90:6e:60:e5:22:40:
d6:a2:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:13:26 2024 by rpki-client on console-fra.rpki-client.org