Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa
File: UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa (raw, json)
Hash identifier: xiJa2lGBfTDMcUIPrbXwXpn0e7DzOLKhZxFKWIqSBwE=
Subject key identifier: 50:E1:E0:45:FD:72:A7:48:6C:BC:0D:1F:61:09:50:3F:4B:53:D0:7A
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018D7E0FB900829924066383185D63736FED
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa
Signing time: Tue 06 Feb 2024 10:56:15 +0000
ROA not before: Tue 06 Feb 2024 10:56:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56701
IP address blocks: 46.8.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:0f:b9:00:82:99:24:06:63:83:18:5d:63:73:6f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 6 10:56:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50e1e045fd72a7486cbc0d1f6109503f4b53d07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:f3:c2:44:fb:a0:11:92:37:5c:79:a5:4c:
ac:50:fa:27:e9:01:7d:cb:23:53:bc:35:b7:ad:ea:
3d:08:83:f4:05:56:f4:bb:55:1f:15:7f:ee:8b:d6:
ed:b5:01:84:fe:e9:46:d4:9f:b1:16:93:75:db:93:
7e:dd:28:41:d6:44:ed:e2:ab:a1:ee:2c:68:4a:78:
b4:6a:57:52:ed:0a:0b:be:f8:27:f8:1d:6f:f0:8b:
02:ed:56:75:13:77:07:3d:38:17:3b:94:63:4b:54:
52:25:77:cd:87:5f:78:78:ab:a4:ff:d8:04:61:b2:
27:de:52:6f:3f:c3:db:05:69:1b:38:ec:0b:f0:79:
d6:e8:62:01:ac:0a:ea:46:e1:1e:28:f5:97:55:d7:
36:c4:18:10:83:a9:97:5a:40:53:36:ad:7f:82:b2:
f6:b6:de:f6:b1:8c:c3:29:30:55:f9:dd:ca:91:e2:
df:1f:6a:d6:6c:6a:41:d0:94:a7:4c:6e:22:13:83:
b7:a7:37:c6:f6:8c:47:22:cb:b5:63:42:90:08:10:
1a:49:70:43:cd:af:81:48:1e:f0:34:64:fb:38:be:
e4:a2:69:81:be:2f:27:9b:a5:78:0e:8d:ee:9c:9b:
23:21:27:e4:7c:04:28:85:6e:47:e4:e0:15:eb:c2:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:E0:45:FD:72:A7:48:6C:BC:0D:1F:61:09:50:3F:4B:53:D0:7A
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UOHgRf1yp0hsvA0fYQlQP0tT0Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:4c:47:01:2a:8e:2c:97:a4:2e:45:22:8a:9d:32:b7:8e:37:
79:4e:76:35:f7:89:61:f5:22:94:84:2b:76:54:ca:85:3f:13:
c8:6a:b2:3e:4d:0b:5e:8a:54:91:e0:d8:b5:ba:61:1b:bd:6c:
34:1c:22:fa:03:2c:1a:f8:4d:eb:5f:13:ca:9d:d5:94:d0:bf:
46:6e:85:34:a2:3f:3b:78:27:ec:f4:1e:40:6e:b6:49:2e:a5:
66:d2:77:91:50:e5:77:5b:24:92:7e:e1:56:2f:41:93:bf:f4:
c5:50:80:43:93:d4:bf:70:f5:48:86:b0:e9:b0:43:4b:9f:06:
a6:c9:45:5f:da:5c:8e:f8:90:e2:df:e5:0b:8d:e0:bb:62:16:
64:49:64:f5:03:93:ff:81:2e:0c:6c:f6:6b:28:1b:fb:ed:22:
28:80:2d:1f:81:26:e4:69:19:bf:19:cf:83:a9:4d:c1:10:69:
c6:23:57:bd:58:2b:01:eb:bf:ef:87:a2:e2:3f:74:ee:c9:62:
f2:be:3f:c5:33:9c:5c:b4:cc:e4:17:78:37:68:24:c6:07:09:
01:1c:da:05:80:6b:72:78:b8:0b:7e:4b:40:87:03:2f:1d:8c:
47:0a:cc:ee:be:8f:66:64:f6:54:b4:41:58:74:47:f0:9b:97:
25:ee:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:27:39 2024 by rpki-client on console-ams.rpki-client.org