Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZQRq6y1DSxwd7QcVIchoXYHI_2k.roa
File: ZQRq6y1DSxwd7QcVIchoXYHI_2k.roa (raw, json)
Hash identifier: Twiu97yjnJyFlUrwuAa0USjUbDxLox/B5stS864TISg=
Subject key identifier: 65:04:6A:EB:2D:43:4B:1C:1D:ED:07:15:21:C8:68:5D:81:C8:FF:69
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0192705241F9B7796A95B7CBEC912D26BF1B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZQRq6y1DSxwd7QcVIchoXYHI_2k.roa
Signing time: Wed 09 Oct 2024 08:08:11 +0000
ROA not before: Wed 09 Oct 2024 08:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 46.8.58.0/23 maxlen: 23
46.8.65.0/24 maxlen: 24
46.8.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:52:41:f9:b7:79:6a:95:b7:cb:ec:91:2d:26:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 9 08:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65046aeb2d434b1c1ded071521c8685d81c8ff69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:ad:5d:d7:57:8e:bb:c2:ac:7b:34:63:53:
30:31:46:6b:59:9a:77:f5:dc:a0:cb:b7:ca:60:7c:
61:f6:6a:d6:f9:a4:3a:ad:17:18:09:24:45:9d:c3:
a6:32:7c:2c:a5:d9:8b:a7:f4:22:30:23:73:be:a3:
37:9e:65:fb:f0:58:9e:c7:ed:72:85:ae:fe:5b:22:
5d:1b:75:af:3d:12:16:02:1d:95:82:ae:ed:5a:60:
b7:fe:45:5e:ef:e0:0e:49:50:96:be:56:79:29:40:
b0:05:e5:3f:6a:70:6d:6d:53:2e:de:31:18:cd:5a:
f1:09:8f:a3:9d:62:07:1c:69:bd:41:4c:22:44:32:
23:63:9c:b7:6e:bb:00:ae:6a:3d:82:ea:06:3e:4c:
79:6b:86:43:7a:94:a1:bb:d5:75:21:2b:fc:ad:90:
6d:24:db:76:90:3a:31:7a:7b:e6:cc:cb:6f:6f:cb:
23:fd:32:11:43:5c:e9:e7:11:2e:b2:13:d8:01:9c:
c2:bc:b0:33:6c:75:87:d7:9d:a1:76:9b:99:49:e9:
b9:c3:ad:97:aa:6a:dc:39:f4:1f:e6:eb:61:b4:90:
8e:45:85:21:6e:85:a6:d8:7d:2f:4a:3c:e1:3e:09:
49:85:64:0f:3c:1f:2e:a1:6d:3c:a8:f9:04:f4:d7:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:6A:EB:2D:43:4B:1C:1D:ED:07:15:21:C8:68:5D:81:C8:FF:69
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZQRq6y1DSxwd7QcVIchoXYHI_2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.58.0/23
46.8.65.0/24
46.8.67.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6e:ec:ed:63:a0:c8:ba:7a:c1:a7:46:0c:a8:cf:e1:96:0c:
7a:86:51:51:91:c0:47:52:49:4e:25:4e:c0:3c:69:a0:de:aa:
47:64:52:05:07:48:f0:47:0c:db:64:35:20:9f:e0:8d:2f:b2:
9e:3f:7d:78:49:e6:d4:dc:85:fe:99:f1:db:eb:9a:fd:39:98:
aa:cd:b1:3e:4f:f7:4b:64:09:f2:90:6c:71:d8:45:e2:6f:a7:
6d:86:2b:79:7a:2f:54:26:3c:03:e7:61:9b:af:42:3a:60:3b:
b8:fe:25:4b:91:c8:01:35:c6:ee:89:ac:7b:fe:bb:31:04:0d:
96:4d:2e:26:0e:53:7c:09:c7:e8:14:92:70:cb:95:a2:17:26:
b8:50:ca:43:63:ef:92:40:02:77:36:84:5c:4b:61:fb:a8:b5:
73:46:59:fe:64:8e:1e:b3:30:36:e7:16:f0:b2:fc:57:7d:c7:
b6:9a:17:07:81:34:5f:21:f4:9a:a8:b2:2e:6f:db:78:f6:57:
c9:42:2e:93:e7:6a:25:27:9c:90:4d:d2:0f:e1:e2:e3:3d:07:
73:c8:95:2a:1d:15:ef:63:cf:89:d2:4c:bb:82:5f:6b:11:af:
a9:de:38:bd:29:f4:e8:22:99:4d:5c:ed:8a:1d:d1:87:46:21:
8c:92:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:05 2024 by rpki-client on console-fra.rpki-client.org