Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rC2ouhsOIrc3dkHhZseWRFS7EqY.roa
File: rC2ouhsOIrc3dkHhZseWRFS7EqY.roa (raw, json)
Hash identifier: FSNtfCf+uItYPFayQBSP6mn4KZ47lGtoCtQmSoXVp0k=
Subject key identifier: AC:2D:A8:BA:1B:0E:22:B7:37:76:41:E1:66:C7:96:44:54:BB:12:A6
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC794224A8DAFEEF9F32BB7E141CFC0FD
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rC2ouhsOIrc3dkHhZseWRFS7EqY.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205569
IP address blocks: 109.248.60.0/24 maxlen: 24
46.8.50.0/23 maxlen: 23
46.8.50.0/24 maxlen: 24
46.8.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:22:4a:8d:af:ee:f9:f3:2b:b7:e1:41:cf:c0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2da8ba1b0e22b7377641e166c7964454bb12a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:fe:17:31:38:a1:73:50:3f:c6:1f:d0:88:
1f:08:67:d0:0d:81:75:ec:2c:aa:f2:92:d9:d8:43:
17:8d:bb:bd:ea:ac:4e:d5:62:72:bf:b6:e4:ff:b8:
33:fe:fd:c2:aa:dc:1f:c6:45:49:8c:2f:be:3d:b8:
8d:ca:8f:d3:a0:c9:66:53:36:c4:fe:33:9f:2e:8b:
4c:b4:8e:c1:e4:24:ca:f1:a8:71:a0:29:8f:ac:03:
83:48:26:2d:3b:be:ac:da:1e:64:89:6d:7c:d6:78:
85:25:09:e1:26:1b:6c:d6:3e:12:a8:ba:92:d9:8b:
e9:e7:7d:d9:33:66:aa:0f:37:d3:71:e4:96:7e:96:
90:b6:03:8c:3b:59:90:1a:3d:48:a6:ad:b4:73:1f:
0c:ae:4c:1d:ac:81:8b:fc:e8:5d:08:e6:05:61:ff:
2e:0d:bc:89:57:89:7b:86:a1:de:9c:20:e6:9a:d1:
bc:94:12:50:8d:2b:a0:c2:12:9d:d9:aa:e9:bd:91:
95:8b:5b:65:19:8e:0a:5a:32:09:ee:41:c6:a1:1e:
1a:df:81:b2:13:f1:6d:8c:84:f9:a3:d4:fa:f8:e6:
b5:6f:e8:ae:91:ee:b2:34:1a:b5:3d:9e:be:76:d4:
0f:e1:6c:51:c5:b1:eb:39:f1:42:53:b0:4d:ca:a3:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:A8:BA:1B:0E:22:B7:37:76:41:E1:66:C7:96:44:54:BB:12:A6
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rC2ouhsOIrc3dkHhZseWRFS7EqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.50.0/23
109.248.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e5:e4:b7:dd:72:58:a4:c3:b0:cb:10:58:70:9b:3c:b5:e0:
18:05:3e:37:bd:fa:6a:b8:7c:44:35:de:ff:2c:fe:84:94:11:
28:87:f0:13:a0:58:1c:60:a3:2b:a9:ae:42:ab:a4:c4:34:49:
d2:ea:42:fc:61:89:7b:98:e2:23:87:64:16:d4:be:ac:1f:8c:
3b:95:0d:8b:84:6f:9e:48:a7:6e:86:df:60:ee:3b:5b:b9:7e:
ca:7a:f2:1a:ac:2b:6c:f5:bd:68:31:2e:1b:7e:e1:9d:65:0b:
18:32:c6:91:3c:63:63:a8:4b:d8:39:d2:c7:56:61:75:65:37:
00:68:c1:ac:20:78:1a:a2:e3:53:9f:28:a0:a5:27:ca:66:11:
7a:2f:29:72:ed:b8:79:e9:9c:9d:6c:04:20:aa:d7:6a:73:2d:
46:2a:fe:93:7b:a1:cb:80:58:25:0a:2a:8d:8b:61:cc:bf:0b:
c2:ba:57:0d:73:03:ef:fe:37:bf:da:0e:e9:ea:74:d9:e6:dc:
d3:e2:a9:3e:1c:41:b6:a1:25:1f:f3:a9:d5:47:2f:4e:11:8b:
73:d7:f1:48:e1:06:19:44:17:ac:5e:3c:90:1d:8b:75:c2:2c:
5b:7c:f0:42:69:35:94:0f:64:05:93:6b:36:4d:29:e8:50:8a:
78:a0:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:13:26 2024 by rpki-client on console-fra.rpki-client.org