Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rtpEpn7KLNwEJ78vI8TNEnaoBuU.roa
File: rtpEpn7KLNwEJ78vI8TNEnaoBuU.roa (raw, json)
Hash identifier: AC0vGbDBBa6bEZWHiBTk7KntVK1kcL9O+rVUfksDuaQ=
Subject key identifier: AE:DA:44:A6:7E:CA:2C:DC:04:27:BF:2F:23:C4:CD:12:76:A8:06:E5
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018EE1B17376E8FD768E86409BE34647B412
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rtpEpn7KLNwEJ78vI8TNEnaoBuU.roa
Signing time: Mon 15 Apr 2024 12:18:06 +0000
ROA not before: Mon 15 Apr 2024 12:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8342
IP address blocks: 46.8.4.0/24 maxlen: 24
188.130.200.0/22 maxlen: 22
188.130.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:b1:73:76:e8:fd:76:8e:86:40:9b:e3:46:47:b4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Apr 15 12:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeda44a67eca2cdc0427bf2f23c4cd1276a806e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:f9:a6:65:50:65:cd:ec:99:61:b9:0f:3f:
7a:7a:13:be:a6:5f:d7:20:32:bc:43:87:45:75:0a:
f0:e8:52:d1:7f:3c:2e:9d:37:02:c9:ce:0d:ed:dd:
9e:75:f3:4e:92:f1:a0:cc:c1:6a:48:a5:ef:44:28:
6c:3d:43:e9:fb:e1:9a:1c:f1:1a:dc:5d:97:4f:48:
56:c2:4c:44:7c:45:15:9b:fb:e1:07:df:92:13:dd:
21:97:ff:44:70:65:5d:33:8f:23:a1:81:9c:ef:de:
8b:34:60:e2:96:fd:f3:19:5b:b1:ef:69:b8:4b:4b:
5d:9c:e7:04:26:47:be:03:33:fe:2c:38:7d:8b:cc:
86:8d:2e:2e:8c:80:0e:37:b1:82:50:e3:8f:9a:76:
ed:07:fe:4d:df:76:23:b1:68:dc:aa:5f:cc:4f:06:
ee:06:9c:cf:07:01:f9:d4:9d:d8:03:5a:1f:fc:a4:
37:09:12:f8:e8:9d:de:d7:ab:44:64:9b:01:42:4a:
e6:2d:b3:a4:fc:91:ed:92:91:55:62:62:5d:ba:8a:
09:5e:37:4a:fd:3c:ae:67:46:0f:b3:58:38:37:af:
82:dd:7c:97:1b:4a:9e:45:f7:36:3b:69:88:5b:57:
bf:8b:cc:70:26:59:1c:bc:24:43:38:34:f8:72:55:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DA:44:A6:7E:CA:2C:DC:04:27:BF:2F:23:C4:CD:12:76:A8:06:E5
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rtpEpn7KLNwEJ78vI8TNEnaoBuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.4.0/24
188.130.200.0-188.130.204.255
Signature Algorithm: sha256WithRSAEncryption
41:5a:9a:b5:98:5b:8d:d8:95:45:80:06:ae:ea:78:17:7d:e9:
cf:33:31:41:7d:a9:df:49:78:3b:51:56:27:46:ea:79:5e:0e:
a4:a9:93:da:6f:2c:9c:26:2d:8b:34:36:e9:34:5c:5b:75:7e:
e0:79:97:df:9b:f5:3d:4d:45:59:50:3d:64:2b:a8:5d:6b:4f:
16:f4:c4:84:d2:ab:7b:21:67:0f:0e:73:42:d4:5a:29:e9:94:
a7:ab:98:29:6d:b6:f8:01:11:22:88:b0:a5:cd:40:d3:a3:54:
0a:c6:c8:d6:d4:10:49:72:fd:06:b3:c1:d0:59:a3:0b:29:08:
e3:ff:4f:d8:06:6c:34:54:fd:67:a2:b5:9a:9f:52:9e:32:ec:
9d:af:b5:3a:70:7b:05:c7:a6:5d:a0:a5:f5:1e:0b:c0:6f:91:
b1:ec:4c:fc:12:4a:85:67:99:1b:50:a7:fa:77:51:92:61:cd:
49:57:f9:1a:1f:88:dc:8e:df:b7:0f:a6:d7:9f:7b:92:df:8a:
a1:dc:67:6d:03:b1:91:72:fa:e9:04:2a:b0:ba:81:35:18:af:
b2:7e:9d:a8:cc:47:5b:a4:5b:ea:04:f1:7d:a4:76:ba:9b:75:
34:c6:ee:c2:51:4b:19:c5:22:34:50:18:01:7b:1f:fc:6d:9f:
bd:e5:11:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:56:43 2024 by rpki-client on console-fra.rpki-client.org