Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/v49-hAESDUWEdIj0WZZT2kIamK8.roa
File: v49-hAESDUWEdIj0WZZT2kIamK8.roa (raw, json)
Hash identifier: Igs7ce68uHD5Ar8zpSCciHTSOdiRcH77HPIffsrTKWY=
Subject key identifier: BF:8F:7E:84:01:12:0D:45:84:74:88:F4:59:96:53:DA:42:1A:98:AF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01904E934CBFE0298A5F21A43D6C105000A1
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/v49-hAESDUWEdIj0WZZT2kIamK8.roa
Signing time: Tue 25 Jun 2024 08:46:34 +0000
ROA not before: Tue 25 Jun 2024 08:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43330
IP address blocks: 46.8.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:93:4c:bf:e0:29:8a:5f:21:a4:3d:6c:10:50:00:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 25 08:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf8f7e8401120d45847488f4599653da421a98af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:73:0b:37:dc:5f:38:fc:bf:5f:78:ad:25:
d5:1d:17:dc:55:fc:d5:81:1c:c7:c2:9f:3f:b8:a9:
f0:89:5c:c6:53:05:d7:2e:13:80:22:4d:27:10:56:
54:c4:47:36:37:56:27:00:70:7e:b2:7c:64:c9:49:
22:26:1b:3c:1c:23:bc:ef:c8:78:a0:eb:a6:47:ed:
33:79:71:5a:9a:1e:d3:de:fd:eb:30:bd:e0:15:7d:
1c:57:77:8b:13:74:c0:74:1e:16:a2:f8:0a:e9:92:
4a:4b:35:b7:0d:44:dc:04:5d:ed:cb:64:a7:52:c9:
52:e7:78:d9:b1:58:c5:aa:e8:3e:5e:9c:d3:66:6d:
57:b6:04:9f:46:04:cc:46:3e:9d:6b:f5:9b:2b:79:
3a:3c:29:dc:ac:c3:67:87:6b:c7:33:e4:d5:e3:4b:
1d:03:93:ea:9c:09:32:a5:50:06:6c:a0:f4:f0:2b:
30:fc:33:77:2c:ed:99:99:2b:41:d0:20:23:0c:d5:
60:eb:c4:ab:fa:b0:66:fb:c1:a6:2a:7a:89:fa:de:
b6:57:35:7d:c4:d8:4f:b8:b2:63:df:06:5c:36:c3:
43:ea:90:b2:05:cc:c7:f1:d0:03:b9:38:b1:92:8f:
37:e3:43:9a:03:32:72:c5:dc:9d:99:63:ca:b9:87:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:7E:84:01:12:0D:45:84:74:88:F4:59:96:53:DA:42:1A:98:AF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/v49-hAESDUWEdIj0WZZT2kIamK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.239.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e2:48:8d:cd:4c:30:a7:6b:e6:15:ba:57:35:27:fd:2a:d7:
12:da:dc:7f:4d:76:74:e8:87:4f:96:10:92:2d:b4:b4:f0:3e:
86:32:af:5b:1b:97:64:a3:8a:ef:04:e1:a2:09:91:9e:22:36:
a2:85:cf:09:68:0b:2d:fd:58:15:fc:e0:c4:25:4d:cc:20:13:
8c:63:69:fc:41:88:96:c8:aa:88:e9:0a:c9:b4:62:96:95:86:
20:ba:fa:fe:8f:e7:bd:06:d2:27:40:e2:4a:09:e3:4a:2f:ed:
a8:b6:86:b1:69:41:b9:aa:2d:72:56:65:c2:b4:4e:49:0f:36:
b2:ec:f9:1f:e2:1c:2f:41:33:db:2d:49:1c:db:72:8d:48:2a:
82:34:ff:21:c6:21:d2:23:77:a9:08:cd:96:de:72:42:88:07:
55:99:fc:78:ee:47:05:38:89:f0:72:0a:15:a4:b7:29:51:9d:
2e:49:68:52:aa:1d:6d:32:8d:a6:af:c9:07:7b:3f:c5:67:83:
ae:6c:74:8c:68:b6:cd:a3:a5:61:63:ed:6b:e4:aa:44:42:a4:
18:81:3d:e0:fa:0b:39:65:dd:d6:b9:f2:41:26:2e:45:f2:52:
26:4d:ab:77:f0:e9:b8:a1:0e:0b:41:41:f0:60:a8:cf:04:ca:
a1:3a:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:05 2024 by rpki-client on console-fra.rpki-client.org