Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/46wI0fm4hCTxS5FC_Yk9aWLz7Z8.roa
File: 46wI0fm4hCTxS5FC_Yk9aWLz7Z8.roa (raw, json)
Hash identifier: 0L3YWAPRJ1mXie/DyCfXdpET9afdziAdUD9B1v/sX7w=
Subject key identifier: E3:AC:08:D1:F9:B8:84:24:F1:4B:91:42:FD:89:3D:69:62:F3:ED:9F
Certificate issuer: /CN=b20663583a8189cbeaac88d438767997b1125549
Certificate serial: 018CC2DAF5D5041CDC8D9531B252FAEF8C8A
Authority key identifier: B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/46wI0fm4hCTxS5FC_Yk9aWLz7Z8.roa
Signing time: Mon 01 Jan 2024 02:29:38 +0000
ROA not before: Mon 01 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29438
IP address blocks: 213.225.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f5:d5:04:1c:dc:8d:95:31:b2:52:fa:ef:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20663583a8189cbeaac88d438767997b1125549
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3ac08d1f9b88424f14b9142fd893d6962f3ed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:c9:28:b0:5a:e5:2f:e8:17:a6:d4:00:e1:
68:06:74:9d:81:f3:98:3b:50:89:22:27:80:13:05:
9f:19:3a:ae:56:05:04:35:2f:f6:4d:91:20:df:43:
d9:a6:1b:77:32:31:1c:44:9d:ee:6f:72:97:16:aa:
86:5c:61:eb:b8:f0:f6:c1:d1:9f:89:95:44:92:7e:
c8:67:53:56:af:ff:de:da:28:c1:36:f5:ea:46:df:
e6:fe:ee:fe:b8:54:05:12:7e:a8:c2:28:48:ff:04:
61:f1:f2:2d:ad:17:c1:45:8e:5e:3d:22:c2:aa:19:
76:8a:88:07:cc:83:43:3d:b3:c4:e2:31:cf:33:06:
cd:f2:31:e1:74:4b:4a:11:3c:30:00:70:6f:2a:85:
43:00:2f:74:c2:7b:27:e0:45:33:11:9d:34:da:c2:
98:9f:ae:25:20:34:5a:5d:62:02:80:b5:b0:b3:fe:
cd:2c:99:45:e3:8a:0e:e9:57:60:20:65:32:1b:ea:
e8:8c:fc:56:78:95:35:15:35:a9:54:bc:3b:65:97:
51:6c:55:36:02:b4:0d:b9:86:a0:b4:f7:c5:ed:61:
5d:3d:b8:72:0c:44:08:d6:73:b4:70:9d:ac:0b:14:
5e:14:e9:9f:59:ba:58:1d:29:72:41:3e:02:97:4c:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:08:D1:F9:B8:84:24:F1:4B:91:42:FD:89:3D:69:62:F3:ED:9F
X509v3 Authority Key Identifier:
keyid:B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/46wI0fm4hCTxS5FC_Yk9aWLz7Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:f5:c1:99:82:55:27:45:12:d1:32:f2:83:be:ae:b0:59:74:
7f:e7:0e:69:b7:08:ef:05:c3:f9:76:42:6d:1c:9a:ee:a7:5d:
8c:c9:be:a3:12:e5:35:07:7d:6a:fb:a2:cc:a4:de:07:94:bc:
a0:a5:70:f1:18:17:ab:ed:0f:1f:96:e8:95:a2:78:a6:30:a2:
62:ee:cd:a0:a0:5f:a3:55:d6:61:df:bf:fa:3d:47:1d:78:17:
89:16:f0:87:cd:a5:67:e0:16:29:4a:07:35:14:5b:4d:1d:4c:
c8:b1:80:32:7d:c3:f2:68:c7:68:9c:42:92:3e:7d:e7:25:7b:
bd:cd:eb:5c:17:1e:95:ed:aa:e3:2d:9f:44:b6:4d:57:e5:35:
69:9e:56:12:09:84:2c:bc:e5:5d:e2:0e:7e:2d:57:2b:1d:18:
28:7a:76:d8:2d:03:71:fb:7b:d2:03:9a:d4:6c:37:fe:3f:41:
55:a0:c5:9a:de:9c:db:1a:17:cc:26:d1:2e:12:df:d7:62:6d:
64:bd:fb:9f:0b:c7:c0:82:cc:48:15:0e:aa:74:b9:0e:76:48:
ea:d7:3e:e2:0b:27:a3:c9:d8:a9:b4:31:28:d2:dd:b1:7a:84:
3d:7d:3e:7f:f6:af:9f:8b:3e:0c:3d:80:04:4a:aa:7e:14:14:
7f:43:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:14 2024 by rpki-client on console-fra.rpki-client.org