Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/6zsH4r4sHMJ3aOSkPAxh7Nd59vA.roa
File: 6zsH4r4sHMJ3aOSkPAxh7Nd59vA.roa (raw, json)
Hash identifier: YqV8YN4Mu4+UwyF6HQcIYcGhAxQRSCLnK/ZfE08vbDQ=
Subject key identifier: EB:3B:07:E2:BE:2C:1C:C2:77:68:E4:A4:3C:0C:61:EC:D7:79:F6:F0
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 018CC6B83A216270C7E5B38CDE1698E57F9A
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/6zsH4r4sHMJ3aOSkPAxh7Nd59vA.roa
Signing time: Mon 01 Jan 2024 20:30:11 +0000
ROA not before: Mon 01 Jan 2024 20:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48608
IP address blocks: 46.34.96.0/20 maxlen: 20
46.34.96.0/21 maxlen: 21
46.34.96.0/19 maxlen: 19
46.34.104.0/21 maxlen: 21
46.34.112.0/21 maxlen: 21
46.34.112.0/20 maxlen: 20
46.34.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:3a:21:62:70:c7:e5:b3:8c:de:16:98:e5:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Jan 1 20:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3b07e2be2c1cc27768e4a43c0c61ecd779f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:ca:81:b5:10:32:9b:aa:c1:d5:fb:b7:42:
69:e1:dd:33:d1:3d:0c:27:c6:01:ad:ef:e1:fe:67:
cd:14:d9:d5:b6:8e:4a:27:8d:4d:f4:68:e1:9e:75:
91:fe:32:c4:17:fb:aa:59:6b:93:9e:54:63:e7:82:
a2:ca:a0:f9:69:b0:12:85:eb:10:d8:13:1f:9b:24:
a8:91:42:a6:42:aa:a5:54:03:01:67:3c:c8:2f:fc:
bb:de:5f:cd:8d:6e:80:6b:aa:02:aa:d6:80:97:4d:
ba:97:ca:2e:c7:2a:ae:6e:9a:55:63:fc:eb:a7:50:
02:34:0e:44:d1:d8:3d:56:d8:f3:9d:76:7f:ea:0a:
93:d1:a9:75:aa:93:88:39:21:f8:b5:b7:89:0d:35:
1f:b7:08:f6:13:00:ee:49:89:10:66:6f:b2:5b:d1:
3f:5a:20:e0:fc:af:08:5c:5b:aa:45:4d:e8:40:88:
cd:36:94:33:0d:eb:fc:26:a2:ef:eb:ba:17:29:a8:
74:61:80:93:17:2b:1a:68:fc:2d:3c:cb:95:e6:98:
b3:0e:30:19:39:3e:06:e8:71:0f:26:b9:bf:28:11:
73:0f:11:2d:70:12:59:18:48:2e:86:4d:41:8a:85:
eb:22:99:d6:e0:c3:14:84:c3:7e:e4:93:00:ee:f5:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:07:E2:BE:2C:1C:C2:77:68:E4:A4:3C:0C:61:EC:D7:79:F6:F0
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/6zsH4r4sHMJ3aOSkPAxh7Nd59vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:d5:41:b5:24:04:ff:fb:e3:a2:5e:d4:97:05:9d:4c:36:a3:
84:9c:84:dc:e0:04:09:da:e2:0d:d2:c7:f7:17:1b:a5:06:d2:
8a:0f:ec:c4:36:fd:35:3f:11:ca:1f:49:60:73:9c:d5:0e:8a:
34:e3:b8:5c:a5:49:4a:7a:29:d7:71:47:6f:12:ac:2b:d2:8c:
bf:a7:01:c0:93:a2:03:f3:8a:b4:e7:b1:34:42:6c:75:d8:70:
c3:d4:f4:30:b8:d5:bf:b8:4a:45:25:46:41:9a:b9:c7:7f:8d:
db:3e:c0:4c:b8:a8:27:7d:92:41:21:2d:45:98:51:2e:1d:7a:
e0:3c:1b:bc:bb:8f:ee:de:15:9b:18:bc:1b:28:f6:65:64:41:
36:47:66:25:01:83:ec:54:77:c6:14:f1:ac:e3:a7:4b:3f:3a:
b6:24:cb:5d:46:0e:52:f6:fb:59:f8:7f:d6:b0:75:13:94:bd:
d6:fa:9d:23:5b:0a:b5:01:b0:27:6b:08:e6:ba:80:3d:0b:27:
92:29:23:80:36:b7:5f:e1:76:ef:96:b5:75:f1:7f:0d:d6:ad:
c1:11:f8:b8:64:9d:c1:ab:6e:6b:fb:f5:6c:f2:ba:dc:4f:b0:
73:4a:ae:15:50:c7:10:30:ed:94:0a:33:12:d3:89:28:71:b0:
ac:e0:c9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:07:21 2024 by rpki-client on console-ams.rpki-client.org