Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/mt3Wz2jVE8SJs7C8cOUhqlwrDCo.roa
File: mt3Wz2jVE8SJs7C8cOUhqlwrDCo.roa (raw, json)
Hash identifier: 4nsyZHk5yVfNEg6yzGMuNA3p+KmOHnToYZ9URT4X0QQ=
Subject key identifier: 9A:DD:D6:CF:68:D5:13:C4:89:B3:B0:BC:70:E5:21:AA:5C:2B:0C:2A
Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial: 019015965F7CB1D2A733040845A23DADDDE3
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/mt3Wz2jVE8SJs7C8cOUhqlwrDCo.roa
Signing time: Fri 14 Jun 2024 07:11:34 +0000
ROA not before: Fri 14 Jun 2024 07:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24700
IP address blocks: 46.174.188.0/24 maxlen: 24
46.174.189.0/24 maxlen: 24
46.174.190.0/24 maxlen: 24
46.174.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:15:96:5f:7c:b1:d2:a7:33:04:08:45:a2:3d:ad:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Validity
Not Before: Jun 14 07:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9addd6cf68d513c489b3b0bc70e521aa5c2b0c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:a3:0a:4e:30:9f:20:c9:e4:09:a1:9d:dc:
3c:78:bb:d5:b4:68:00:30:08:be:d4:cd:58:89:d1:
10:a3:2a:4d:c5:d8:96:8f:3d:48:48:7b:de:16:fc:
72:80:2c:67:f0:3a:25:e8:93:36:8c:d0:8e:61:be:
28:8d:14:5d:65:51:c8:7c:9f:1b:c2:bb:33:5e:e8:
a8:44:f7:24:0e:a3:a3:dc:24:68:bc:6a:fe:b7:c9:
f7:44:25:53:a4:0f:6c:d4:78:a7:e7:cf:fc:40:63:
df:a0:a6:01:2c:69:a4:07:ea:db:46:6d:3b:94:30:
99:0d:8b:83:51:51:36:0f:68:39:12:2a:69:7c:1f:
2b:d0:5a:0f:c0:dc:e6:c6:3d:61:d0:b0:32:0c:e0:
73:bf:39:8a:07:0c:70:28:59:b4:6e:36:0a:17:21:
d8:36:49:a7:c4:b2:31:c5:6a:62:e0:e0:82:be:36:
a7:0d:d4:8a:0a:f4:23:5a:e9:98:99:54:e3:90:cc:
ad:ce:9e:2f:10:5f:55:dd:9f:74:8d:c5:71:da:49:
28:68:c7:aa:a3:6b:5a:a6:1d:34:3e:fd:35:a8:b4:
ef:02:5f:51:e0:c9:d5:6a:4b:c9:70:32:1f:46:70:
17:78:5d:86:22:4f:fe:a5:8d:e5:fb:01:90:0d:31:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:D6:CF:68:D5:13:C4:89:B3:B0:BC:70:E5:21:AA:5C:2B:0C:2A
X509v3 Authority Key Identifier:
keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/mt3Wz2jVE8SJs7C8cOUhqlwrDCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:ad:2f:b0:1b:a5:47:3e:21:0f:de:9f:b9:46:dd:76:75:d4:
1b:21:1a:49:2e:fc:c7:6f:78:62:67:d2:41:27:d3:af:04:ed:
70:a2:3e:f2:99:9e:54:6c:13:11:66:6f:0f:ee:bd:4f:6b:be:
62:a2:02:9c:49:a1:95:30:4c:91:3f:c6:e3:64:1d:22:d7:57:
b5:0e:44:93:be:a6:fa:b8:59:f4:ff:c5:aa:42:eb:ec:f9:a6:
0c:2b:3d:09:f2:7e:0e:c7:f3:9c:d8:05:ef:60:95:2a:32:78:
cb:cd:e1:8a:58:d6:0f:53:ff:8b:ec:10:bb:9b:b7:b4:b9:1c:
e8:30:5a:7e:23:7a:9c:00:28:65:f3:c9:de:25:fa:49:2b:1e:
82:53:2e:b5:f6:aa:a1:b7:32:e0:fe:7b:84:8b:9f:df:88:02:
61:45:43:e6:0e:78:d7:0b:fb:6d:2c:96:c5:0d:76:1d:cb:27:
fd:77:ca:41:8b:0a:57:de:9f:11:14:7e:5b:62:1d:e5:d4:9d:
f4:63:9f:6c:13:87:8f:a0:f0:f6:f1:2e:c1:0e:81:e7:9a:de:
bb:aa:c7:0e:68:72:0e:4f:a3:06:06:d8:c0:80:96:43:a4:be:
1e:7b:4e:b2:69:d3:c1:7c:97:61:e3:38:3b:4d:56:9b:5f:1b:
6b:00:8c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:46 2024 by rpki-client on console-ams.rpki-client.org