Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/2DwpblydvurCgJdGvPjTJGchERc.roa
File: 2DwpblydvurCgJdGvPjTJGchERc.roa (raw, json)
Hash identifier: 3YfuOvB0LbZ9KybmwXWTR6ICRKkKlU63df+dlAKrAgs=
Subject key identifier: D8:3C:29:6E:5C:9D:BE:EA:C2:80:97:46:BC:F8:D3:24:67:21:11:17
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 018CC34953762DC1DB5EE69D70CB51E518EF
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/2DwpblydvurCgJdGvPjTJGchERc.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204294
IP address blocks: 46.229.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:53:76:2d:c1:db:5e:e6:9d:70:cb:51:e5:18:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83c296e5c9dbeeac2809746bcf8d32467211117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:85:a4:fa:d8:9b:aa:0a:b7:b2:5e:47:6a:9e:
5f:e8:2e:bc:ee:7a:af:6d:98:d4:80:78:f1:ff:6e:
7b:1f:4b:2a:b6:21:f4:15:e3:88:8a:72:e0:12:8b:
fe:f5:4d:68:51:09:65:97:9d:d8:05:5f:4f:ba:84:
2c:02:f6:72:ef:c4:f9:d8:ec:df:2a:af:99:f8:b4:
5a:3e:07:bc:7c:23:d9:24:b0:a8:1b:55:7d:aa:85:
b4:61:c1:20:38:ee:9b:fb:c8:e0:52:da:9a:63:85:
5f:61:87:f7:a4:a6:f5:f2:ca:38:1f:8a:49:32:62:
ff:60:c3:93:17:74:f4:f4:2d:d1:08:40:58:a5:09:
6e:cb:15:44:f4:4d:72:f8:55:41:9d:2d:c7:32:38:
c5:cd:e6:30:8a:e5:fc:72:cd:af:f4:3d:23:69:3b:
1f:34:d8:3e:10:d1:bb:c0:8e:b9:55:48:58:a6:6c:
61:98:f3:58:d6:09:a9:ca:56:4a:59:35:e2:52:ef:
4d:70:27:dd:82:fd:9f:e1:15:af:ff:1b:d5:c8:0d:
4e:b6:36:4b:71:10:d1:38:7b:b6:f1:b8:a5:7f:5e:
a6:21:33:7b:09:8e:b4:45:8d:47:e1:80:c3:55:fc:
70:ba:01:c2:18:71:7f:ee:f6:cd:d6:d3:29:ad:da:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:29:6E:5C:9D:BE:EA:C2:80:97:46:BC:F8:D3:24:67:21:11:17
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/2DwpblydvurCgJdGvPjTJGchERc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:99:24:c1:01:43:d2:c7:df:0e:53:d2:62:09:1c:f4:ae:39:
6a:80:50:0f:29:99:c7:77:87:58:90:96:1e:fe:5b:50:49:a4:
7a:62:1b:08:01:1c:15:35:33:79:1f:50:f1:ba:b8:66:cb:9c:
af:f9:1c:be:4d:df:d2:c6:e4:1f:e5:ee:3a:4e:e4:df:7c:ea:
19:9f:cc:a0:a1:0b:f4:12:2a:c8:b1:ac:fd:86:b7:80:6d:bd:
1e:c9:86:75:ef:8d:72:fe:1b:a2:99:4d:93:3d:1b:c6:7d:14:
2f:35:a4:58:44:8d:62:62:e2:30:bb:9e:72:d5:c5:31:c7:7d:
5e:3f:9a:b4:ba:ed:83:7a:52:c1:09:6e:ff:9a:1d:1f:c8:a0:
f4:75:f8:f3:2c:3b:b3:04:23:77:c0:f7:5d:db:df:cf:5e:02:
0e:dd:e2:bc:68:be:88:0d:04:7f:79:f0:44:23:3b:28:39:b6:
a6:9b:63:55:e7:7a:d6:fd:ad:e0:18:3b:e0:37:62:15:c6:66:
c0:7c:81:a6:d1:ca:98:48:36:ca:e9:51:aa:7b:a5:9d:ae:63:
a4:d3:70:bb:7c:4a:92:a2:21:5d:3c:02:0c:e1:75:ae:4e:2e:
9a:78:aa:b1:3c:cc:96:69:4e:ff:f2:97:b2:bd:86:83:08:53:
cd:f8:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:07 2024 by rpki-client on console-ams.rpki-client.org