Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/rqAXkP67WG94KcVzcs1G3qBCxzQ.roa
File: rqAXkP67WG94KcVzcs1G3qBCxzQ.roa (raw, json)
Hash identifier: K/srJeeYxETfDAQdpL7AD233zBih+qbr30uMn6qQchI=
Subject key identifier: AE:A0:17:90:FE:BB:58:6F:78:29:C5:73:72:CD:46:DE:A0:42:C7:34
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 018CC34954C9548973FFED98352D9A54CBE4
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/rqAXkP67WG94KcVzcs1G3qBCxzQ.roa
Signing time: Mon 01 Jan 2024 04:30:12 +0000
ROA not before: Mon 01 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208965
IP address blocks: 46.229.59.0/24 maxlen: 24
46.229.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:54:c9:54:89:73:ff:ed:98:35:2d:9a:54:cb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aea01790febb586f7829c57372cd46dea042c734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:21:58:8b:f1:78:24:c0:36:69:7e:b7:13:
e8:d4:90:63:b4:7a:02:9e:bb:89:6c:77:13:f6:8e:
1c:4e:99:1d:89:f5:93:22:a6:0f:6c:6a:0e:b5:47:
88:a8:43:d6:f8:39:07:f1:df:61:3e:4b:91:51:97:
1d:72:97:16:86:da:7e:c2:8a:85:ac:3c:84:a3:d4:
a4:c9:5c:d8:72:d9:bc:44:e0:d0:b5:ac:cf:34:e4:
aa:1e:4a:81:50:f1:99:cc:b7:24:ae:dd:24:3e:27:
ba:f3:b8:5c:17:d7:2a:5e:6c:0a:ce:ef:8b:3c:23:
69:a9:9e:fd:bd:92:17:46:f4:15:6d:5a:7e:d2:4e:
87:bf:9f:f0:65:4d:ac:95:ce:e5:44:41:f4:a7:70:
3a:ed:15:d0:9c:c1:38:f9:39:d3:88:cc:3e:ce:1d:
58:4f:93:f4:6e:f0:af:79:5e:50:98:72:f1:37:60:
9e:5b:7f:e3:47:86:bb:9a:b2:91:8a:e7:a0:6f:2f:
08:3b:4e:95:c6:58:77:8c:71:36:8f:74:63:f2:ee:
56:ac:1a:39:c0:9f:86:56:0a:ee:11:95:aa:6d:56:
99:e9:20:5d:7d:69:77:e2:1c:a4:a0:c2:38:74:00:
57:69:5a:02:09:32:63:b7:c1:3c:c7:17:15:5b:69:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A0:17:90:FE:BB:58:6F:78:29:C5:73:72:CD:46:DE:A0:42:C7:34
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/rqAXkP67WG94KcVzcs1G3qBCxzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.59.0/24
46.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4e:05:ba:dd:fc:2d:ea:93:ab:e0:8a:40:64:13:73:3d:7f:
dc:cc:c1:f4:71:6a:09:54:38:17:cc:77:8d:15:78:6a:e2:1e:
6f:06:b5:df:c5:06:cf:ee:0d:cd:50:4f:46:51:e1:8d:7b:ab:
d9:1e:d4:37:2c:e0:9a:18:35:3a:9c:20:2b:c2:02:f5:83:59:
f2:21:ee:4d:f6:47:2f:8b:46:92:be:9e:2a:eb:31:c9:83:9f:
e3:83:82:b3:2e:d0:e9:05:77:c1:f1:b5:8d:a7:1d:3e:22:7f:
5e:74:e3:ab:e4:3e:80:d0:3d:1c:80:a6:26:64:10:d8:0d:6a:
41:1d:e5:b0:38:0b:67:c4:a3:a9:25:3b:7c:ef:b0:94:a5:84:
d9:00:d8:a8:ea:6a:6f:e4:56:2e:a9:a6:2d:a4:ce:f7:42:08:
fa:5a:b3:e8:01:a3:bb:b2:b8:d4:48:32:4e:cc:3c:ec:fe:ac:
d4:6f:c4:e8:82:f9:7f:86:e3:7b:85:a4:d8:d6:9b:82:68:54:
bc:a5:8c:3a:9c:21:cf:26:96:4f:27:8a:8a:49:7d:6f:66:78:
3b:7a:91:da:d8:94:9f:36:e2:28:c0:a7:ea:f4:19:0b:9a:f5:
cb:fd:46:a9:65:87:3b:55:3e:73:c6:7c:65:42:e6:7e:e0:36:
bb:72:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:51 2024 by rpki-client on console-ams.rpki-client.org