Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/QCHxfq3XcC2M2BP51vTNHGRufe8.roa
File: QCHxfq3XcC2M2BP51vTNHGRufe8.roa (raw, json)
Hash identifier: YyrJUEXKNIWNVRAb220SHtHBAUDmb1h8dh2KV9ruoto=
Subject key identifier: 40:21:F1:7E:AD:D7:70:2D:8C:D8:13:F9:D6:F4:CD:1C:64:6E:7D:EF
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 018CC8DE510BBA207BDBF47A5565F99358D1
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/QCHxfq3XcC2M2BP51vTNHGRufe8.roa
Signing time: Tue 02 Jan 2024 06:31:02 +0000
ROA not before: Tue 02 Jan 2024 06:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57344
IP address blocks: 46.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:51:0b:ba:20:7b:db:f4:7a:55:65:f9:93:58:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 2 06:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4021f17eadd7702d8cd813f9d6f4cd1c646e7def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:5c:c2:e2:e5:8a:28:fc:b5:d1:cc:45:c1:
24:a1:e2:0e:d7:8d:0f:34:24:f7:ec:b7:f3:89:09:
78:0d:ad:2c:5d:7e:5f:b4:25:56:5c:d9:fa:e6:bf:
2c:62:6a:c2:6f:ee:57:3c:16:22:89:e4:5e:10:01:
c2:28:4b:ab:05:f6:79:2e:3a:da:f6:fe:2e:2b:94:
73:38:c1:ac:22:cb:2c:90:22:61:a0:a2:f9:b2:78:
b0:ce:5b:1a:5f:d6:12:a6:ae:16:e0:3b:2f:52:9f:
5b:19:07:01:94:fa:4d:f3:50:11:a9:ba:f8:78:10:
0d:a1:d2:76:f5:ed:07:51:d1:af:76:74:65:13:59:
76:5f:3b:6a:de:41:fe:61:ec:24:ad:25:27:bd:f4:
32:28:03:7f:a0:d6:60:99:c0:e3:34:4c:81:3d:67:
4c:c8:7c:f8:68:b0:b8:15:03:27:1d:71:90:58:79:
90:f5:a5:91:b1:c9:ab:12:4b:1f:75:46:73:c2:41:
06:17:ad:44:c9:d0:6f:f6:44:0a:37:08:aa:00:93:
32:e3:6b:de:79:50:79:ea:b5:73:9f:b2:16:ed:1c:
f4:d3:e7:36:58:4d:e3:8c:75:03:a6:f4:e6:c7:63:
ed:5a:94:0e:60:c8:1d:2c:c7:e4:ae:c5:d3:b5:2c:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:F1:7E:AD:D7:70:2D:8C:D8:13:F9:D6:F4:CD:1C:64:6E:7D:EF
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/QCHxfq3XcC2M2BP51vTNHGRufe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4b:fa:91:0c:7b:94:c3:36:87:3b:d1:9e:e1:67:6c:e6:80:
c1:69:73:b7:ab:f2:0a:5d:02:75:a0:81:31:80:ac:27:a5:0a:
21:63:a6:50:65:f9:e5:29:29:26:5f:5f:9f:8c:31:fa:66:de:
a6:1c:77:26:a1:10:c5:53:fb:ce:7a:29:63:b8:ef:78:e6:1d:
23:32:c5:ab:f1:b5:10:d9:3a:30:d6:bc:9f:2f:be:31:05:62:
5a:2e:a9:39:44:fe:eb:64:06:43:19:ca:2e:88:f2:ac:77:e3:
a8:26:35:56:f6:14:2f:89:9d:85:bd:20:27:d3:49:b3:6a:d7:
88:83:c3:ae:00:a6:d2:90:d0:89:77:c2:68:49:54:b3:01:16:
21:70:66:68:82:44:dc:df:6b:b6:54:1a:f9:38:08:65:b7:28:
c6:45:c1:ea:a0:e1:7d:be:b0:cf:92:94:c3:14:a7:c9:ff:8e:
de:32:e3:9d:ea:ab:a2:97:b7:49:8f:23:08:84:04:b3:4a:cc:
20:b5:0c:83:a9:2c:a4:b7:dc:29:aa:53:7e:f7:ee:26:fe:07:
91:05:69:35:6e:ac:ad:da:ad:19:55:97:cf:b3:2f:6a:f9:d5:
75:15:cf:ee:d6:11:f6:e7:b9:bd:6e:9e:fd:07:0e:85:e9:3a:
ad:b4:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:14 2024 by rpki-client on console-fra.rpki-client.org