Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7tA8LiSnE6It8zEPB-WLhKFifTo.roa
File: 7tA8LiSnE6It8zEPB-WLhKFifTo.roa (raw, json)
Hash identifier: 40Jib/Ysvld3sJSGdwt4GbAytnLB8saIq6+NjGOpdUA=
Subject key identifier: EE:D0:3C:2E:24:A7:13:A2:2D:F3:31:0F:07:E5:8B:84:A1:62:7D:3A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018DF4D4E21469F25B2E8AB4CB6129DB7687
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7tA8LiSnE6It8zEPB-WLhKFifTo.roa
Signing time: Thu 29 Feb 2024 12:26:48 +0000
ROA not before: Thu 29 Feb 2024 12:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 46.249.104.0/24 maxlen: 24
46.249.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:d4:e2:14:69:f2:5b:2e:8a:b4:cb:61:29:db:76:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 29 12:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed03c2e24a713a22df3310f07e58b84a1627d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:c8:dd:a3:f0:d6:06:ca:b0:8e:ca:e3:88:
5f:d5:3b:ad:9e:fa:5f:2a:b5:7b:95:3c:f0:27:4c:
3d:a3:3e:9c:1a:82:8d:f8:b1:6f:db:ee:4e:1e:f8:
d7:07:50:85:62:09:71:a8:68:5f:01:a8:16:91:37:
20:f6:02:05:cd:20:d5:f4:eb:48:cf:c5:c0:30:84:
16:d7:fd:e6:4d:c1:54:71:35:3c:6a:7c:21:d3:89:
79:a6:25:d2:ae:2e:55:4d:01:e6:8b:fb:de:83:ae:
6d:4d:f3:af:9d:1f:a2:d5:97:99:de:fb:bd:4e:3a:
bc:c5:1f:82:24:e8:aa:ed:29:4a:22:d2:fb:6a:49:
90:0a:26:a5:85:d9:77:92:76:5b:52:5f:66:57:e7:
86:0e:de:24:78:b0:30:ef:70:2c:ea:86:33:0e:1b:
79:7f:1d:01:6f:ad:d2:a0:86:92:0b:7d:7b:c6:84:
f5:49:cc:d5:b2:8b:7b:ea:b4:0e:33:15:9a:fe:8e:
a3:f0:b2:48:1b:14:f5:8e:02:e8:9c:ed:5c:cc:c3:
bb:47:16:ab:0b:32:3e:67:39:d4:65:cd:ca:22:5e:
cf:da:94:9f:7f:db:01:12:50:85:1c:b5:82:e3:3a:
5c:fa:d5:33:bb:21:07:0f:3c:14:bb:9d:81:09:fa:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:3C:2E:24:A7:13:A2:2D:F3:31:0F:07:E5:8B:84:A1:62:7D:3A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7tA8LiSnE6It8zEPB-WLhKFifTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0/24
46.249.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ef:45:31:b8:db:e8:5d:0e:62:22:16:a5:e7:24:b6:6c:4d:
b6:86:69:f4:b9:67:91:2f:74:23:53:e7:1e:d6:30:fc:50:93:
57:06:85:7a:ea:79:5f:25:69:9b:05:db:dd:fc:9a:62:74:f4:
b1:b5:d4:ac:c3:33:c7:bf:cb:1a:e0:0e:a0:03:36:c2:48:71:
df:b8:55:9f:e6:ba:c8:55:97:03:74:2b:15:e1:c8:c9:56:ff:
65:fc:fb:dd:b7:90:59:89:c7:24:c8:fe:c9:6d:01:59:d9:53:
ef:9d:54:db:6a:1c:3f:74:3b:dd:85:68:33:e3:fc:c2:e4:04:
fc:df:ea:c7:c4:11:a4:fa:b0:c5:ec:82:b9:42:81:88:42:8e:
42:e4:1a:03:ba:db:c8:9d:24:0f:ff:6f:67:23:61:ac:9d:8f:
61:dc:e4:86:6c:91:24:f7:df:5c:54:fc:94:b7:18:ec:9e:da:
8e:86:d0:39:1a:07:19:3e:38:8f:d2:fe:61:89:52:50:37:cf:
87:5b:43:42:1b:15:16:5f:6f:bc:59:cf:0a:34:d2:4f:73:15:
b9:91:e5:52:63:2a:00:0f:ea:fd:70:88:69:b5:77:7c:f5:68:
65:92:49:9d:42:fd:95:0a:d7:7f:87:42:78:db:a6:54:ce:db:
7a:29:06:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:35:54 2024 by rpki-client on console-fra.rpki-client.org