Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tNwdP70jzlTV9xZoFigwMfc-60Q.roa
File: tNwdP70jzlTV9xZoFigwMfc-60Q.roa (raw, json)
Hash identifier: 2MhvZ1Sw2mDQdv6NCYer9vtcwq+Si1VNGQZwXyAUc0w=
Subject key identifier: B4:DC:1D:3F:BD:23:CE:54:D5:F7:16:68:16:28:30:31:F7:3E:EB:44
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6630DCF5DB1D85DA4C400DF7DF81
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tNwdP70jzlTV9xZoFigwMfc-60Q.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 46.249.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:66:30:dc:f5:db:1d:85:da:4c:40:0d:f7:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4dc1d3fbd23ce54d5f7166816283031f73eeb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:55:bf:c7:e4:91:fd:91:f6:7d:b7:55:13:
a1:6b:15:57:e8:1e:1a:54:c2:a5:9f:d3:18:bb:a6:
b3:52:da:00:36:4d:1f:5d:56:48:64:21:79:bb:d7:
52:3b:11:5d:c7:34:42:10:60:1f:cd:c7:c2:f5:3b:
6d:d3:cb:8c:d5:5c:fb:2f:d6:dc:70:20:a3:15:4e:
e7:0a:ca:b6:60:af:06:0b:63:bc:2c:9f:8b:e3:37:
af:76:a6:40:f6:cc:42:cf:c6:3e:e9:35:ca:22:1f:
2e:ec:de:02:03:53:47:34:c0:d6:85:0d:2f:53:6c:
72:37:13:2b:75:0a:78:a7:68:a3:30:fb:c3:42:63:
62:5d:d1:9a:fa:d6:ba:a1:58:71:22:71:77:96:1b:
9c:ba:18:46:65:57:57:ab:8d:e1:53:7b:1c:a6:a5:
c7:e6:4a:55:48:f3:40:4e:17:ca:d6:f3:31:eb:f8:
f4:9f:59:4b:aa:33:83:10:c5:d3:e4:67:1c:3a:55:
75:f9:47:a7:a1:0a:c2:6c:e9:b7:db:82:d1:2b:c3:
55:52:0b:ee:03:48:1d:3c:40:f7:e3:8e:89:a0:19:
c1:55:7b:a3:00:b9:bb:17:30:46:79:49:a2:f3:00:
fa:3d:e1:4a:ea:f7:12:54:eb:df:e3:c6:28:a2:b2:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:1D:3F:BD:23:CE:54:D5:F7:16:68:16:28:30:31:F7:3E:EB:44
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tNwdP70jzlTV9xZoFigwMfc-60Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:65:cd:dd:ef:98:e6:19:52:6a:eb:b6:df:76:6a:8f:b1:dd:
37:c1:72:4f:45:6b:26:58:a3:a2:c8:3d:51:03:90:75:62:c4:
a1:e3:c2:75:6b:a6:1f:c2:41:40:18:c7:95:a4:36:b8:b1:ec:
e8:6e:bd:62:25:ec:a6:ee:54:a8:27:de:0d:b5:06:f1:2b:f1:
e6:78:b2:da:d4:65:a9:94:ce:15:2f:35:e2:51:de:1f:a5:b6:
e0:46:8d:50:a7:f1:ce:fc:b4:af:c4:27:35:fe:b7:a2:58:9e:
63:1c:57:b8:f1:27:b8:c6:88:d4:6f:26:87:d0:ba:f9:80:85:
ab:ae:8f:8d:cb:32:dd:a1:11:8a:5a:cf:f8:a9:c5:f6:97:ba:
0b:0b:75:4d:c6:aa:3a:d4:9f:c5:71:f5:6a:65:cd:87:f3:9b:
7f:1f:63:10:70:93:4b:6e:d6:38:23:58:77:f0:46:1c:43:c7:
f9:9c:a3:ac:ef:2b:ec:4e:f9:19:5a:57:70:37:26:1d:fe:3c:
43:3f:c7:3f:28:8a:8b:9c:8d:9c:11:93:7c:f0:c3:e4:33:a2:
9b:55:e1:54:f9:96:d6:a9:9f:27:74:40:28:3d:e4:74:47:90:
74:16:e9:62:31:ff:f4:8b:ab:de:f8:7b:77:92:46:94:30:dc:
9a:e0:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:13:16 2024 by rpki-client on console-ams.rpki-client.org