Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/m9lk8mh67iXsrXtO1Q9ZlVmzyso.roa
File: m9lk8mh67iXsrXtO1Q9ZlVmzyso.roa (raw, json)
Hash identifier: 6U+Ukpy0eAFkcjqhCJnjtbY5cVqEEkb6jaTe4U9G4bI=
Subject key identifier: 9B:D9:64:F2:68:7A:EE:25:EC:AD:7B:4E:D5:0F:59:95:59:B3:CA:CA
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 0191793465316C31DB4BF153B27229BC4BA3
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/m9lk8mh67iXsrXtO1Q9ZlVmzyso.roa
Signing time: Thu 22 Aug 2024 08:29:22 +0000
ROA not before: Thu 22 Aug 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 46.245.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:34:65:31:6c:31:db:4b:f1:53:b2:72:29:bc:4b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Aug 22 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd964f2687aee25ecad7b4ed50f599559b3caca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:b8:d0:57:3c:70:37:1a:e2:22:61:a8:79:
a5:2b:13:cb:51:f7:83:fc:cf:9d:e1:68:83:c9:1b:
db:fe:ca:91:6a:e1:5d:8c:54:c2:81:1f:8a:91:3f:
d9:0c:1d:f3:fb:99:8a:69:f5:65:1d:f5:5e:8a:ff:
25:3d:be:66:76:dd:de:42:70:1b:7f:ef:87:b7:7a:
9c:f1:f5:cd:fa:76:6b:a5:92:33:57:b3:0b:30:24:
33:f5:1a:64:1e:85:e2:65:30:49:62:45:ea:49:a5:
d3:31:a6:d7:92:23:3d:d2:0d:f2:c7:ea:e9:cd:64:
13:76:ea:fc:8d:f8:8a:9b:d7:48:05:01:c8:24:3b:
78:65:34:ae:33:b8:c3:7a:3a:98:06:ec:8a:6f:50:
28:cd:a6:44:a2:b9:5a:db:78:df:25:8d:55:08:1c:
25:43:c7:1a:6d:85:77:f3:e5:a8:16:6c:e5:f0:c0:
6f:c1:b6:58:fb:25:b1:a6:3e:41:ad:46:cb:07:93:
9b:ed:26:6b:e8:39:42:50:1c:3f:1e:6c:fb:b4:b8:
c9:22:ea:23:d6:6e:e9:b1:2e:3f:e0:13:d7:1b:34:
77:c8:f6:03:bd:d8:d3:8c:c3:94:70:3b:35:ce:0c:
a9:df:eb:0e:e5:fa:7a:3e:db:ca:af:16:97:3b:fd:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D9:64:F2:68:7A:EE:25:EC:AD:7B:4E:D5:0F:59:95:59:B3:CA:CA
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/m9lk8mh67iXsrXtO1Q9ZlVmzyso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9c:e4:0e:9d:a8:08:99:f5:d8:1f:f2:a0:f2:26:59:2f:ed:
5b:4a:05:93:59:c6:15:45:3f:e7:02:24:06:5b:15:fa:8b:55:
96:36:31:cb:e0:40:98:af:83:a5:03:4f:9c:44:28:88:b9:a2:
a9:7d:d2:98:dd:10:3d:11:5b:97:05:a2:f3:38:d9:51:3d:21:
b9:90:44:2c:49:4e:06:ee:b4:7c:5b:1a:6f:ae:8d:2a:35:86:
e5:47:dd:8f:9c:16:fa:dc:c1:48:07:bb:fd:34:92:75:db:31:
af:7a:22:f0:88:bd:00:87:33:72:d8:64:59:48:f4:49:ff:28:
f3:6a:66:d4:3b:d6:b5:71:69:97:72:e0:b4:03:6d:3d:4f:a5:
6c:55:eb:4a:a2:ce:a0:95:1b:75:79:43:1f:4c:e0:5f:20:60:
f1:71:b9:c2:84:2d:e8:13:2c:2e:00:89:ae:15:2e:07:d2:15:
32:1c:7d:16:b2:63:41:8b:c7:9a:ad:19:63:51:85:25:82:5e:
da:1c:32:42:1b:dc:58:ed:ee:93:be:7b:ed:b1:db:42:a7:ba:
74:c8:23:7d:c6:30:b0:bb:0b:87:3e:20:b9:3d:40:e5:28:92:
06:4f:61:6c:df:04:9e:92:84:1a:ef:f9:9c:ea:e2:eb:5a:0e:
b5:75:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:43:45 2024 by rpki-client on console-fra.rpki-client.org