Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/3rGM2CDQ1sMNAfoEnzqNQMFul40.roa
File: 3rGM2CDQ1sMNAfoEnzqNQMFul40.roa (raw, json)
Hash identifier: i21zKr3iZsSQAhhAkE+IReH/XpdxWUZ1kjhBTXdy9Uk=
Subject key identifier: DE:B1:8C:D8:20:D0:D6:C3:0D:01:FA:04:9F:3A:8D:40:C1:6E:97:8D
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018CC6B783088FDBF11D4BF9AD0148163177
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/3rGM2CDQ1sMNAfoEnzqNQMFul40.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57405
IP address blocks: 46.143.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:83:08:8f:db:f1:1d:4b:f9:ad:01:48:16:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=deb18cd820d0d6c30d01fa049f3a8d40c16e978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:9e:34:67:4e:ee:73:d6:14:bd:a1:37:be:
63:87:c8:a6:33:fe:ce:dc:96:2b:10:32:3b:8e:2f:
58:12:b9:11:3b:ad:d3:d1:a6:63:83:2c:97:87:57:
0d:64:99:37:68:78:af:e4:ee:4d:dc:a4:85:75:ea:
38:41:39:a0:16:76:67:8f:ee:57:e0:b8:83:e8:70:
29:a7:bf:00:8c:ba:01:bf:b1:0a:18:41:a5:09:f3:
74:2d:cb:03:c9:99:ea:f9:eb:a7:38:4d:87:b4:20:
32:f9:40:3e:c1:72:28:54:56:a1:ff:b3:c3:77:2f:
44:eb:0a:1a:48:65:a2:14:0e:48:0d:18:77:a9:f8:
e1:20:db:a0:a8:24:81:f3:b9:e2:e4:ad:5e:49:c2:
a1:bd:f4:90:e6:99:7c:29:0c:6a:0f:dc:08:88:e3:
76:db:be:9b:fa:ed:60:34:0a:9a:e0:75:56:e3:7d:
4c:9e:bc:20:cb:64:65:64:46:d7:2d:80:13:11:da:
4a:45:3b:80:63:d8:1e:a9:1f:ee:7f:8b:05:77:1f:
2c:14:6c:5c:d7:35:36:df:c5:40:37:7e:0d:2a:a7:
d6:11:ad:a5:ef:61:21:a3:aa:fd:73:09:3f:44:66:
bd:81:66:d9:aa:64:77:ca:1e:fe:7a:a8:da:59:ec:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:8C:D8:20:D0:D6:C3:0D:01:FA:04:9F:3A:8D:40:C1:6E:97:8D
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/3rGM2CDQ1sMNAfoEnzqNQMFul40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.224.0/20
Signature Algorithm: sha256WithRSAEncryption
54:8e:5b:ff:e3:5a:7d:19:0d:14:30:8a:aa:f9:cf:08:9f:bc:
83:b6:1c:96:bd:da:df:04:51:1c:9a:52:0e:04:c9:92:db:ab:
93:0a:7c:70:10:b7:de:44:8a:c3:cd:db:f7:0d:39:de:3d:48:
d4:14:93:b1:ed:51:ef:8a:d9:89:e4:89:26:65:9f:15:b9:32:
94:ed:b1:9e:e3:33:fa:f3:0d:14:7a:a4:8f:ce:d9:3d:3e:5b:
07:16:2d:f3:3b:e8:14:6a:8f:59:a6:af:ee:59:23:06:ef:44:
e1:78:11:17:d3:7b:7d:cf:11:42:05:40:bb:84:9b:8e:c9:f1:
b2:15:f7:27:c8:4f:a4:3a:9f:4b:58:20:87:f7:a4:c6:d5:2b:
43:ef:e5:f1:85:4d:ea:e0:37:1b:e4:66:56:64:e5:42:5e:67:
eb:96:31:3c:0d:fc:6d:86:2a:26:2d:6e:f0:d0:8c:4b:19:1f:
dd:90:d9:d3:43:d9:b5:df:75:1d:ec:1e:de:4e:f4:ac:d1:1e:
e9:e9:de:b5:e8:db:c0:8f:16:23:b3:0c:68:6f:2a:46:15:29:
ca:19:fe:98:0a:62:d3:72:0e:d4:62:91:55:c4:27:96:dc:4e:
6c:9e:3c:d2:77:76:86:3b:ba:8b:95:cf:49:38:32:b2:15:57:
55:b3:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 06:01:00 2024 by rpki-client on console-fra.rpki-client.org