Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/l8yMPs3NGnxY6EQJGUdh1qoXO64.roa
File: l8yMPs3NGnxY6EQJGUdh1qoXO64.roa (raw, json)
Hash identifier: vqmUCco/JpoWA6egaO5n5DJGEfVu95iOAsrTAQdkfsI=
Subject key identifier: 97:CC:8C:3E:CD:CD:1A:7C:58:E8:44:09:19:47:61:D6:AA:17:3B:AE
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018CC6B78131FC5426D0BC51106E18B4671F
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/l8yMPs3NGnxY6EQJGUdh1qoXO64.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42163
IP address blocks: 46.143.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:81:31:fc:54:26:d0:bc:51:10:6e:18:b4:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97cc8c3ecdcd1a7c58e84409194761d6aa173bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:9e:c8:e9:87:2a:fc:2d:4f:10:a5:69:2c:
b4:70:0d:87:f2:72:cf:3f:a4:69:5b:c4:8e:11:89:
21:a0:41:8d:1d:7e:cf:58:ab:78:15:3d:60:36:b7:
02:1e:2b:56:a7:55:8a:cd:73:9f:c0:ab:f5:5d:72:
91:3d:f3:96:e1:d3:57:2a:5e:09:c4:86:cf:42:a4:
7d:6f:62:5c:6e:f7:f1:c8:1a:66:f2:5b:98:ff:63:
0d:6f:1e:c3:30:8b:55:bd:9a:f0:03:e3:3f:37:cf:
2b:0b:9b:d5:29:b7:58:f2:af:40:e7:3c:61:31:5e:
33:88:59:bb:1f:bf:c9:2e:28:09:ea:25:46:d2:20:
5c:bc:2b:3c:9c:fd:07:a2:7f:c6:58:86:1f:63:6b:
fb:f9:46:18:92:5a:11:0d:19:77:27:b3:98:4f:96:
50:af:62:76:d1:c5:97:4f:cb:3b:99:49:68:d8:67:
27:bb:c5:d8:48:ff:d7:65:d4:fa:83:02:18:fd:c4:
54:8c:50:52:ae:40:9d:2f:8d:69:b6:46:24:ab:1e:
93:e8:eb:76:76:4a:44:7a:a6:63:3c:ea:be:d9:31:
20:2f:d7:cc:55:5a:24:07:92:85:12:9e:e7:34:3e:
b3:cb:57:85:4f:d2:7b:2c:63:5a:39:cc:75:09:36:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CC:8C:3E:CD:CD:1A:7C:58:E8:44:09:19:47:61:D6:AA:17:3B:AE
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/l8yMPs3NGnxY6EQJGUdh1qoXO64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.194.0/24
Signature Algorithm: sha256WithRSAEncryption
24:44:38:7f:db:0f:70:f8:24:68:77:4f:5a:ff:fc:d2:a8:d8:
e9:28:62:20:5f:a2:ae:b0:38:46:e9:f0:79:08:21:43:e3:f3:
76:32:4b:12:05:a3:fa:db:b8:b6:5f:cc:29:83:d6:e9:31:da:
70:76:44:fe:67:fa:d0:3a:aa:24:58:40:c3:62:51:a2:29:ec:
37:55:77:06:a0:93:ae:e1:d5:6e:2c:4f:b4:95:ed:15:58:88:
dd:d6:bd:a2:7a:86:5d:40:6c:0e:cf:4e:95:5c:63:b9:17:64:
1b:9a:7e:f0:ed:10:94:ce:7e:9f:c9:5a:3e:62:89:e7:f9:c3:
45:6a:79:a2:d8:69:65:db:34:d6:8a:c9:bf:60:9c:d3:70:45:
ed:14:6f:7f:5f:52:cd:af:21:34:32:11:0f:9c:47:57:f0:59:
c9:af:da:c1:53:48:b2:11:01:3d:c6:a5:4e:73:a2:2b:c0:47:
5a:92:99:3b:56:26:e9:71:e2:48:62:33:f5:09:16:9d:4f:18:
14:18:cb:6f:33:66:e1:46:31:86:81:d8:b8:13:e0:a3:b5:41:
76:b2:a7:d5:8e:f8:e6:42:03:d6:36:3e:9b:1a:32:8d:3f:45:
cc:f5:10:ee:36:0e:ad:85:5c:df:1a:9b:ef:f0:ca:50:e0:37:
c7:f2:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:51:24 2024 by rpki-client on console-ams.rpki-client.org