Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/i5JIi4GsHg8kQ-fmqskpNI74f2s.roa
File: i5JIi4GsHg8kQ-fmqskpNI74f2s.roa (raw, json)
Hash identifier: GDFweO3tkggLfuMOhdIFO8fnEPKErDizZCVPHlKK1rQ=
Subject key identifier: 8B:92:48:8B:81:AC:1E:0F:24:43:E7:E6:AA:C9:29:34:8E:F8:7F:6B
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE4F2A25DFA7FCAB8F1CBB517048D
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/i5JIi4GsHg8kQ-fmqskpNI74f2s.roa
Signing time: Mon 01 Jan 2024 16:30:37 +0000
ROA not before: Mon 01 Jan 2024 16:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51737
IP address blocks: 46.20.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e4:f2:a2:5d:fa:7f:ca:b8:f1:cb:b5:17:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b92488b81ac1e0f2443e7e6aac929348ef87f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:9b:30:8d:8c:09:41:e8:28:fb:c4:f3:f7:
b6:da:f0:3d:2a:f3:20:53:2e:35:2d:73:c0:d4:93:
49:6e:73:f1:75:96:8b:35:cd:b2:09:42:61:cc:f3:
76:18:dc:2b:fc:10:9d:ac:2a:c4:12:fe:02:81:5f:
d6:7b:86:a2:52:11:2d:df:96:44:fb:6f:d3:35:67:
f6:95:78:ba:52:66:04:57:3b:cc:e6:0f:0f:4b:8a:
5a:06:88:a7:63:28:b5:d8:16:a6:28:b4:b2:0f:ff:
52:0f:93:89:98:de:39:35:9c:c7:3c:0f:05:ab:e9:
12:54:c9:e9:e6:3a:d0:34:44:c3:fc:35:fc:d7:a0:
06:bd:13:43:a6:76:4f:6f:7b:0e:66:45:e9:fc:ad:
d8:10:93:1c:ce:24:7e:20:db:de:4d:86:30:a6:1c:
3e:c1:98:3f:30:24:2b:6e:26:2b:af:59:8d:f1:1e:
2b:9f:94:e2:e0:7d:21:4b:74:6c:de:a8:39:6f:be:
88:75:20:3c:a4:d4:56:0a:22:ee:70:1f:13:0b:07:
79:8a:05:e3:9f:8e:70:76:f8:70:46:d7:10:1e:07:
71:27:9b:eb:be:94:48:81:c4:84:12:c9:b9:75:df:
d5:e8:9e:08:ae:f1:2b:17:c8:27:a2:c0:78:76:fc:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:92:48:8B:81:AC:1E:0F:24:43:E7:E6:AA:C9:29:34:8E:F8:7F:6B
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/i5JIi4GsHg8kQ-fmqskpNI74f2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.208.0/23
Signature Algorithm: sha256WithRSAEncryption
31:d3:34:4e:39:9f:15:4a:dd:6c:5c:e2:76:88:66:8b:5d:fb:
f7:3d:fd:a2:43:ee:cd:83:cc:3b:fc:e9:b7:c9:b5:a9:1a:03:
65:fb:d9:7e:69:b3:15:70:8e:cf:7e:2a:77:a0:0b:04:4c:76:
76:c2:6e:f6:b3:48:a4:51:1b:fc:83:d1:83:57:da:a5:d1:01:
4e:11:61:2f:a0:72:29:fc:79:fb:41:aa:9d:a8:23:f6:57:9c:
a4:2d:31:41:c5:09:48:6e:af:a1:91:e2:ca:63:e5:f4:ee:eb:
91:f5:0e:f8:a3:6f:10:af:4f:c5:94:af:2b:de:d5:68:07:04:
9c:78:72:82:72:8b:dd:19:cb:4a:08:0c:70:c8:b7:40:8d:cf:
de:d8:04:dc:de:01:58:86:7c:75:72:55:25:f3:59:23:80:3c:
e7:c3:9a:4e:58:54:0d:e3:8a:16:60:32:65:77:15:6c:04:ae:
b3:12:d9:27:cd:2d:7b:34:5c:90:66:86:fd:41:e5:4e:6f:ec:
8f:f4:94:95:93:56:98:30:65:01:6b:d6:e0:d6:95:e9:ee:5e:
30:9d:ca:8f:08:ab:48:89:37:57:e0:78:bf:62:10:82:57:33:
97:f0:2e:f8:b7:58:77:88:3a:61:2f:1d:25:6d:a9:a7:b5:af:
01:e9:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:02 2024 by rpki-client on console-fra.rpki-client.org