Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/RWO_3hxKCDX8W34dmBe83CmvIZI.roa
File: RWO_3hxKCDX8W34dmBe83CmvIZI.roa (raw, json)
Hash identifier: xyUMWJZ99VAbwIKtNGyhpWv3K/fGgz2L7PNFHLw4BTs=
Subject key identifier: 45:63:BF:DE:1C:4A:08:35:FC:5B:7E:1D:98:17:BC:DC:29:AF:21:92
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 018CC94C39FA3C9CF9D4C77F75EDDCD328F5
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/RWO_3hxKCDX8W34dmBe83CmvIZI.roa
Signing time: Tue 02 Jan 2024 08:31:05 +0000
ROA not before: Tue 02 Jan 2024 08:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29075
IP address blocks: 46.23.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:39:fa:3c:9c:f9:d4:c7:7f:75:ed:dc:d3:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Jan 2 08:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4563bfde1c4a0835fc5b7e1d9817bcdc29af2192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:da:d5:a2:f9:1c:0e:07:54:03:d1:98:88:
fe:be:92:a5:f5:d9:6a:fe:69:14:f3:80:94:5c:e3:
9c:7d:1e:44:5f:19:63:d3:66:7a:39:a6:1e:fb:d8:
46:b5:4d:a2:22:ce:c3:82:91:47:8e:c3:4a:93:b5:
b9:d9:57:da:73:26:a2:4c:21:a3:30:bd:da:83:55:
09:ae:d9:40:49:80:8c:48:02:02:aa:42:2e:88:58:
cc:5c:b1:96:07:c3:20:f2:64:7b:8e:9c:ac:15:4a:
ef:59:8e:8c:ca:16:0e:eb:21:f6:46:6d:a3:0d:ae:
d3:53:2e:97:19:70:2f:28:8f:d2:48:44:cf:16:50:
be:e4:fa:df:43:81:bf:65:20:df:e2:19:b7:0f:97:
39:87:d2:53:4f:7c:2b:27:88:e3:53:8c:3e:e5:bc:
52:0f:b6:dc:8c:ff:98:73:fd:f3:a4:95:47:9a:a6:
64:8c:00:68:5b:66:7b:71:a4:8b:a6:9e:60:46:32:
8b:8c:5b:0e:e9:e0:31:62:73:4e:e7:18:04:71:cf:
44:2e:65:1a:a8:2f:57:d6:61:83:ca:90:cd:43:ad:
7e:35:e4:0e:b4:90:71:5d:d3:f3:5f:be:46:a2:28:
59:87:6e:55:fe:2d:81:e8:e7:5b:2c:82:10:ca:0f:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:BF:DE:1C:4A:08:35:FC:5B:7E:1D:98:17:BC:DC:29:AF:21:92
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/RWO_3hxKCDX8W34dmBe83CmvIZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:82:fd:6e:8b:e2:e2:a5:01:fc:d9:1e:9b:8c:22:c0:bd:2d:
aa:4b:05:cf:8d:e7:a5:b5:5b:17:2c:03:2c:f0:21:5b:7f:dd:
99:15:75:c8:cb:7e:b0:7a:6f:8a:be:a6:cd:b9:b3:ea:22:08:
11:98:d8:16:9e:9b:38:81:52:c6:13:f8:32:e7:13:20:b8:97:
20:98:e9:5b:74:77:8e:28:a9:8f:5b:14:ec:3e:f4:d4:f6:ba:
d2:fd:61:f0:00:e1:56:d0:7b:4b:5b:c5:c0:8a:68:1a:74:75:
45:7f:9a:6b:56:60:e6:4a:dd:53:38:56:73:7c:97:8f:fc:43:
ea:ba:09:39:46:d5:0c:a4:1e:e2:62:b5:e5:42:ba:ba:0b:a4:
8f:6d:3d:a5:7a:7c:f4:41:60:39:35:7d:bc:f9:3a:bc:65:96:
57:28:1d:2d:5b:75:2c:00:7a:38:3e:df:e7:d3:35:73:fa:f2:
f9:a2:87:10:ba:e8:46:52:8a:80:2b:8d:d3:b6:22:d2:33:d2:
2a:ab:4c:b8:2f:56:5a:73:ad:bb:4e:7a:d1:db:e3:a7:b1:fa:
8c:cc:56:86:4f:5b:cb:ec:fa:ba:b3:ff:0d:76:66:4d:b4:cf:
4f:34:07:25:75:2e:42:00:b3:8e:e6:32:1c:89:03:03:8d:78:
0c:bf:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:57:18 2024 by rpki-client on console-ams.rpki-client.org