Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/pxNJGN3sqWg8QA8lxQwtYy5Eims.roa
File: pxNJGN3sqWg8QA8lxQwtYy5Eims.roa (raw, json)
Hash identifier: CH5afQW4XqK8/i6O5I7YlGHcedVmBvUx6AkzDe+6ODk=
Subject key identifier: A7:13:49:18:DD:EC:A9:68:3C:40:0F:25:C5:0C:2D:63:2E:44:8A:6B
Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial: 018CC79486C9DCFF90189DF589474054387C
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/pxNJGN3sqWg8QA8lxQwtYy5Eims.roa
Signing time: Tue 02 Jan 2024 00:30:48 +0000
ROA not before: Tue 02 Jan 2024 00:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201924
IP address blocks: 46.29.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:86:c9:dc:ff:90:18:9d:f5:89:47:40:54:38:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Validity
Not Before: Jan 2 00:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7134918ddeca9683c400f25c50c2d632e448a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:08:87:a3:04:cd:49:f8:f3:14:eb:a0:91:
d8:9a:3a:25:68:e7:12:49:1c:c0:77:b7:48:63:31:
38:b4:e5:63:5b:6a:ec:1c:31:e2:e1:f9:5d:89:ac:
77:80:df:2c:20:1c:fd:79:c1:2d:3e:cf:5d:9a:79:
17:a0:fc:4b:22:e6:fd:96:4e:62:cd:df:34:51:87:
39:b3:6b:ab:2f:6b:d1:03:de:69:09:83:c7:dd:df:
93:12:82:e5:aa:2e:52:45:09:f9:fa:52:ab:33:9a:
62:2c:20:01:52:77:35:6a:20:55:85:19:98:91:a6:
53:f3:5b:71:e6:68:61:67:af:a3:a5:f1:94:9e:97:
97:e6:d0:c6:af:18:e6:be:fc:fb:57:2b:0f:9d:a8:
24:21:36:f8:86:a4:64:a0:ec:89:c1:73:27:6f:7a:
68:68:c8:a6:35:3f:c2:06:a8:f1:c3:10:df:2a:7b:
fd:f6:f2:d6:8f:a7:bd:d1:f0:60:79:93:61:07:d2:
84:3c:35:c4:88:d6:f9:d1:f7:d3:fb:4b:cf:d2:8a:
52:40:09:f0:ea:77:d6:90:da:1e:3f:b7:83:f5:d5:
ae:03:a8:39:d5:ce:03:f1:ac:00:55:19:d3:85:f9:
54:6f:55:13:03:30:92:3f:fc:40:05:c8:97:26:96:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:13:49:18:DD:EC:A9:68:3C:40:0F:25:C5:0C:2D:63:2E:44:8A:6B
X509v3 Authority Key Identifier:
keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/pxNJGN3sqWg8QA8lxQwtYy5Eims.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:26:7d:d6:3d:64:23:4b:17:eb:ec:25:b1:48:44:12:df:b0:
2a:b6:bd:b4:fd:48:9d:6e:ca:70:a5:5e:67:9b:0b:e0:25:60:
bf:91:e1:a6:a1:f2:61:24:c9:8c:45:07:45:c3:4d:72:d5:d3:
70:6f:9d:39:5c:86:0b:22:32:fd:4a:a1:52:f6:3a:6b:9e:41:
6c:ca:d4:d8:b2:2d:9e:b7:cf:c7:b9:be:19:0a:36:b5:89:b2:
d7:6a:af:49:4e:14:d8:75:2b:1d:8d:d4:3b:60:e3:fc:63:3f:
5d:54:a8:84:32:e9:de:ff:ab:a1:67:18:ac:2a:11:94:74:92:
aa:b7:b0:8d:b4:33:bc:97:5f:18:57:65:02:f3:2f:55:15:4e:
af:9e:02:63:da:84:13:a1:db:f6:48:4c:a2:47:e6:6f:78:a9:
13:b8:ca:1e:ab:e5:83:af:04:42:79:96:c7:41:59:11:bb:3e:
16:33:6a:7b:9c:f0:03:b4:c1:5d:78:cd:8a:05:63:b1:20:4f:
d2:9a:9c:04:4e:6e:9d:ed:60:f7:6d:e1:10:5e:72:42:da:bb:
0b:c0:14:06:d3:89:cf:a3:f4:94:02:43:4d:bc:bd:f3:cb:fd:
5e:34:a1:5a:a9:c6:57:d5:86:2f:44:8e:e1:ef:18:aa:b9:bd:
5f:32:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:35:08 2024 by rpki-client on console-ams.rpki-client.org