Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/RJs7vkcN9AHVak2AoPYYj8KnugU.roa
File: RJs7vkcN9AHVak2AoPYYj8KnugU.roa (raw, json)
Hash identifier: //AY7S1b7acmOVSi7GtuH4v2SjnaVJoeMmlr8j9Y8d8=
Subject key identifier: 44:9B:3B:BE:47:0D:F4:01:D5:6A:4D:80:A0:F6:18:8F:C2:A7:BA:05
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 018CC3B6C123FA74C6B203BB574BDC872654
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/RJs7vkcN9AHVak2AoPYYj8KnugU.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200737
IP address blocks: 46.231.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c1:23:fa:74:c6:b2:03:bb:57:4b:dc:87:26:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=449b3bbe470df401d56a4d80a0f6188fc2a7ba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:3e:f8:04:74:a0:63:e5:f5:b0:93:09:09:
7d:41:69:63:07:5e:5f:48:6f:a3:23:f1:50:36:2a:
ed:40:3e:6e:a8:80:49:88:68:4c:91:97:d0:8e:ee:
f9:1b:24:9e:39:82:3d:19:7a:c2:51:57:7d:ed:2d:
ac:5f:e7:9e:80:dc:41:d7:c3:e6:51:d6:d4:0f:f6:
86:41:0b:8f:69:21:49:e4:95:f7:1b:2d:41:99:63:
9f:f0:10:c4:1d:8f:72:83:4c:12:42:1f:46:af:74:
1a:4b:8d:3e:08:17:16:91:47:6b:4f:d5:b1:b3:c1:
0e:21:20:4a:50:9e:50:cb:49:d9:be:83:6b:65:e6:
47:15:2b:84:ec:42:60:e4:ac:85:36:77:71:8d:24:
fe:a7:ed:23:94:18:55:4b:66:35:1f:6f:fc:92:05:
79:fa:4c:2e:05:67:d3:df:b4:0f:1f:94:26:b4:99:
8c:0c:bb:e5:e8:c1:02:7e:1d:e1:4c:e7:40:e3:3f:
4a:77:5a:8e:fd:ce:44:1f:7b:03:91:5b:d2:be:be:
b4:9d:9c:fc:46:20:18:b6:8b:44:bb:b0:42:81:a2:
83:d0:fa:77:ea:7b:63:d5:1b:2e:b9:0e:9b:ec:b5:
79:de:b2:8c:49:0f:77:50:bd:57:0a:b9:e1:95:1a:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:3B:BE:47:0D:F4:01:D5:6A:4D:80:A0:F6:18:8F:C2:A7:BA:05
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/RJs7vkcN9AHVak2AoPYYj8KnugU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:9e:8c:15:86:37:b5:63:91:96:4f:46:3e:8d:f7:0e:62:df:
0a:6d:82:ce:c9:40:cf:11:12:14:6f:38:b7:60:86:3e:0c:48:
b7:90:46:13:ed:20:4c:41:f2:ad:0d:18:93:7e:d2:5b:17:a7:
25:6b:7a:b3:a1:dc:03:52:a8:7b:ef:13:b6:1f:cb:e5:5a:14:
2f:79:ac:18:68:2b:6e:22:e3:2c:cc:73:e3:90:0b:5b:c1:28:
e5:4c:19:74:2d:19:8c:c0:3d:51:ee:e4:13:f5:2a:7a:0c:21:
d4:9d:69:59:da:83:86:8c:90:19:25:0a:8b:56:08:23:18:4a:
63:fe:c6:bb:43:38:c9:82:c1:21:4b:95:a9:b0:9b:eb:22:a1:
2e:9d:4a:a0:15:6d:71:b5:5a:fc:99:50:cf:49:bc:d6:ad:ec:
a2:4b:59:b9:bb:8d:34:3f:f8:e3:3f:19:6d:06:32:3e:83:18:
59:8a:d6:52:8c:e8:cb:f6:a8:d9:9d:8e:1c:87:3d:d7:02:56:
ad:26:83:4a:ce:9d:03:5b:a5:4d:8f:b4:47:47:d4:99:b7:30:
46:eb:c4:fd:89:09:8d:18:55:48:46:e3:cb:a3:c3:91:fe:98:
52:b3:9d:f0:18:81:09:06:74:3a:e7:24:45:e3:37:e1:70:a0:
f4:43:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:20 2024 by rpki-client on console-fra.rpki-client.org