Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/XAFzcsZphsAkE3Nh7ThgUwcjXWY.roa
File: XAFzcsZphsAkE3Nh7ThgUwcjXWY.roa (raw, json)
Hash identifier: teG4ODoq6h2gUtkF5e2jAzrpCsw9wwQop9gcUGJ3nXs=
Subject key identifier: 5C:01:73:72:C6:69:86:C0:24:13:73:61:ED:38:60:53:07:23:5D:66
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 018CC3B6C03E5AB04ACA83099C89BE310C65
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/XAFzcsZphsAkE3Nh7ThgUwcjXWY.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50576
IP address blocks: 46.231.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c0:3e:5a:b0:4a:ca:83:09:9c:89:be:31:0c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c017372c66986c024137361ed38605307235d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:7a:ed:7f:4a:b2:4a:5a:15:da:45:b6:03:
b7:d1:a5:2f:39:e1:f8:e0:5d:51:c8:e0:c4:09:25:
12:6f:19:e1:68:56:6c:75:f5:40:70:b0:c1:14:8b:
0a:3b:cd:60:01:7e:ed:42:69:9d:23:db:b2:10:41:
ff:1a:d1:20:40:9e:34:78:5b:7c:eb:0d:58:c0:2d:
0d:3a:0c:39:ce:48:8f:cf:1a:2a:9f:63:d6:53:e7:
74:57:44:9b:22:78:f9:4f:a6:f5:58:b6:31:0f:13:
61:37:68:cb:32:c0:c7:1b:cd:7e:84:f0:98:f6:17:
7b:e0:49:df:d4:4d:ab:11:ea:7b:a1:71:7a:a1:27:
e4:12:ad:54:81:af:a2:cb:d3:e5:bd:a6:70:48:73:
e8:b8:1b:06:8c:5c:00:4c:3c:42:56:ac:70:85:73:
9f:3e:8b:af:b1:12:d7:9c:f8:49:9f:df:f1:ce:1c:
52:c1:ac:1c:07:32:08:83:e7:6d:4e:2b:e9:86:11:
f1:b9:19:1e:79:4b:3d:3d:2d:6e:e3:8a:ff:d1:6f:
bb:81:56:1a:03:99:43:ae:a3:94:f6:d7:bb:d6:db:
b7:7b:5c:82:59:2d:b6:a5:cb:5a:0e:12:d7:17:a2:
5d:ee:01:75:96:11:37:77:9d:82:e2:1e:60:50:2e:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:73:72:C6:69:86:C0:24:13:73:61:ED:38:60:53:07:23:5D:66
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/XAFzcsZphsAkE3Nh7ThgUwcjXWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.228.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a3:ed:ec:15:e5:4f:43:f7:fe:65:3c:f9:3e:f4:8b:6f:bf:
3b:bb:03:ac:f1:88:5e:5e:a8:5c:ab:4f:06:7a:9a:77:47:2f:
79:04:e3:cb:74:78:63:a7:7d:46:22:c4:aa:5b:f7:1f:82:2e:
3c:42:18:61:7a:52:ed:5e:ce:b1:c1:31:db:57:bd:a0:71:47:
07:95:a1:bf:ee:94:64:4a:01:61:cd:f1:78:61:41:ca:2c:56:
46:75:41:a8:92:c3:9d:54:ee:51:c3:c0:dd:66:fa:9c:63:73:
19:4c:56:dd:e9:68:02:da:2f:d2:75:39:a9:6a:38:f3:35:d6:
57:32:52:5e:83:0a:d5:2d:3c:4e:8c:eb:40:31:25:88:67:2d:
5d:91:87:9c:7d:3a:f2:d8:7f:e0:c9:93:7d:70:da:df:8d:f3:
b0:37:a7:bf:db:55:d2:c0:5f:95:97:c1:50:93:4e:5f:99:bb:
c5:ac:02:59:03:de:af:7a:9a:a7:e2:9f:c0:0a:42:09:9a:13:
5f:70:ed:76:51:39:ad:33:49:0e:77:6b:c3:1f:93:21:41:59:
43:b3:38:6e:ad:60:5f:ec:3f:e1:07:95:fa:19:c9:d3:2b:f9:
85:2e:24:e9:9f:c8:f8:ff:40:bd:79:c2:c1:7f:4d:db:ed:67:
28:78:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:20 2024 by rpki-client on console-fra.rpki-client.org