Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/gOAKpftQGAtnOSr35uGC1A8KXJ0.roa
File: gOAKpftQGAtnOSr35uGC1A8KXJ0.roa (raw, json)
Hash identifier: 6q+gMqD72aoEiUbEzJKyr3SyJ6vBidhdtkJtKAdqKyQ=
Subject key identifier: 80:E0:0A:A5:FB:50:18:0B:67:39:2A:F7:E6:E1:82:D4:0F:0A:5C:9D
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 01926B42CA4EA60321219B914987C9C1E5A2
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/gOAKpftQGAtnOSr35uGC1A8KXJ0.roa
Signing time: Tue 08 Oct 2024 08:33:12 +0000
ROA not before: Tue 08 Oct 2024 08:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60442
IP address blocks: 46.28.233.0/24 maxlen: 24
2a02:ed40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:42:ca:4e:a6:03:21:21:9b:91:49:87:c9:c1:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Oct 8 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80e00aa5fb50180b67392af7e6e182d40f0a5c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7b:7c:5e:a8:cc:d5:e9:db:a5:7a:a7:22:81:
e3:f3:c8:c4:b9:5d:52:dd:8b:bb:43:51:f1:6e:c8:
03:1a:c4:10:f0:e5:b1:40:fd:81:4d:9b:fc:72:6e:
5c:a6:9b:ff:20:b7:e8:25:da:f6:90:6f:61:94:dd:
da:aa:08:24:3e:37:97:91:ff:af:50:5f:e0:21:20:
d4:ad:93:19:49:37:47:f2:c9:cf:4e:d6:b0:a2:9d:
0f:0f:a8:38:86:8f:80:9d:f6:6c:a3:98:d6:c7:87:
3f:f8:65:ee:85:59:25:42:0c:a4:0a:dc:80:ed:09:
60:6e:9f:5c:64:5b:f0:ca:86:44:60:5b:f0:fc:8d:
c9:a6:c1:98:0c:dc:bd:c0:e7:35:0b:72:5d:f1:d4:
59:db:05:2f:f2:d1:c7:64:43:bb:7e:c8:1f:16:31:
05:0c:29:4c:e4:96:c5:4b:81:65:4c:72:02:0e:33:
f4:79:43:f2:cd:a0:7c:60:b8:1c:d0:11:59:cb:20:
3a:89:14:77:91:d7:a0:d7:e1:cd:77:ac:cf:41:1f:
2a:60:4c:b4:2e:1b:37:4d:8e:ee:c7:4a:40:94:f9:
e8:e2:87:ca:7c:e0:52:72:ef:82:3f:4f:07:79:54:
bd:3a:60:0f:a7:8d:5a:18:3e:a3:ce:06:d4:42:f7:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:0A:A5:FB:50:18:0B:67:39:2A:F7:E6:E1:82:D4:0F:0A:5C:9D
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/gOAKpftQGAtnOSr35uGC1A8KXJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.233.0/24
IPv6:
2a02:ed40:1::/48
Signature Algorithm: sha256WithRSAEncryption
19:85:4c:ec:4a:a8:03:3f:ae:61:ed:f9:f8:17:0f:11:7b:71:
22:23:51:a6:81:66:90:a8:4a:32:46:57:64:04:70:8a:9a:7c:
de:71:10:1b:db:52:0f:89:04:52:06:fb:54:d1:47:a9:f7:c7:
88:26:68:57:e3:46:92:d8:3e:19:7c:73:3b:e4:25:32:14:a1:
24:b0:e7:b9:01:9e:6c:9d:65:c0:2c:6b:4b:c3:bc:9b:ad:0b:
d3:0b:37:78:f9:0d:2c:76:d4:f6:d4:1d:72:68:46:32:95:44:
64:32:2e:90:00:b0:f5:5f:6e:1a:31:96:7b:51:65:2c:2b:61:
77:0f:d2:25:85:26:c2:cd:ab:db:3d:5b:8d:9c:1d:8b:fe:cb:
e6:1e:91:d9:a5:f9:67:e7:d2:b0:1f:10:d1:fa:48:9d:03:58:
2b:ef:ef:e0:9d:b6:5f:88:e1:19:0f:ed:1a:32:43:b6:9b:9b:
87:98:ed:d3:de:1b:7b:e5:c4:e9:3a:44:32:79:6d:9a:37:b9:
ac:09:19:0e:03:6b:7e:23:0a:4f:95:2a:7a:6c:e7:9c:e6:3e:
ca:06:94:74:62:3c:05:a0:f1:12:39:2c:32:21:eb:aa:82:17:
e4:3b:7b:c3:3f:fa:ac:5f:c7:31:b5:64:79:2d:34:4a:a8:de:
63:34:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:41 2024 by rpki-client on console-ams.rpki-client.org