Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-GlgpCIgDd2Y12TRE-vRnxct4o8.roa
File: 1-GlgpCIgDd2Y12TRE-vRnxct4o8.roa (raw, json)
Hash identifier: Yrq8+/BGWQho1XCSv0NAfVGKWV4dNlbFM8hf1w/77UQ=
Subject key identifier: F8:69:60:A4:22:20:0D:DD:98:D7:64:D1:13:EB:D1:9F:17:2D:E2:8F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7EE0F0AFC46DE0173E77A882B237
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-GlgpCIgDd2Y12TRE-vRnxct4o8.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62010
IP address blocks: 46.243.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7e:e0:f0:af:c4:6d:e0:17:3e:77:a8:82:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f86960a422200ddd98d764d113ebd19f172de28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:05:4c:d1:d2:19:2b:75:7f:22:5e:6e:83:
55:0d:9d:e6:7d:33:7e:2b:60:1f:ae:e7:ad:e2:c5:
e5:e7:db:d0:4d:de:30:2d:3e:44:d7:03:f0:1c:fc:
54:f8:f8:0d:f5:95:77:11:de:08:ce:8d:74:9a:34:
4f:17:57:7e:5f:63:f3:3b:96:3c:8c:87:b6:42:50:
e7:5c:77:20:a8:ed:0e:d9:ef:e6:9a:30:9f:c0:76:
29:3e:4d:f1:69:32:56:e5:0c:ce:1a:1d:e3:b6:5d:
0a:a9:03:9d:6f:7a:d4:ca:b0:c7:94:68:d3:b9:9e:
5d:78:ac:e3:a7:67:30:79:3b:e9:39:0b:bd:ca:4d:
03:b8:6e:93:ae:a2:34:37:fb:cf:c8:e4:73:b0:8a:
b3:a5:f2:cc:91:c8:97:d8:ba:33:e2:ee:bb:8b:fe:
9f:15:3d:3a:41:3e:e1:a2:e4:46:d4:88:e8:6a:04:
a7:8c:34:c4:89:4f:bb:4a:e6:ca:f3:9c:7c:c7:c4:
77:b8:4a:5c:29:a2:ff:51:4c:17:3b:ec:33:03:db:
73:47:dd:10:2d:60:cc:38:94:0a:ab:62:b8:f2:98:
be:74:84:7e:8e:f3:ef:1c:59:f5:c7:24:22:40:32:
5a:a4:ef:13:a2:99:9b:c6:8e:1d:ea:1b:e5:35:37:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:60:A4:22:20:0D:DD:98:D7:64:D1:13:EB:D1:9F:17:2D:E2:8F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-GlgpCIgDd2Y12TRE-vRnxct4o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.174.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fe:fa:46:86:5f:ba:e3:eb:60:6a:78:76:04:90:4c:69:07:
a1:4c:2c:b7:3d:57:b1:cf:b4:0d:6c:ec:65:e2:da:b3:69:ee:
2b:33:98:44:46:8a:a9:fe:b3:ad:ee:a4:56:dd:2d:38:42:a2:
c7:0c:40:f1:d1:b2:5a:35:0d:95:a1:89:aa:3c:4e:28:0f:dc:
33:33:5a:d1:61:1e:ef:92:b4:94:4b:b1:3b:44:86:6c:a0:44:
e1:12:45:ea:1f:c6:a6:41:82:0b:ee:a8:45:ed:9e:c1:5c:cd:
ca:25:b9:79:98:e2:6e:3c:2b:ff:8c:59:2f:11:50:9a:76:67:
cb:b2:1f:95:c5:b7:c3:8f:7b:47:8a:f5:fd:a1:04:ae:46:54:
93:ce:6d:fc:7d:73:d0:9e:08:9d:eb:33:7d:b5:3c:85:fb:71:
03:8f:15:bd:91:fc:ce:8d:cc:22:ef:5c:e3:18:09:2c:1e:11:
33:cf:0d:f4:88:dc:45:ca:a0:e3:a8:8f:8e:53:81:21:e9:a9:
5b:3d:1c:85:95:0d:89:42:b0:af:79:f9:1d:22:84:73:9f:5a:
ab:3c:0a:cb:42:59:b8:cf:cd:2e:2e:c1:95:5d:29:3e:be:4e:
93:6d:4e:e0:68:e7:24:89:c1:2b:5a:81:ac:ac:24:03:52:b6:
a6:d6:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:11:22 2024 by rpki-client on console-fra.rpki-client.org