Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XZWeYMRCMQxOd_P1KbaCk1TontI.roa
File: XZWeYMRCMQxOd_P1KbaCk1TontI.roa (raw, json)
Hash identifier: GXwLSOg06e88hgenxdi6sYeiwxjaNz57m7PxE6Kz5ho=
Subject key identifier: 5D:95:9E:60:C4:42:31:0C:4E:77:F3:F5:29:B6:82:93:54:E8:9E:D2
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01902AB74E039E2F5329131DA30DF8E3B18D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XZWeYMRCMQxOd_P1KbaCk1TontI.roa
Signing time: Tue 18 Jun 2024 09:39:34 +0000
ROA not before: Tue 18 Jun 2024 09:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214687
IP address blocks: 46.243.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:b7:4e:03:9e:2f:53:29:13:1d:a3:0d:f8:e3:b1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jun 18 09:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d959e60c442310c4e77f3f529b6829354e89ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:ba:df:c6:71:8a:6e:3a:09:a6:69:26:ab:
2d:95:5c:99:4c:65:9d:6d:e4:ff:82:f0:36:55:9c:
3e:be:17:74:e9:a0:0f:31:67:79:e7:a6:e8:5c:22:
31:aa:9f:bc:b7:0b:0f:61:ab:52:f4:f4:30:19:1a:
7c:8a:50:c6:ad:a4:5a:d1:78:aa:56:5e:24:61:61:
0e:25:fc:1d:9e:c5:1d:d4:f5:4a:9d:8e:e9:78:9e:
5d:91:50:6a:a8:6b:b1:69:fc:b7:e4:ff:35:48:14:
ee:b1:22:18:c8:76:f5:02:35:33:18:bf:34:13:a9:
99:3e:3e:26:06:9f:96:b3:10:a1:57:c9:98:17:1f:
82:98:a8:d2:63:76:d8:93:42:3a:81:31:06:a1:06:
5f:1a:95:7a:55:c8:c7:43:07:b1:f4:b2:62:ea:e6:
6b:e0:66:71:b0:89:30:37:53:09:ea:d9:1c:cd:ce:
42:a9:c6:b7:94:ab:a2:72:75:0c:95:06:9c:9b:5d:
7c:6d:2e:89:eb:94:b0:6e:3f:fd:d0:38:3e:b9:79:
73:74:1c:29:3a:c4:14:7a:7f:0c:de:9e:1b:e7:2d:
92:45:8b:f8:f0:44:fc:a6:59:7f:69:65:13:06:0f:
15:c2:18:b9:bb:15:5a:7b:d9:bd:88:a6:c2:99:3c:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:9E:60:C4:42:31:0C:4E:77:F3:F5:29:B6:82:93:54:E8:9E:D2
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XZWeYMRCMQxOd_P1KbaCk1TontI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:61:2c:fd:94:0b:45:14:2c:c7:d6:2d:f2:f0:49:36:e2:36:
35:75:2e:5a:fc:b5:f3:12:8a:83:90:f4:49:05:d7:7a:3f:8d:
9e:59:17:3f:29:51:12:7b:78:70:8d:c9:c2:45:7c:c5:7b:99:
ce:a4:39:02:e8:d4:9c:9e:0b:9e:82:4d:8c:ca:58:45:da:ff:
90:f9:65:35:f2:79:90:25:3f:f4:7b:db:07:66:ea:c8:ac:11:
b8:ba:fc:bc:a6:78:3d:e9:6c:a5:c5:6a:2a:01:3c:c8:c9:7c:
a1:c6:f8:51:38:46:97:72:3d:53:23:55:70:fb:7b:26:e5:f3:
54:82:7f:d2:b8:91:a4:4e:bb:9e:74:bb:e7:d4:6f:4c:ac:a6:
a2:6f:0f:3a:5f:cc:61:03:ae:d2:2d:87:d3:5b:01:d5:c1:f3:
3b:61:5e:4b:0d:d0:26:b9:33:bf:d9:c3:98:cc:10:c4:d2:77:
22:56:bd:7a:46:d5:58:be:99:ab:cb:c8:73:3f:b2:ea:21:f0:
d4:cb:e0:b9:03:42:3d:56:5d:54:97:e0:2e:a0:ec:9c:1e:89:
5b:38:f8:b0:72:86:74:d2:b0:8a:64:1e:b9:b5:77:8c:06:4a:
ab:23:8d:98:3a:53:df:90:67:17:16:2a:65:41:6c:ed:97:2c:
06:11:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:13 2024 by rpki-client on console-ams.rpki-client.org