Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1-mIOfOveJhOJMvHaHkjpGcXsV5o.roa
File: 1-mIOfOveJhOJMvHaHkjpGcXsV5o.roa (raw, json)
Hash identifier: HezCoZsvzYRMFoFmWh7XbF3FrbTCrUJ/yXC+l2pubz8=
Subject key identifier: FA:62:0E:7C:EB:DE:26:13:89:32:F1:DA:1E:48:E9:19:C5:EC:57:9A
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01913660E20B3E1A7D2637ADCEED335E76D9
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1-mIOfOveJhOJMvHaHkjpGcXsV5o.roa
Signing time: Fri 09 Aug 2024 09:03:24 +0000
ROA not before: Fri 09 Aug 2024 09:03:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41811
IP address blocks: 46.8.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:60:e2:0b:3e:1a:7d:26:37:ad:ce:ed:33:5e:76:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 9 09:03:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa620e7cebde26138932f1da1e48e919c5ec579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:66:cf:90:2a:56:72:dd:e6:76:0f:10:70:
99:27:a1:5b:7b:9f:1f:65:cd:e6:19:b0:2e:a4:c6:
e6:79:4e:1d:02:d7:3c:50:40:8c:0d:07:4b:4f:eb:
91:29:64:c6:aa:4f:cd:44:cc:7f:38:ff:22:70:9e:
ec:6c:c9:b2:d9:e9:db:39:45:8e:0c:45:f4:69:be:
7e:c9:98:f0:37:d5:8c:97:c1:c3:a8:33:26:7c:cb:
8e:0e:31:ad:27:74:e6:05:b3:9c:2e:d0:fe:29:79:
97:65:a4:74:95:d1:c1:44:75:0a:bc:0e:42:49:06:
6e:bd:93:7b:38:a1:79:c0:f3:0d:11:93:70:ef:c4:
87:3a:37:79:97:0d:aa:6c:26:13:55:f4:fb:e6:c9:
f8:e0:5f:69:fa:54:7c:fc:35:81:5d:84:b9:3a:79:
36:4c:8a:51:c5:59:61:d5:a5:dc:71:32:08:d0:26:
50:ad:7d:20:33:bb:2f:5a:80:78:a4:6d:5b:fe:3e:
f8:c7:a8:1d:6e:b8:40:90:d6:ac:2f:6f:81:5e:d4:
70:d4:a9:f1:d4:0d:9b:14:12:3f:ae:8b:59:e7:6f:
6e:cb:26:03:88:c9:99:b5:72:40:34:5e:cf:ab:af:
3b:cd:85:91:31:db:98:b8:0a:30:1e:3a:b6:fd:11:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:0E:7C:EB:DE:26:13:89:32:F1:DA:1E:48:E9:19:C5:EC:57:9A
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1-mIOfOveJhOJMvHaHkjpGcXsV5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.197.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3d:1d:2d:2f:55:e4:33:f7:9e:ff:f4:77:db:a1:fa:19:04:
ed:40:42:be:45:7a:09:f6:51:65:eb:ff:63:c9:07:f6:00:d6:
37:19:ca:cc:81:37:06:be:4c:f8:20:75:34:69:c3:15:ce:be:
66:7b:cd:03:5d:0d:2f:4f:de:fe:95:ec:92:bb:39:d1:91:8c:
6b:50:57:db:7f:7f:b9:26:91:84:9c:52:b9:a1:7a:cc:64:8c:
9a:30:11:84:94:7c:f4:d5:42:e3:dd:ac:a8:52:ca:eb:c4:f3:
45:bb:3e:0a:d2:68:cd:8e:42:a4:5e:f9:26:e8:f5:53:62:54:
49:7f:73:92:2a:2c:81:e5:1a:97:53:f6:3a:9e:6e:d6:39:ca:
a9:cd:c1:d5:1e:95:69:0a:ce:76:20:f1:1b:16:4b:f3:9d:17:
41:b9:2e:a8:b7:81:de:3c:20:2c:10:53:72:ff:c0:da:f1:0d:
2e:77:83:f6:36:66:01:0d:25:da:34:03:6f:df:70:33:2f:63:
9d:5c:a2:4b:b3:9c:06:8a:2c:68:69:10:10:0a:2d:00:2f:b9:
4b:56:66:f9:82:3a:c6:7e:b1:5f:78:46:ad:4b:16:d0:34:b3:
3e:4c:c2:18:12:3f:fc:94:d7:d5:b6:25:be:01:45:cd:b8:10:
a6:d1:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:29 2024 by rpki-client on console-ams.rpki-client.org