Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/SoIXdO-AHnQF2G4umvA5it7CbD0.roa
File: SoIXdO-AHnQF2G4umvA5it7CbD0.roa (raw, json)
Hash identifier: i9EtEeswbfMv0SeOOi9U5QB+dsjgFMINx+xOYYVZmY8=
Subject key identifier: 4A:82:17:74:EF:80:1E:74:05:D8:6E:2E:9A:F0:39:8A:DE:C2:6C:3D
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018D1A8FDA209E572AB1A9B27E422BE708B7
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/SoIXdO-AHnQF2G4umvA5it7CbD0.roa
Signing time: Thu 18 Jan 2024 03:14:11 +0000
ROA not before: Thu 18 Jan 2024 03:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 46.8.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1a:8f:da:20:9e:57:2a:b1:a9:b2:7e:42:2b:e7:08:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 18 03:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a821774ef801e7405d86e2e9af0398adec26c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:5c:58:eb:2d:cb:7d:90:b8:64:0a:65:91:
4a:24:a4:2d:f5:8a:4b:fd:1a:0b:f5:07:91:2b:23:
26:4c:b6:9a:73:46:e4:41:a2:a3:21:23:86:74:1d:
f1:bf:cc:25:23:35:33:54:0a:2a:06:6b:f7:d6:25:
a3:90:c5:34:d6:da:04:e7:26:43:b6:dd:58:15:bb:
98:70:b0:02:5f:61:03:ca:51:e4:73:01:ac:2d:3b:
bd:f4:ad:b8:39:d5:16:af:b3:a8:e6:7a:56:96:37:
58:f8:57:a1:dd:70:ff:ea:18:74:bb:13:ab:8b:29:
ee:23:80:e3:67:0d:9c:c2:71:16:53:2a:a5:bf:82:
ba:fe:b6:05:0b:a9:96:1f:b6:56:67:3d:de:7f:b1:
77:15:06:b9:18:5f:0c:12:c6:2a:15:3f:c3:ad:37:
1d:c1:c2:88:32:ac:fb:e7:41:da:22:5f:a3:4d:32:
55:c9:a2:c2:14:4e:a1:f1:b3:78:90:ed:ca:63:a5:
16:df:d6:83:06:23:ab:3f:63:99:03:a0:2c:11:65:
78:e9:e4:0d:13:d9:81:c2:77:eb:f3:ae:79:d8:74:
4b:5b:c3:d0:4b:d9:05:80:ea:18:48:bb:50:2e:6c:
fb:ad:0e:37:98:17:9a:47:59:a5:7e:9a:7b:e4:93:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:82:17:74:EF:80:1E:74:05:D8:6E:2E:9A:F0:39:8A:DE:C2:6C:3D
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/SoIXdO-AHnQF2G4umvA5it7CbD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
23:64:3b:48:8b:1e:2b:ca:09:ea:d9:93:c8:74:c7:34:74:f5:
1d:4c:62:49:5c:42:27:f8:10:94:0d:35:d2:a9:45:60:38:db:
75:c2:4a:c8:5a:27:5b:cf:8e:f6:63:b1:05:f6:9d:9f:8d:23:
a2:09:94:11:86:5a:38:0f:8c:dd:01:66:26:ee:e9:a4:21:0e:
84:9b:e5:b7:2f:27:41:06:ba:a3:1a:9b:5d:d1:6b:f0:1d:ec:
8c:8f:d1:51:08:18:34:9c:7a:42:de:e2:e0:72:75:a3:ee:23:
aa:93:2d:d6:df:e1:d2:e1:96:63:18:1a:81:a8:25:9d:1f:04:
06:fb:73:72:d7:f0:39:54:97:ba:e0:88:5e:47:7d:4f:b8:03:
16:0a:27:d3:38:42:20:4f:13:4f:0c:97:71:26:c3:59:0e:d0:
d8:85:89:c6:a7:0a:07:70:f3:d5:42:f8:25:02:91:5c:af:92:
2b:20:24:3f:db:07:88:69:d1:cc:f9:f9:97:80:a1:31:26:eb:
31:70:fb:d3:7d:09:67:86:d3:58:1b:40:22:d0:73:f0:2e:1b:
80:15:ea:90:87:19:64:ac:20:91:2a:a9:ae:d5:11:1e:fd:32:
35:aa:3a:e2:9e:b6:36:42:a1:01:7a:bf:ee:b0:97:64:76:f3:
91:12:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:40 2024 by rpki-client on console-ams.rpki-client.org