Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/XlBJazSkMouXx8MtFWER-ctPR18.roa
File: XlBJazSkMouXx8MtFWER-ctPR18.roa (raw, json)
Hash identifier: MEWW0YtEjEnIFpjCiHkqOOzROj/0DUhvbU/Ear2Ej0U=
Subject key identifier: 5E:50:49:6B:34:A4:32:8B:97:C7:C3:2D:15:61:11:F9:CB:4F:47:5F
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018CC3B6D6BDB4E45246879752DBBF50E4DB
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/XlBJazSkMouXx8MtFWER-ctPR18.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141167
IP address blocks: 46.8.112.0/23 maxlen: 24
46.8.114.0/23 maxlen: 24
46.8.118.0/23 maxlen: 24
46.8.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d6:bd:b4:e4:52:46:87:97:52:db:bf:50:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e50496b34a4328b97c7c32d156111f9cb4f475f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:0a:7d:42:b4:72:32:50:8f:d9:39:5f:b7:
33:64:a5:a9:68:9f:cd:76:a2:58:c5:b3:58:56:0d:
c9:25:73:f9:d9:a6:38:ea:ee:3d:83:d5:19:46:ab:
2c:d1:60:1e:3d:af:04:5f:0a:7f:b9:7a:fe:3d:18:
24:f3:58:ec:a2:af:f5:fb:a3:f0:87:03:2a:a1:60:
6f:35:0b:d5:1e:ac:02:7e:46:92:26:0e:83:28:41:
14:11:62:bf:a6:81:d6:e4:b1:c2:7b:36:f2:86:d9:
a3:5b:a6:96:c5:a8:80:f8:d5:2e:8d:da:b7:49:ca:
bf:35:c2:17:ff:71:40:5c:07:7b:ac:7b:52:f4:4e:
45:44:ed:ea:83:b7:f6:6b:ae:89:b7:e0:1c:fb:07:
22:5e:35:8e:99:73:ec:1c:7c:a0:3e:19:45:7f:33:
79:c1:af:c0:cf:ff:f7:d0:4f:be:1f:b8:7d:03:ec:
fa:10:b8:54:e0:27:29:07:41:ed:d1:b5:70:db:a3:
d0:84:7e:9a:78:07:dc:c5:88:5d:75:36:04:6f:b0:
33:a6:40:c3:44:b4:18:38:77:05:7a:2b:84:5f:c8:
ee:ac:ef:08:c8:2e:00:22:cc:c8:14:13:f4:e1:6e:
1a:ea:8b:d6:68:0c:3f:1c:a2:0e:32:f2:e0:a1:4f:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:49:6B:34:A4:32:8B:97:C7:C3:2D:15:61:11:F9:CB:4F:47:5F
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/XlBJazSkMouXx8MtFWER-ctPR18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.112.0/21
Signature Algorithm: sha256WithRSAEncryption
59:7e:00:08:af:d9:0e:df:67:c2:99:5a:a0:c0:aa:4a:6b:0e:
75:91:96:6d:48:90:fb:0c:12:ee:7a:7d:77:14:45:ef:ee:0e:
1e:72:ff:74:fd:68:06:7e:f4:70:8d:bd:22:4e:03:98:5e:51:
ce:98:5d:30:97:f2:1b:27:d6:3f:4d:63:5a:ff:3e:b8:4f:5b:
df:dd:23:4c:7e:2c:98:52:66:8a:76:54:97:8d:5e:80:24:98:
ab:fd:aa:74:69:7f:35:9e:ef:1f:bb:df:c9:22:3d:ec:ce:c2:
99:77:c0:73:ae:f6:35:a2:32:94:da:f1:de:13:2f:62:17:44:
a1:00:39:fa:fb:71:fb:eb:76:7f:ce:89:4d:3e:20:dd:c9:4a:
86:fc:cb:a3:00:d7:30:d2:4e:ac:7b:84:29:47:a3:ee:ba:d3:
e5:61:c2:4e:aa:9e:73:13:ab:fc:70:10:dd:84:91:46:6d:ef:
7c:45:f0:ba:02:7f:2f:b5:18:db:e7:c4:09:85:96:5c:d0:88:
2f:af:77:68:9e:24:cd:cd:7c:02:37:a8:89:2a:11:e9:9c:4f:
be:0f:1b:b7:56:5e:a5:ae:41:09:9d:1a:cc:98:ca:4f:5b:c7:
75:91:95:6d:d0:48:30:50:60:63:44:2f:47:4b:47:01:f4:57:
dd:5a:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:12:03 2024 by rpki-client on console-ams.rpki-client.org