Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/aMW-WYkI4ng2BMOSF5Z3pnPsKtU.roa
File: aMW-WYkI4ng2BMOSF5Z3pnPsKtU.roa (raw, json)
Hash identifier: hojjMBBqoepApnb8BYVt7GHuigGFUWpXBLG3KjlCrA8=
Subject key identifier: 68:C5:BE:59:89:08:E2:78:36:04:C3:92:17:96:77:A6:73:EC:2A:D5
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 018DA2C11EB83DDE2226E4C9E09C19621B36
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/aMW-WYkI4ng2BMOSF5Z3pnPsKtU.roa
Signing time: Tue 13 Feb 2024 13:56:21 +0000
ROA not before: Tue 13 Feb 2024 13:56:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 46.28.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:c1:1e:b8:3d:de:22:26:e4:c9:e0:9c:19:62:1b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Feb 13 13:56:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68c5be598908e2783604c392179677a673ec2ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:42:12:99:34:a7:29:b5:a6:b0:95:9a:91:
32:94:12:20:4e:c1:f2:ba:26:0e:1c:93:37:11:3b:
f6:4d:fc:92:b8:7d:ee:d1:22:89:58:be:96:fe:09:
60:4d:25:c6:e3:3e:ff:61:54:fc:f5:19:ee:89:9f:
3b:8d:c4:0f:e2:a8:2d:13:df:43:1c:4c:7e:1b:e8:
11:d4:c9:6a:35:41:75:92:af:4e:08:a8:96:4a:10:
22:6a:65:67:f2:2f:cf:f3:6f:c0:45:e8:4a:e9:bf:
81:79:64:72:63:e6:df:4c:37:43:2f:66:f5:75:a4:
fe:17:cc:85:19:cb:b0:22:78:f1:d0:4c:c1:13:a5:
f8:3f:0e:92:51:f2:a9:01:20:70:37:17:a5:52:a5:
8d:fc:ca:12:0f:23:08:71:9a:a8:53:0e:3a:aa:6a:
33:a6:fd:fb:94:b9:67:bf:a0:a5:39:ec:32:da:7f:
0b:4f:67:fb:e5:fe:66:a7:78:e6:49:13:26:85:f3:
30:68:d4:6d:a3:61:5a:3f:69:a8:85:70:a4:14:7e:
4c:bf:c8:ce:48:98:2c:ff:6b:1b:f5:1f:04:67:9f:
f0:38:c4:fd:03:00:e7:f0:c6:b0:02:26:9c:5f:41:
49:72:a1:bb:30:8f:f5:45:39:9d:e6:fb:b0:5f:da:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:BE:59:89:08:E2:78:36:04:C3:92:17:96:77:A6:73:EC:2A:D5
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/aMW-WYkI4ng2BMOSF5Z3pnPsKtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.212.0/24
Signature Algorithm: sha256WithRSAEncryption
78:71:0c:d1:0c:92:02:c2:b4:77:8a:1a:c8:06:b2:09:8e:da:
76:63:2e:96:98:6f:e6:db:94:3a:0d:0e:bb:5e:04:0a:4e:ef:
f1:b8:32:e8:d8:c5:da:98:62:96:ef:b2:da:f7:ab:25:86:4a:
f8:0b:6e:d7:99:a8:a8:e0:1d:08:9b:fd:e4:d9:ba:73:0b:80:
ab:bb:c6:e8:94:41:28:8c:e8:f6:8c:3e:dc:83:6f:15:eb:ab:
48:19:a3:88:ff:67:97:c3:03:d3:23:c4:94:b5:cc:04:4c:95:
6e:e3:46:fc:0a:42:e0:9f:15:f0:bc:f3:af:fa:73:4b:47:7a:
87:b7:f8:ff:a3:25:dd:7a:62:4e:c8:82:06:24:62:18:22:8f:
d5:37:f7:a5:24:92:cb:e5:93:62:a8:87:fd:14:81:56:e8:06:
d2:c5:e8:93:80:11:8a:36:42:25:e4:cd:fa:1f:94:3b:20:d7:
f9:5b:95:bd:47:64:b9:7d:1a:73:9a:54:ad:ce:16:df:14:bd:
14:0c:e3:6d:c1:71:16:3c:7c:c5:f9:2d:66:03:37:6e:48:7d:
2e:58:85:9b:41:01:5f:07:08:ab:9d:eb:02:07:35:63:33:b4:
43:a3:dc:c5:ac:31:d0:52:32:8a:13:09:e7:8a:56:00:28:a2:
68:eb:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:37:19 2024 by rpki-client on console-fra.rpki-client.org