Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/wZEOjcoo85pAvXxxWdGDX6eIbZ4.roa
File: wZEOjcoo85pAvXxxWdGDX6eIbZ4.roa (raw, json)
Hash identifier: o94qISSYE0VF9jgB5SRetJScgKtiYiOPwgO+sLoqd0A=
Subject key identifier: C1:91:0E:8D:CA:28:F3:9A:40:BD:7C:71:59:D1:83:5F:A7:88:6D:9E
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 018EBDC55F2A4E4852F2B75FFABEF6415180
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/wZEOjcoo85pAvXxxWdGDX6eIbZ4.roa
Signing time: Mon 08 Apr 2024 12:53:32 +0000
ROA not before: Mon 08 Apr 2024 12:53:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47147
IP address blocks: 46.38.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:c5:5f:2a:4e:48:52:f2:b7:5f:fa:be:f6:41:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Apr 8 12:53:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1910e8dca28f39a40bd7c7159d1835fa7886d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:ba:4e:83:a6:98:11:ed:ba:43:ef:7a:84:
c1:0b:c9:4c:01:31:b9:6e:3b:21:db:4d:32:10:95:
02:32:cf:fc:c7:65:1b:5a:dd:84:10:7d:d9:b9:ba:
6d:3b:f6:d6:59:0f:50:6e:3a:aa:5b:82:ca:c7:29:
e2:37:d0:93:e1:18:19:4d:9b:e3:b8:d7:28:e8:db:
1f:d7:ef:99:33:0e:ad:19:a2:47:44:97:20:b5:80:
86:ad:91:df:3f:e7:0a:f6:ac:f1:79:b7:47:83:1a:
51:2e:95:18:0b:31:86:3e:15:60:49:ac:91:e4:84:
73:71:fd:a7:35:34:c9:24:9e:39:62:c1:eb:0e:95:
07:c7:da:27:38:d7:92:74:53:da:cf:40:0f:36:a1:
99:79:6d:63:1e:70:64:c7:c5:ff:33:d3:7b:30:1e:
f4:47:5f:ab:ab:7f:dd:4b:bc:ac:65:2d:66:86:10:
d6:88:24:73:53:cb:2d:b5:71:3b:fd:58:21:99:62:
33:1b:f0:45:9d:21:95:06:aa:81:95:c2:38:d0:fb:
27:e5:90:e1:c3:41:e1:2b:9d:1d:bf:78:1f:5e:d7:
2f:fc:47:1f:9c:e5:5d:c1:2b:92:3b:9b:a0:07:21:
b4:f0:90:c1:49:b3:53:9d:06:b5:7e:64:a4:af:ac:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:91:0E:8D:CA:28:F3:9A:40:BD:7C:71:59:D1:83:5F:A7:88:6D:9E
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/wZEOjcoo85pAvXxxWdGDX6eIbZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.248.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d6:cc:af:22:86:e0:4f:9b:eb:bd:5e:21:0c:97:1f:f7:cb:
96:63:c7:91:66:79:f0:fd:39:ae:07:17:a5:8a:99:aa:22:94:
60:7b:cd:d1:31:3f:f7:e5:ae:3a:e7:9c:43:3e:15:13:ed:f2:
e8:04:cd:36:49:95:f8:48:ac:fe:38:2a:23:2d:89:a9:37:f0:
86:88:6d:da:02:ab:ce:95:5c:04:5f:d0:4e:ed:28:b8:98:52:
9f:3a:9e:37:b6:48:07:39:ee:46:42:cb:2b:dd:09:09:d1:e4:
54:60:69:87:1b:b6:e2:25:3c:fa:3c:d4:d5:fc:dc:20:ce:56:
92:e3:11:54:30:df:a2:94:2b:41:be:29:bb:a0:ab:51:0e:ac:
bc:45:a1:57:be:e1:f7:1f:2e:43:bb:96:fe:98:19:62:02:c0:
94:d5:32:9d:18:c9:28:44:0c:e3:12:0e:96:a5:e0:bf:d5:57:
a8:31:7b:64:f6:2b:f7:9f:0e:7f:16:b3:34:b7:a7:13:41:8c:
87:a6:48:e0:33:bc:59:e1:a5:0f:29:8d:24:55:bb:d0:b0:89:
83:53:36:35:d3:0b:7f:ae:7f:c6:b7:82:5e:a7:82:8d:56:f1:
d8:bf:45:38:36:36:ec:47:bb:b8:f4:a8:d5:56:35:38:66:ec:
83:b1:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:57:22 2024 by rpki-client on console-ams.rpki-client.org