Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/ABVf8WMkyHz5qlD32H71uOUYjk0.roa
File: ABVf8WMkyHz5qlD32H71uOUYjk0.roa (raw, json)
Hash identifier: GVILCSLsZexxAEdL7BSKxPFnaf/ZKaaXdA8q0FszllM=
Subject key identifier: 00:15:5F:F1:63:24:C8:7C:F9:AA:50:F7:D8:7E:F5:B8:E5:18:8E:4D
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 018CC7954C0EE95137379C39D21BC1F6B6D7
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/ABVf8WMkyHz5qlD32H71uOUYjk0.roa
Signing time: Tue 02 Jan 2024 00:31:39 +0000
ROA not before: Tue 02 Jan 2024 00:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34688
IP address blocks: 46.227.240.0/21 maxlen: 21
2a01:7600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4c:0e:e9:51:37:37:9c:39:d2:1b:c1:f6:b6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00155ff16324c87cf9aa50f7d87ef5b8e5188e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:2d:c2:de:00:fa:f7:33:bc:3a:6c:fd:1e:
28:ac:85:90:63:32:8c:4a:d2:b1:8e:f8:82:b0:ae:
c1:17:0e:78:a0:06:e8:3b:3b:36:ab:43:b3:63:e7:
43:3c:81:1f:65:4e:de:7a:d8:a5:c5:91:22:e6:8a:
5d:03:e8:e9:89:8f:33:cf:b0:0b:7c:d0:18:f4:db:
b4:c5:18:69:12:74:17:e8:1a:b2:d9:e1:8e:f9:8d:
8c:d0:92:0b:7d:8c:47:da:d6:13:e1:8a:0b:03:ef:
55:4a:81:c0:27:71:26:bf:f5:79:66:5a:48:36:e2:
b8:b8:6f:a2:db:8e:28:69:02:59:94:5c:b4:cc:b5:
82:d5:7f:3f:e3:82:a6:52:3c:12:3f:cf:40:44:50:
4c:bd:42:35:02:1c:b7:d1:11:65:36:00:63:a7:d8:
69:cc:b2:8a:76:10:d4:e6:4d:e4:85:a6:ef:b9:55:
cc:81:de:60:b7:01:05:0a:46:21:89:a7:ae:54:07:
b6:0f:0b:67:e0:56:1e:76:fd:f2:03:bb:c1:2a:e9:
7f:de:97:33:37:0a:04:fe:c6:57:be:db:ef:98:e9:
66:1b:de:ed:f0:e1:b6:0b:71:ef:1e:fb:22:d9:e5:
d1:c5:ba:6e:8e:16:bb:ca:23:e8:dc:b4:4a:f0:7b:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:5F:F1:63:24:C8:7C:F9:AA:50:F7:D8:7E:F5:B8:E5:18:8E:4D
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/ABVf8WMkyHz5qlD32H71uOUYjk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.240.0/21
IPv6:
2a01:7600::/32
Signature Algorithm: sha256WithRSAEncryption
64:36:59:e6:6d:07:b8:c2:d7:96:84:a2:3f:2c:75:f6:ae:cc:
db:9f:f8:1e:cf:78:55:cb:1f:f5:23:f1:c2:a8:1f:42:9d:b0:
49:86:02:07:38:88:73:6f:59:46:07:f3:da:ea:d3:69:5d:49:
82:33:a5:fd:f7:58:a1:d9:3a:9b:ab:6f:dc:52:48:cd:d5:05:
ea:97:e4:76:0d:a6:de:bb:f7:89:e1:20:0e:25:0d:0f:a1:41:
92:a0:bb:3a:81:ce:26:85:f4:29:b0:95:40:b9:2c:37:fa:52:
9e:a9:2c:dd:ca:21:27:3a:18:0f:d0:1d:a5:f2:18:f5:ef:38:
8a:41:9b:aa:e3:c0:de:2d:7e:34:ce:38:9e:75:f0:e8:31:9a:
ac:4a:16:32:2b:b6:90:b2:56:0b:41:a7:24:40:2a:4c:8b:4f:
35:6f:59:9e:63:84:8b:03:95:4c:55:f7:f2:ec:ba:3f:bb:d8:
d0:3b:c2:11:4e:b3:5d:af:eb:ae:62:03:f9:05:b3:15:06:e3:
5b:87:2b:4e:fa:68:1c:05:55:dd:b6:2d:10:5b:65:8c:f1:65:
76:c6:c9:57:62:96:3a:a5:39:a7:26:df:8f:c4:5a:91:7c:63:
29:af:9b:60:33:9b:3f:ae:85:5f:0c:6e:b9:91:f5:af:e0:b3:
02:5e:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:12:17 2024 by rpki-client on console-fra.rpki-client.org