Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/rgzH7zrBlADqKZY4M8FtAsOaSgs.roa
File: rgzH7zrBlADqKZY4M8FtAsOaSgs.roa (raw, json)
Hash identifier: +p4VrFjQuaGpJWdcAYB8eg7JZHA2Ur26VwotVAZReEA=
Subject key identifier: AE:0C:C7:EF:3A:C1:94:00:EA:29:96:38:33:C1:6D:02:C3:9A:4A:0B
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 018CC5DC5F05B6C3814A9AB9205BC084D04E
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/rgzH7zrBlADqKZY4M8FtAsOaSgs.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36040
IP address blocks: 46.28.246.0/24 maxlen: 24
46.28.247.0/24 maxlen: 24
193.33.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5f:05:b6:c3:81:4a:9a:b9:20:5b:c0:84:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae0cc7ef3ac19400ea29963833c16d02c39a4a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:5c:ba:0f:5a:e2:fa:dd:4d:3d:26:8a:a2:
40:5f:58:ef:0d:00:36:11:03:eb:2b:f9:78:21:3e:
3f:aa:bd:8d:11:0c:1a:ab:78:85:34:09:7e:c3:88:
4a:ee:ca:bb:07:88:11:3a:d2:34:b0:d0:24:b2:79:
97:f7:84:58:7b:ec:97:51:02:00:79:77:b1:34:8c:
42:38:5f:cd:04:8f:51:fd:fb:40:dc:54:39:05:f6:
b9:4d:a0:1f:e6:7c:09:25:ba:0c:72:87:12:2e:6c:
a0:69:40:08:43:87:b6:3e:54:bf:c3:7e:b0:8c:45:
6b:3c:18:5d:64:97:01:4a:aa:2c:09:b0:9d:f3:b4:
5f:19:a7:d7:c3:8d:43:8e:55:ce:8a:08:f3:90:48:
53:25:c7:d0:d8:2e:38:99:19:dd:57:14:f4:2f:26:
f1:19:43:10:b7:77:a0:0b:6a:c5:64:7f:5e:0c:51:
84:f5:92:e2:d7:9f:bb:c3:33:fe:56:b8:78:79:5c:
bc:04:f8:6a:e6:62:e6:19:d8:62:43:76:5d:80:dd:
a5:b6:5c:89:d8:dd:b0:c0:81:68:49:2f:3a:0e:03:
60:d3:c9:05:60:04:5b:aa:39:d8:74:1f:ff:6e:a4:
9c:31:0f:f2:91:b3:87:be:5b:18:42:33:b0:23:3c:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:C7:EF:3A:C1:94:00:EA:29:96:38:33:C1:6D:02:C3:9A:4A:0B
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/rgzH7zrBlADqKZY4M8FtAsOaSgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.246.0/23
193.33.5.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a0:08:ac:4f:f9:43:6f:a3:c2:ca:8b:17:d3:d0:3c:aa:63:
ff:a6:9b:11:1d:29:e6:72:f9:9c:70:32:64:aa:59:7e:bb:4f:
0a:8c:fc:cd:7f:b3:21:c7:8b:0f:15:69:7f:69:20:5d:3e:d9:
19:59:08:3e:6d:7f:85:ac:75:9b:19:0f:14:63:ae:d9:07:bf:
88:fc:88:ca:eb:cc:c0:8a:03:41:09:77:25:7d:7a:d6:52:72:
e4:d6:82:4c:dd:4c:ea:b3:7b:d2:54:d6:ba:04:3a:e2:35:ca:
6c:c4:5f:79:b2:16:16:77:ed:33:1b:e4:fc:4c:c2:d2:72:25:
bf:ef:dc:f2:08:81:a3:bf:7e:10:72:d7:1f:1f:d1:1b:2d:5f:
cf:69:5a:3f:7c:28:6d:0b:ed:e5:12:bb:22:61:44:53:6a:43:
bf:47:a3:ae:e8:63:76:74:e2:93:b6:49:88:16:0d:8a:72:e3:
aa:62:7a:34:10:47:17:cd:b9:a8:99:e8:36:1c:0a:65:d6:92:
23:a7:1e:85:81:3c:e7:37:40:56:7a:d6:90:5c:9d:22:7b:79:
12:bd:28:96:21:e4:7a:a2:66:1a:0c:07:0d:85:5d:89:98:15:
25:96:ec:f7:c9:c7:df:bd:d9:45:a1:c5:36:b9:95:55:33:98:
c5:d8:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 16:47:59 2024 by rpki-client on console-fra.rpki-client.org