Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6hoTe5JG6XsQU4L9Q-lziCcLI8A.roa
File: 6hoTe5JG6XsQU4L9Q-lziCcLI8A.roa (raw, json)
Hash identifier: Hl+ZTW8Ysn6pqfwT8bvMgviTpp3lyEBOF/yfYu+GN4c=
Subject key identifier: EA:1A:13:7B:92:46:E9:7B:10:53:82:FD:43:E9:73:88:27:0B:23:C0
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018F1903D761DCD2F88B01E99B36439434C5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6hoTe5JG6XsQU4L9Q-lziCcLI8A.roa
Signing time: Fri 26 Apr 2024 06:07:13 +0000
ROA not before: Fri 26 Apr 2024 06:07:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:03:d7:61:dc:d2:f8:8b:01:e9:9b:36:43:94:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 26 06:07:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea1a137b9246e97b105382fd43e97388270b23c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:ce:23:d8:d3:17:40:c0:90:d0:7e:40:12:
fb:54:3b:2a:ff:3d:56:c4:a2:c1:6b:49:37:f3:57:
dc:bb:c8:4a:5d:72:88:6d:70:d8:85:e7:93:c1:33:
2c:fe:9b:cc:8c:ec:da:70:dd:79:cb:15:e1:6f:d6:
6a:71:d1:e6:94:04:10:86:00:cd:5a:04:df:46:80:
1c:b9:7d:50:b8:56:54:c8:90:0f:e3:14:c9:da:a1:
e1:7f:a3:df:5d:41:d1:81:ef:c4:08:c9:a6:1a:80:
0d:4a:20:f9:ac:71:06:28:0e:93:8f:ac:2b:98:ad:
fe:0c:a2:b3:8f:15:d0:af:a4:2f:82:ab:d2:a4:8d:
a8:13:66:91:ba:c8:50:ab:b1:7a:9a:c6:67:05:89:
c4:c8:a7:82:93:c9:5d:80:87:83:77:c8:20:6f:63:
83:0f:97:b9:1b:a9:e7:20:17:a1:23:b3:79:7b:de:
24:d5:e7:5e:62:cd:7f:04:cb:06:27:0f:a1:bb:e3:
e2:ce:0c:a5:47:b0:c8:e9:cf:6b:74:77:79:1c:f2:
3b:1f:f1:c4:60:57:c4:8e:74:79:25:7f:2a:3d:9a:
a4:cc:7f:54:56:08:f3:d8:52:f9:5d:ca:a5:4d:9b:
a1:52:77:6f:f3:49:00:4b:f1:8c:5e:36:f8:36:03:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1A:13:7B:92:46:E9:7B:10:53:82:FD:43:E9:73:88:27:0B:23:C0
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6hoTe5JG6XsQU4L9Q-lziCcLI8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:23:13:4e:7d:5f:74:4d:ec:5b:bc:7c:94:9f:21:49:f3:63:
b5:77:59:27:bd:72:f2:78:70:e1:4d:86:1e:43:f8:1c:e2:72:
f6:36:e6:cf:11:99:ab:a3:d2:34:c8:b8:33:73:d8:b5:5f:ca:
bb:1b:10:2b:f2:12:f7:05:69:f9:6c:8c:f6:14:ca:a9:b0:0d:
ff:e1:20:7f:8a:f2:5c:55:0b:33:d4:f8:6c:04:6e:d6:04:ad:
88:9b:53:ae:46:33:bf:4f:e6:f6:46:8b:fe:7b:d1:d5:9e:23:
18:69:28:73:43:31:5a:f1:74:9f:56:91:2e:11:83:51:41:bc:
4c:4b:74:c9:cb:9d:e1:48:2b:ee:c8:63:92:f0:db:74:5f:2f:
14:bc:42:06:76:87:c5:83:00:77:d5:ee:8a:64:f5:b6:2a:5b:
2c:ec:e7:82:7f:91:7f:4c:dc:23:f3:de:5a:d8:68:03:72:22:
1b:38:fe:f1:a4:28:b5:b0:ee:4f:4d:cd:28:2e:c9:0d:59:39:
ee:4c:a2:b5:9b:f7:a5:5b:8e:e1:ff:a4:cc:b4:97:55:49:9f:
e3:f7:c1:6f:79:3c:bb:9e:3a:a0:7a:86:00:e7:ae:31:41:04:
ee:14:46:42:6b:3d:8e:bd:86:00:3b:22:39:0e:f3:5c:04:1b:
a2:7d:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 08:26:52 2024 by rpki-client on console-ams.rpki-client.org