Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/jhtgSAaCkba5Tpmiidr7s3_ZKLs.roa
File: jhtgSAaCkba5Tpmiidr7s3_ZKLs.roa (raw, json)
Hash identifier: PBRdDAQNV1UXp9gPofOtgkKp8wrwHMV0eXuOYaQsCMg=
Subject key identifier: 8E:1B:60:48:06:82:91:B6:B9:4E:99:A2:89:DA:FB:B3:7F:D9:28:BB
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018CC5003E37242BC17C88382320CD39F82B
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/jhtgSAaCkba5Tpmiidr7s3_ZKLs.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201056
IP address blocks: 46.228.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3e:37:24:2b:c1:7c:88:38:23:20:cd:39:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e1b6048068291b6b94e99a289dafbb37fd928bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:72:37:cd:da:5c:37:ac:da:b3:45:f1:e2:
e2:25:9e:dc:02:ec:0c:dc:8e:2a:7f:ee:aa:ae:84:
17:32:e4:16:f8:44:2b:14:c5:08:30:d2:e5:9b:93:
fa:f5:c7:36:ca:06:f9:c4:56:ce:01:4c:0a:8b:60:
37:f6:ed:51:82:da:72:f3:c8:0e:e4:71:62:ca:32:
51:95:04:42:7a:58:ac:69:54:28:75:7e:32:0d:5a:
c1:88:cc:89:05:70:bb:1d:3b:35:b2:05:3a:fa:d9:
96:3e:30:f5:1e:6f:8f:c2:82:bd:d7:d2:c9:63:81:
8a:0b:cc:45:6e:ac:31:87:bb:d9:ea:f9:55:f1:4d:
c3:ba:fb:3d:97:8c:a1:a5:44:cf:e2:06:6e:f4:30:
1c:af:48:50:85:3c:58:0d:ff:98:9c:4a:ec:5c:3b:
4f:70:ab:9c:fe:c2:70:8f:f3:6d:4f:aa:ba:ac:2f:
a8:16:53:f6:06:1a:42:5f:7f:4c:6c:c4:b0:6b:bc:
19:72:89:44:66:6c:ac:4d:a7:52:a7:53:b7:87:34:
20:00:96:97:7a:d8:fb:a0:c1:53:0a:c3:e8:81:98:
ac:14:48:07:ad:b3:36:81:bf:3e:ce:0a:11:32:8d:
9f:ca:3e:cb:bb:cc:18:b1:fa:56:45:63:1b:93:6d:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:60:48:06:82:91:B6:B9:4E:99:A2:89:DA:FB:B3:7F:D9:28:BB
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/jhtgSAaCkba5Tpmiidr7s3_ZKLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fa:0b:1b:b1:86:1a:9d:14:e9:b2:d0:47:06:0b:e8:e7:18:
83:46:f7:10:53:33:e5:0e:63:4b:51:19:59:08:de:ae:6b:da:
81:e5:a9:86:1f:0e:04:8d:1b:cd:0b:95:25:8f:6a:ec:34:fb:
32:b8:f8:b8:a3:25:c8:ae:73:4e:01:54:b5:bd:4a:49:91:bf:
60:59:30:40:c3:7e:47:95:6b:88:7c:c4:ee:23:9b:49:64:9e:
8f:1a:08:60:5c:90:bb:2d:6b:8d:c4:a1:b6:98:2d:7d:5d:24:
00:54:91:bf:b2:a0:a6:33:74:7c:3c:05:26:79:c5:f0:90:64:
14:d2:12:11:47:4f:4e:42:01:c9:37:d6:36:f9:24:62:90:d8:
d1:8b:6a:4f:42:2d:30:e1:cc:78:6e:84:8b:ed:e9:d5:34:a6:
e5:f6:b1:6d:22:7f:cd:f0:9d:c0:f2:ae:07:e5:24:7d:ea:d9:
d0:f8:55:3f:12:37:b4:37:48:9e:90:44:e0:7b:9b:9d:45:4c:
e7:d1:7c:65:2a:93:94:e8:8c:83:7a:56:6a:18:d7:46:59:87:
33:4b:ad:94:3b:75:2c:10:93:1e:be:e5:a5:28:1b:81:95:c1:
09:17:2e:9a:a0:7a:82:b9:76:0a:2f:de:72:99:aa:eb:aa:8f:
4f:85:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:21:43 2024 by rpki-client on console-ams.rpki-client.org