Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/TdpY5eTyaPIFCk0tzu-NsNSBy-0.roa
File: TdpY5eTyaPIFCk0tzu-NsNSBy-0.roa (raw, json)
Hash identifier: v0pj11yYB9E0aNT3VmgqpIrcc143yTmmsaBYpPk/8wU=
Subject key identifier: 4D:DA:58:E5:E4:F2:68:F2:05:0A:4D:2D:CE:EF:8D:B0:D4:81:CB:ED
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 018CC64B81D08C10DE60DD6F3B3575CED975
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/TdpY5eTyaPIFCk0tzu-NsNSBy-0.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:81:d0:8c:10:de:60:dd:6f:3b:35:75:ce:d9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dda58e5e4f268f2050a4d2dceef8db0d481cbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:9a:c5:08:cb:7f:36:8e:70:f6:24:e0:e4:
1a:bf:90:ed:d2:4e:b2:23:85:ec:e0:eb:3f:ca:76:
84:ab:ec:3a:2c:ec:05:b5:4a:50:c3:72:67:4f:dc:
91:15:6f:7c:32:05:08:db:63:34:8a:08:d0:4b:14:
b1:d7:67:0a:8f:a7:4a:bd:7e:cc:7f:b6:2a:58:cc:
9c:4e:71:82:5b:48:94:b7:7a:70:63:f9:cd:45:b5:
07:6a:09:6f:1c:4e:c1:e0:86:a6:21:fb:12:bc:de:
d8:90:c2:a2:36:22:28:a5:e3:5a:c7:3e:c9:b5:8a:
0f:9d:ac:34:27:26:3f:77:b6:bb:5a:6a:62:00:e6:
fa:42:94:00:b7:67:a2:0f:06:9c:75:53:7b:4a:64:
06:00:c9:1e:d1:3a:72:e3:91:57:9c:6f:6c:58:d5:
3d:32:f6:24:67:78:84:81:7e:24:6e:2a:73:6a:dd:
37:c9:46:5b:0d:19:97:9c:20:08:af:ea:97:ef:0e:
54:2a:27:15:ba:81:23:9f:94:5d:f5:a4:1b:95:f2:
0f:00:9a:42:49:2e:27:04:55:9b:1c:77:87:c6:fd:
61:5a:6e:01:08:e6:bd:53:0c:71:a1:ee:32:b3:f8:
76:2a:0c:d2:04:74:dd:f5:70:c8:1b:1f:95:c4:24:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:58:E5:E4:F2:68:F2:05:0A:4D:2D:CE:EF:8D:B0:D4:81:CB:ED
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/TdpY5eTyaPIFCk0tzu-NsNSBy-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:78:2c:86:95:35:d1:f3:c8:92:49:f1:2e:73:73:1f:bb:cf:
6b:3c:73:c1:ac:70:f4:ba:02:dd:ca:d4:cd:8e:9e:e5:56:e0:
05:03:1c:5b:7a:a1:80:5a:dc:bc:36:b8:93:85:fa:cb:2f:29:
db:a4:5a:fd:31:b6:d3:c2:6c:b5:82:cb:c2:48:d4:4f:33:e8:
4c:99:fa:cf:98:a7:73:1e:88:1d:27:bb:e3:45:b5:9c:1d:13:
64:ac:12:a4:4c:63:a2:81:fa:9c:41:4f:c3:77:ba:61:1c:ca:
de:bc:57:43:2f:9e:d9:bc:e3:5d:d5:1b:cd:cf:2a:3a:9c:9b:
9e:ae:a3:ec:ea:fd:04:e0:66:34:b1:d7:a8:c3:53:6e:de:96:
15:d7:71:00:ec:2e:f1:17:c8:e8:46:74:7b:04:50:27:a2:8f:
44:6e:2a:db:ef:51:66:55:b4:df:70:66:09:58:89:49:b2:21:
51:fe:4c:ba:63:cf:52:56:f5:d6:b0:ad:18:05:74:56:33:3e:
85:ca:7c:93:a4:52:ed:6d:9d:71:2d:20:1a:e5:90:97:6c:63:
40:12:b2:97:12:89:3e:56:86:db:01:49:4e:a9:0c:63:4b:96:
ec:26:35:ee:48:d4:f9:f2:ab:66:4b:91:2d:29:dd:7d:84:52:
e0:ad:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:47:33 2024 by rpki-client on console-fra.rpki-client.org