Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/KaxkQ23p-pbkuBRi5EnshXZRrNI.roa
File: KaxkQ23p-pbkuBRi5EnshXZRrNI.roa (raw, json)
Hash identifier: BcEDFMN0IotM9IPrEzWWc1m6LOlYGRtpfCnTyUCwLrE=
Subject key identifier: 29:AC:64:43:6D:E9:FA:96:E4:B8:14:62:E4:49:EC:85:76:51:AC:D2
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018E91A79D83963921B1C9488273EA416B4D
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/KaxkQ23p-pbkuBRi5EnshXZRrNI.roa
Signing time: Sat 30 Mar 2024 23:17:44 +0000
ROA not before: Sat 30 Mar 2024 23:17:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197305
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.17.0/24 maxlen: 24
46.243.18.0/24 maxlen: 24
46.243.19.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
46.243.21.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
46.243.23.0/24 maxlen: 24
2a03:6dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:91:a7:9d:83:96:39:21:b1:c9:48:82:73:ea:41:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Mar 30 23:17:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29ac64436de9fa96e4b81462e449ec857651acd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:86:50:3f:bd:6d:33:b2:a5:9a:58:96:8b:
39:60:0b:8f:9e:b3:d5:0d:ed:f3:c5:12:b3:a0:ba:
48:3a:7a:2d:92:3d:b5:1c:78:55:bb:1a:5d:99:05:
03:7e:75:a0:3c:36:28:f3:26:ce:61:3a:05:e7:f2:
b9:12:16:d7:33:23:0f:4e:e5:d6:5c:e6:cd:2c:9f:
1f:43:8a:d6:41:1b:74:b4:3e:7e:c6:2f:cb:ef:14:
e5:4c:c9:ac:03:36:5c:e7:54:40:2a:c8:3a:40:bc:
0b:a9:f2:cc:3c:e4:39:eb:89:05:af:88:94:f0:ec:
5f:de:b5:fc:a5:de:7e:03:1d:24:db:76:5f:7d:c6:
4f:48:96:8e:ca:dc:37:5f:5b:20:5c:8f:32:dc:57:
5e:19:42:66:87:6f:93:c2:49:7c:9c:cb:27:1f:ba:
d8:31:55:71:92:0e:5d:17:f2:4c:81:65:18:29:79:
4c:60:cd:88:e2:45:cb:f4:39:81:84:a9:e9:f9:72:
b9:40:24:29:c9:f1:60:ad:8d:db:bf:65:82:94:ea:
4a:fa:22:f0:ed:57:8a:da:c2:e4:60:81:8f:57:d7:
fc:35:23:8c:c8:bd:7e:6a:a2:cb:55:42:df:8a:34:
59:3a:63:aa:d5:64:e0:35:bb:d4:9a:0c:2c:2d:ce:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AC:64:43:6D:E9:FA:96:E4:B8:14:62:E4:49:EC:85:76:51:AC:D2
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/KaxkQ23p-pbkuBRi5EnshXZRrNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/21
IPv6:
2a03:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:b7:8f:bc:fb:4a:4d:e8:5a:df:d7:5e:d5:94:3e:0a:81:20:
0f:7d:39:46:7e:5e:5d:61:2c:db:d2:78:c1:24:0c:13:1e:77:
27:1a:76:35:20:d9:45:55:19:76:1c:f1:f8:5b:eb:35:29:e1:
40:a5:e1:f7:ad:c0:c5:1f:e8:10:05:3f:c9:2a:38:21:25:5f:
4a:3a:25:25:7d:2c:54:38:f2:2b:49:3d:f9:bf:b0:36:37:54:
e7:41:26:e1:fd:74:3b:1f:b7:56:43:49:2e:6c:e1:e0:cc:2d:
08:70:a1:23:3c:86:ed:70:df:be:ed:c4:bb:84:59:ec:03:05:
fb:2b:91:83:5f:02:4f:e9:50:d2:d0:f9:9a:15:41:bc:a0:61:
d9:fc:2b:5f:18:e2:86:e8:4e:f1:72:65:e1:d7:65:d9:dd:66:
db:71:16:90:4b:8b:d9:63:67:03:aa:a7:4b:15:99:0e:c3:d5:
91:2b:55:97:cf:f2:aa:92:53:ac:05:32:65:e1:00:2e:50:a6:
88:d7:26:ec:ed:54:cc:bb:ee:a2:58:94:3b:0a:c7:1f:3f:98:
88:dc:f9:81:d4:67:ff:de:d1:85:95:a7:fa:1a:73:bf:03:ec:
c4:2e:ee:c6:70:27:56:e6:c5:1e:41:9b:bf:4d:cc:cd:55:1d:
50:ae:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:41:46 2024 by rpki-client on console-ams.rpki-client.org