Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/ojt2-u4z44dI8gmdC4ZmZo9wcbg.roa
File: ojt2-u4z44dI8gmdC4ZmZo9wcbg.roa (raw, json)
Hash identifier: rttf/gG6jq+BQ7yje3+wLK7qnlkm31j4uAg2xvr0ai0=
Subject key identifier: A2:3B:76:FA:EE:33:E3:87:48:F2:09:9D:0B:86:66:66:8F:70:71:B8
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018D07A268E5F82C61E67C1D7759A1CB1435
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/ojt2-u4z44dI8gmdC4ZmZo9wcbg.roa
Signing time: Sun 14 Jan 2024 11:01:40 +0000
ROA not before: Sun 14 Jan 2024 11:01:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:a2:68:e5:f8:2c:61:e6:7c:1d:77:59:a1:cb:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 14 11:01:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a23b76faee33e38748f2099d0b8666668f7071b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:c0:ef:21:63:a1:fa:97:e3:f9:d8:ff:0b:
10:d6:ce:b4:53:fe:63:13:c7:a2:73:0c:8a:3b:48:
65:3c:73:13:ec:25:a6:c4:2e:d4:49:03:a6:90:c2:
ee:8c:87:7e:e3:ff:f6:c5:55:4b:f2:7f:99:8b:37:
38:d9:6e:c5:6b:ef:12:22:f4:82:f0:cb:1a:aa:e0:
73:4f:97:b4:93:63:54:f3:7b:82:b4:5c:42:fa:d1:
fc:3b:fc:07:e3:d5:64:c8:44:da:13:55:a3:1b:03:
84:0a:20:69:a1:e0:e6:c5:53:01:a5:69:50:0d:95:
b4:14:cc:72:bf:fc:9b:26:5e:5a:9b:3a:22:7a:a1:
77:7b:33:97:32:61:84:fa:c9:47:31:fa:98:9d:a7:
08:fe:14:76:cd:67:25:2e:87:57:a0:46:24:2c:87:
3f:69:70:3e:48:13:a8:bd:ee:de:a1:98:27:31:19:
64:ba:47:f7:37:47:d3:7b:52:fb:f4:33:ee:6f:e3:
90:f6:15:e1:68:e1:43:65:5c:82:ff:10:e1:c1:da:
c3:6c:99:e0:cc:a7:f6:cf:48:16:a8:31:56:fc:80:
f8:1f:b6:3f:e4:8d:52:3b:34:35:c6:b6:af:77:3b:
10:e7:b1:88:ea:68:ce:ec:5a:88:4f:24:5b:4f:a8:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:76:FA:EE:33:E3:87:48:F2:09:9D:0B:86:66:66:8F:70:71:B8
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/ojt2-u4z44dI8gmdC4ZmZo9wcbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/24
46.243.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d7:34:ed:be:23:03:51:97:98:62:cd:4c:03:13:6a:99:91:
28:06:2a:55:41:51:2d:64:77:ff:b9:2d:de:cf:a0:29:5e:4a:
b4:a0:50:c6:80:a1:cf:fa:7f:12:a8:ec:7d:dd:0a:f3:ea:fc:
87:bd:05:68:79:47:fd:3e:39:09:d3:03:cc:cc:84:11:d3:44:
64:41:c2:b5:44:4f:53:fd:8f:e7:d0:20:51:2b:80:82:57:b4:
80:85:e8:d5:e4:92:40:20:24:83:ef:72:9e:e9:44:ef:a9:2e:
90:d0:cd:1f:6e:cc:de:b5:1c:71:f8:e0:fa:52:04:d3:a8:5c:
f8:e1:25:3d:d1:49:27:76:15:72:cf:87:38:0e:86:b6:9b:ec:
1d:e7:a2:28:1d:e3:02:84:06:21:2f:11:d9:8a:ac:95:85:22:
d4:63:cb:b8:fc:c9:8c:65:c6:9d:bf:04:75:bd:18:d5:ed:ec:
5f:c7:93:fd:0a:ea:19:23:d3:04:a5:f0:7c:e6:a1:01:ad:55:
1b:58:4b:ef:06:17:59:c3:be:5d:dd:da:52:35:c6:3d:88:6f:
ec:ad:7a:a6:9d:43:72:2b:e0:72:0d:9a:35:85:ee:7d:4e:e5:
71:02:f3:7d:ef:16:cc:33:9c:8a:f2:e1:30:c6:79:c8:94:5e:
b1:46:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:57:43 2024 by rpki-client on console-ams.rpki-client.org