Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/fxcNRcgwwy6hibJqEGYzd55bGQo.roa
File: fxcNRcgwwy6hibJqEGYzd55bGQo.roa (raw, json)
Hash identifier: j7h9e27wznQkcVA4uWAjIpW5d7JtP7PmuBxI4JiZg3Y=
Subject key identifier: 7F:17:0D:45:C8:30:C3:2E:A1:89:B2:6A:10:66:33:77:9E:5B:19:0A
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 018E42CA6871F06611CF4AFF58CD14E31DF2
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/fxcNRcgwwy6hibJqEGYzd55bGQo.roa
Signing time: Fri 15 Mar 2024 15:45:44 +0000
ROA not before: Fri 15 Mar 2024 15:45:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 146.19.50.0/24 maxlen: 24
146.19.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:ca:68:71:f0:66:11:cf:4a:ff:58:cd:14:e3:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Mar 15 15:45:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f170d45c830c32ea189b26a106633779e5b190a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:0f:2c:91:4d:d6:b7:4c:6e:2f:fe:6e:47:
c6:6b:6a:19:29:70:de:12:a9:2d:b4:ca:0f:67:8d:
98:da:ba:b8:ad:07:51:4f:77:3c:b7:16:e1:69:d6:
ff:ef:1c:71:7f:31:02:d7:c3:9b:56:28:ee:65:07:
97:f0:75:74:63:cd:e2:2c:40:f8:29:60:ac:e9:0e:
23:b1:d5:23:f2:e8:d6:ea:53:e5:77:a9:1e:ae:08:
88:53:93:0c:76:e5:6a:cd:43:85:16:fe:9d:54:18:
54:d3:dd:30:78:1c:b8:c9:7d:19:b3:ca:5e:da:8d:
5d:b4:3d:9d:e9:86:29:cc:a7:3f:dc:2e:0b:60:da:
eb:b4:3d:0f:0e:cf:dd:36:22:eb:27:9d:a7:55:a5:
f0:b3:d0:c9:a3:b4:bb:0c:7a:4d:99:b5:0e:88:6f:
08:14:ad:d0:e0:bf:23:6f:a7:4d:7f:da:3a:b9:92:
d5:77:ee:91:a3:30:32:33:2f:9a:30:22:d3:b4:04:
c3:66:f4:6d:3e:97:dc:2f:da:c6:5c:85:ff:29:1c:
a2:8d:eb:c4:de:bf:2d:10:76:10:04:c0:47:24:8c:
ae:9b:3a:df:19:7a:c7:a8:15:46:57:b3:7e:19:86:
28:b2:cf:af:96:f5:57:e9:f6:da:99:26:50:b1:18:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:0D:45:C8:30:C3:2E:A1:89:B2:6A:10:66:33:77:9E:5B:19:0A
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/fxcNRcgwwy6hibJqEGYzd55bGQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
146.19.142.0/24
Signature Algorithm: sha256WithRSAEncryption
29:87:b3:9e:67:64:95:ad:f5:12:02:af:ab:6c:64:35:3f:97:
a2:15:79:75:f9:89:32:9a:48:11:f2:ed:69:90:29:b5:13:c7:
7b:f3:b2:cb:56:75:17:60:ca:14:8b:c8:99:c6:33:a3:95:01:
c4:59:b6:b3:74:dd:fc:d8:e4:f0:a3:53:ff:e7:5a:5c:a9:7a:
33:4f:94:3c:fe:5c:99:bf:9a:21:a0:0f:02:e2:98:ca:17:85:
d4:48:04:b2:a1:cd:b0:40:08:92:6b:87:07:fd:84:f7:79:ea:
38:44:a5:d5:8b:01:97:54:ab:6f:2b:4e:1b:1c:9e:29:8c:24:
07:25:18:92:75:3e:f5:6d:ff:d4:39:dd:1f:1f:82:a2:55:fd:
0f:a7:f0:0c:d5:42:e4:23:58:1d:98:f5:11:7a:d5:4f:9c:13:
a0:31:7c:80:86:87:8a:b5:31:f9:6a:67:a2:c8:9a:55:45:20:
a0:ab:44:ba:c6:44:73:29:d9:8d:a1:b3:6a:13:bc:5e:53:b3:
00:2e:0b:f7:e5:2c:31:4b:d7:23:a1:d1:bf:7e:d3:c5:fe:b9:
45:15:1f:b7:56:80:02:da:af:c1:b6:e4:6c:f5:40:1a:45:0d:
3b:2c:96:47:60:0e:ba:38:7f:14:8d:a7:39:cd:ef:e6:fd:07:
31:9d:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:17:27 2024 by rpki-client on console-ams.rpki-client.org