Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/2iKMaej0Qwb156Ese8QeWKw_kfY.roa
File: 2iKMaej0Qwb156Ese8QeWKw_kfY.roa (raw, json)
Hash identifier: GXUH8cLs0jU0uSo35N8w5xGqjhs9j5lcYaSu9e87T0E=
Subject key identifier: DA:22:8C:69:E8:F4:43:06:F5:E7:A1:2C:7B:C4:1E:58:AC:3F:91:F6
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 018CC7956C024E124BC3B2B5F6B8ACA4BE68
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/2iKMaej0Qwb156Ese8QeWKw_kfY.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 85.159.228.0/24 maxlen: 24
46.29.238.0/24 maxlen: 24
46.29.234.0/24 maxlen: 24
46.29.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 20:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6c:02:4e:12:4b:c3:b2:b5:f6:b8:ac:a4:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da228c69e8f44306f5e7a12c7bc41e58ac3f91f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:c7:6a:41:4b:24:28:90:36:dd:53:0a:5b:
4d:6f:75:f9:10:cb:87:0e:76:59:bd:19:bc:af:1a:
ee:37:7e:7c:f9:06:58:3b:c7:0d:f9:19:31:cd:97:
e2:58:d8:08:dc:c0:9e:07:f5:88:16:71:a8:01:a9:
21:f0:85:ac:4a:31:a9:7f:a3:fd:84:33:3a:7e:b7:
69:46:4e:95:ff:0b:3a:11:14:2a:b0:4a:ad:ff:11:
4b:ea:22:64:87:98:51:56:c5:5c:07:2c:41:32:a8:
af:cb:83:44:4d:af:d5:6f:cb:31:d0:b9:52:5d:67:
68:21:6d:0d:0b:ce:52:61:b0:2e:c1:c6:a7:67:aa:
57:79:20:22:29:59:80:e9:52:5e:cb:bc:77:94:85:
44:66:dc:f8:ef:99:45:89:10:5d:72:1a:0c:c6:18:
b7:8b:9c:b4:77:59:68:99:79:88:a8:49:3f:72:70:
fa:0a:59:f6:d0:4f:a5:a7:18:6c:d7:9c:43:dd:95:
d8:02:d4:68:a7:c4:52:cc:1e:94:a4:8b:65:58:96:
78:18:19:b6:14:52:68:4c:2f:16:b5:a6:7c:d4:e4:
7f:23:a8:07:2a:55:7b:a8:92:d4:6e:c0:ec:fe:08:
73:43:27:f4:11:b4:13:0e:0e:b8:35:25:5f:db:49:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:8C:69:E8:F4:43:06:F5:E7:A1:2C:7B:C4:1E:58:AC:3F:91:F6
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/2iKMaej0Qwb156Ese8QeWKw_kfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.234.0/23
46.29.238.0/24
85.159.228.0/24
Signature Algorithm: sha256WithRSAEncryption
97:58:44:c5:04:4b:bf:85:a3:4b:a2:ea:78:3a:e4:b2:74:c7:
fe:3d:4a:f9:1e:e3:2d:3f:de:b1:a2:8c:bf:a7:61:76:64:e6:
f8:23:fc:3e:8b:23:bb:38:e9:ee:44:73:2c:0e:df:aa:d8:84:
27:1e:0e:3b:df:ed:de:e3:67:6a:67:12:22:5a:39:66:ab:d6:
d3:81:9c:79:65:bc:0b:c3:8a:9d:72:8c:94:81:71:01:71:34:
45:4a:70:a8:b0:bd:04:1b:5d:b8:b5:42:c0:c8:4b:b2:38:3e:
45:c8:ab:4c:4d:7b:c8:d5:7e:52:da:1f:4a:fc:f8:da:b3:3f:
d3:c3:20:d8:71:59:6d:70:0b:97:ec:ba:47:6b:70:37:a3:5b:
a0:e0:b8:53:6d:de:12:39:ea:35:d3:a6:f3:83:5a:7e:8b:4b:
5e:3d:5c:8f:ed:63:3c:df:fc:30:bd:09:73:45:ec:38:b3:a2:
8e:ff:92:d7:3c:78:4d:db:19:5c:2e:c1:32:04:c4:2c:06:8e:
d7:4b:f3:67:5f:04:04:e1:c0:71:b6:7e:1a:bf:e0:8e:33:f4:
55:09:56:80:40:b7:94:21:0a:5b:fc:6a:cb:e6:93:b0:82:54:
05:b1:b5:d3:9c:e3:92:12:d0:a6:e1:4c:1d:60:bc:99:e5:31:
f0:91:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 00:21:49 2024 by rpki-client on console-ams.rpki-client.org