Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xJMNg_ghbm0uwlB3afXA-DsXA4Y.roa
File: xJMNg_ghbm0uwlB3afXA-DsXA4Y.roa (raw, json)
Hash identifier: GgDbZksz67oIoeXgV6WBy6jiW8kUJP5hAo5NBlPDwvE=
Subject key identifier: C4:93:0D:83:F8:21:6E:6D:2E:C2:50:77:69:F5:C0:F8:3B:17:03:86
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE197E33B1239B71DFA5B77F5BFCD
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xJMNg_ghbm0uwlB3afXA-DsXA4Y.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25185
IP address blocks: 46.47.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e1:97:e3:3b:12:39:b7:1d:fa:5b:77:f5:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4930d83f8216e6d2ec2507769f5c0f83b170386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:57:bd:75:cc:55:29:eb:47:b1:66:62:b5:
08:2d:67:3f:67:bc:1e:b6:15:fc:95:6b:74:33:af:
30:5c:f1:65:36:a4:b2:6e:68:f4:b4:c2:0a:74:9f:
79:22:d4:bb:c3:8d:4e:d5:b5:78:c9:77:12:6d:c2:
fb:a4:02:b3:87:85:3a:09:a8:b4:eb:f7:67:92:fa:
3c:ec:10:81:38:fa:72:9a:eb:8d:85:b6:aa:1b:fd:
67:0d:f7:1b:31:11:67:3c:bf:68:83:f2:4b:a6:fe:
9d:cd:24:9e:c9:3e:5b:9d:07:4e:33:9a:18:d4:9f:
5a:d8:7a:9b:36:cc:7b:81:4b:a4:7c:da:7c:b9:fe:
08:02:e1:86:51:06:95:11:82:ad:d5:15:8f:88:42:
2f:b4:4c:2a:62:46:31:cd:66:1a:7f:03:9e:7f:1f:
b3:92:bd:7f:79:7d:fe:ab:4d:0b:3e:62:d6:4c:59:
10:5a:27:76:eb:fe:31:b7:e5:b3:a4:a4:f4:dc:52:
45:c2:e7:7a:35:4a:b8:84:53:d7:23:ea:7b:7c:a3:
f1:9d:b6:6f:dc:75:5b:91:79:f0:6f:d9:81:e8:f8:
e6:86:84:c4:b3:d4:a4:79:16:97:c2:e7:89:da:1e:
bd:35:58:d3:01:55:07:8e:f7:98:70:67:9e:5d:57:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:0D:83:F8:21:6E:6D:2E:C2:50:77:69:F5:C0:F8:3B:17:03:86
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xJMNg_ghbm0uwlB3afXA-DsXA4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.245.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3d:e3:58:8f:50:d8:13:5a:22:64:61:32:d6:54:e6:26:d5:
4f:5f:6a:e1:55:05:00:b8:78:03:ba:4e:e6:08:42:73:cb:76:
e8:34:ba:4c:95:d3:df:9c:b1:ec:e2:fe:91:19:c3:a6:72:5d:
82:60:8a:bd:03:6c:bf:4d:b3:88:eb:0f:a0:b0:cd:82:46:9b:
46:2f:84:33:09:29:80:96:f0:59:39:8e:ce:d3:39:26:39:54:
35:49:64:52:89:ac:95:e7:ff:77:e9:ae:e6:cf:40:53:f2:4b:
41:c6:5e:4e:82:fc:b4:11:2f:e8:9e:af:7f:09:9d:b3:37:e8:
8c:75:9a:f3:06:fc:1a:1a:41:10:db:d1:f2:b6:7f:ad:a1:8e:
5c:ae:34:e0:72:a4:39:96:a0:af:bf:55:4e:ae:ee:73:e5:6c:
2e:19:39:eb:4c:fe:7a:cd:a1:16:cf:e2:7e:72:ed:37:7f:58:
c9:f5:e2:ac:4e:52:8c:c0:a0:d3:01:d1:f5:b5:79:56:ba:14:
31:3a:7b:ff:52:e0:45:52:09:53:ad:28:5a:ee:66:1f:11:9b:
9d:e1:19:03:5b:05:8b:97:92:0d:08:08:f5:6d:25:7d:16:50:
2f:7e:3b:bd:7f:18:28:5e:eb:78:8c:af:59:94:80:94:10:25:
6e:16:e6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:36:08 2024 by rpki-client on console-ams.rpki-client.org