Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/hFyGtH7qYxRaCrSMYokNmp1YevA.roa
File: hFyGtH7qYxRaCrSMYokNmp1YevA.roa (raw, json)
Hash identifier: Ba2DOsPIXyjwuWDE3EdTe9G/WoUwcT4NaK3C0fWsvRo=
Subject key identifier: 84:5C:86:B4:7E:EA:63:14:5A:0A:B4:8C:62:89:0D:9A:9D:58:7A:F0
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 018FA707E1C7CB54E7F35F343A75EAF7E160
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/hFyGtH7qYxRaCrSMYokNmp1YevA.roa
Signing time: Thu 23 May 2024 19:57:42 +0000
ROA not before: Thu 23 May 2024 19:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44299
IP address blocks: 46.232.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a7:07:e1:c7:cb:54:e7:f3:5f:34:3a:75:ea:f7:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: May 23 19:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=845c86b47eea63145a0ab48c62890d9a9d587af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:fb:f8:75:2c:99:e6:3f:4d:ff:6b:93:d1:
5d:a6:4a:e7:f4:91:d6:ab:df:bd:e4:5b:2c:c2:22:
18:62:7f:f6:c8:d9:ee:9e:e9:c5:ae:59:4a:12:37:
fd:5f:54:92:6d:43:f3:29:ec:24:9c:26:e3:21:55:
ae:62:36:40:dc:20:26:c3:4b:6d:10:2b:b6:d0:12:
4f:28:33:30:9c:e5:61:33:59:3a:fd:65:df:ee:ce:
89:29:82:89:6e:66:ed:67:d8:7d:32:6d:c6:c4:fb:
a0:72:e9:97:b0:76:64:21:41:0c:0c:0d:7b:3e:88:
fc:7c:1c:94:98:12:c1:9a:92:54:31:7d:49:ca:4a:
e6:23:62:a3:fe:49:b4:0c:8e:c3:ac:d3:c6:6f:f2:
9f:2b:73:37:28:52:78:6f:56:c1:c0:42:45:f7:0a:
1a:88:41:2f:b0:14:57:00:d2:06:5b:2c:0e:04:8f:
01:37:53:ef:f5:64:2f:33:04:19:dd:a0:14:52:f2:
f3:a0:d8:6b:ca:0f:ce:cf:bc:90:1e:f5:8d:bc:29:
0a:59:59:89:e4:47:0b:c1:94:63:1b:51:46:ee:eb:
00:56:22:46:0b:3d:db:bc:30:51:47:14:2e:87:5d:
a2:1a:c8:1d:e2:34:93:f2:92:fb:5d:89:f9:90:da:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:86:B4:7E:EA:63:14:5A:0A:B4:8C:62:89:0D:9A:9D:58:7A:F0
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/hFyGtH7qYxRaCrSMYokNmp1YevA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.252.0/22
Signature Algorithm: sha256WithRSAEncryption
38:8d:80:b1:57:ff:4a:4f:56:4a:cd:c5:87:92:38:cf:d1:7f:
d6:9e:d1:db:0a:06:37:57:cc:09:0a:57:b8:35:6a:b8:67:e8:
7b:68:c1:b5:de:96:2e:e7:08:42:63:43:b4:35:3e:13:1a:b2:
1e:db:2d:25:c6:5c:76:f2:dd:1d:9d:41:c4:7c:91:93:dd:dd:
3c:70:f1:28:bd:bc:fa:85:02:16:89:76:6c:4c:7b:e7:19:14:
d6:5a:5e:42:bf:70:78:0f:97:62:37:82:46:72:3d:7a:1c:bd:
2f:2e:21:e5:a5:ad:66:c4:98:c5:d3:64:51:f0:2c:3c:ec:2d:
98:2d:89:70:93:cf:4f:a1:83:b1:65:99:25:24:99:be:69:e6:
a5:37:b1:16:2d:89:54:b4:07:5b:a9:8b:54:b5:a2:19:74:37:
8b:97:03:6b:a1:99:08:4f:9d:16:9c:46:99:1c:4b:50:80:75:
a0:ef:61:fc:7f:58:79:fb:08:b2:02:bc:4e:23:11:5a:33:c1:
e8:3f:83:a2:a8:1d:88:45:40:01:8b:c8:c1:3a:3c:67:62:c2:
52:0b:6a:cd:4e:b3:89:6c:59:a0:21:31:99:54:3b:42:6c:4b:
83:e8:b3:a9:b3:07:84:a1:63:b0:e7:8b:15:bf:c0:f3:cf:15:
42:a1:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:43 2024 by rpki-client on console-ams.rpki-client.org