Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/h6atnjjuo2ROWN12aVWtA0wl0Ps.roa
File: h6atnjjuo2ROWN12aVWtA0wl0Ps.roa (raw, json)
Hash identifier: l4suVKsgLxNSaHOId5SPjZ2/dimykZwUmt/Qlm1wpP4=
Subject key identifier: 87:A6:AD:9E:38:EE:A3:64:4E:58:DD:76:69:55:AD:03:4C:25:D0:FB
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 018CC8DEC15CDD14889B46854712857E9005
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/h6atnjjuo2ROWN12aVWtA0wl0Ps.roa
Signing time: Tue 02 Jan 2024 06:31:30 +0000
ROA not before: Tue 02 Jan 2024 06:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197907
IP address blocks: 46.254.144.0/21 maxlen: 21
185.73.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:c1:5c:dd:14:88:9b:46:85:47:12:85:7e:90:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Jan 2 06:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87a6ad9e38eea3644e58dd766955ad034c25d0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:14:a1:6a:50:1c:cd:66:e3:78:8e:a1:46:
98:fe:11:37:6e:7f:0d:13:0f:ab:9f:1e:de:74:c3:
e5:90:ae:67:b0:64:36:a0:30:8c:a8:d1:5d:6f:9d:
de:ec:09:ec:1f:98:a6:78:6f:fe:50:1e:6d:51:bc:
20:7b:24:76:59:70:4f:17:35:82:76:ee:b4:7d:2a:
b9:52:86:51:c1:36:78:9a:e6:ed:30:ee:d6:81:b4:
15:3f:ea:be:24:b8:26:56:12:54:0c:d9:9b:c9:4b:
ba:a4:f0:da:b3:19:be:29:09:a9:f5:68:0d:f8:71:
59:7c:8c:ab:d6:82:28:50:ac:da:06:3d:85:84:a2:
71:41:09:34:d3:48:42:79:67:70:68:79:66:d8:55:
4f:6e:5e:06:9b:87:54:bf:74:46:bd:48:56:6d:34:
34:ae:6a:c7:05:56:be:be:e3:5e:7e:c8:65:3f:b6:
cf:89:11:f8:52:e2:97:d5:fb:ea:6a:e7:3a:ab:ac:
d9:4d:c1:f3:52:58:b6:67:92:1c:ab:29:ad:5c:f5:
a1:f1:fe:85:3b:e3:5b:26:20:0f:a4:d0:a5:92:88:
ef:01:b7:d0:c5:7b:f1:71:21:cf:b9:9a:a3:96:6d:
9e:a0:b1:2a:45:b5:59:97:55:21:33:3d:c6:d4:8d:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A6:AD:9E:38:EE:A3:64:4E:58:DD:76:69:55:AD:03:4C:25:D0:FB
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/h6atnjjuo2ROWN12aVWtA0wl0Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.144.0/21
185.73.4.0/22
Signature Algorithm: sha256WithRSAEncryption
89:27:d3:34:c2:0b:ad:8d:be:0b:8e:6b:f9:c1:8b:2c:d6:96:
6e:46:06:7d:2f:03:4f:20:41:7a:33:58:0c:a5:b7:c5:94:8b:
9a:b0:d1:e6:5d:f1:3b:b0:bc:8d:93:32:54:33:bb:69:8f:96:
29:2e:5b:dd:27:6d:75:30:2b:1c:20:b8:7e:5c:0c:d5:e0:c7:
4a:7d:97:3f:43:87:7d:40:80:9f:13:a5:1b:93:ee:2c:ba:a1:
74:ce:ee:cc:28:bb:42:f8:19:44:6d:7c:89:f9:6f:a5:ee:45:
0f:bd:c4:96:ba:e2:ab:5e:01:8c:44:dc:fe:c6:aa:60:7b:82:
1a:f3:f0:da:e1:9d:ad:dd:24:28:f7:b8:36:4f:ec:8e:33:d5:
94:b4:84:90:e6:0d:5c:ed:ca:c1:dd:ce:bb:42:2e:bf:aa:98:
62:ec:e4:17:5a:1a:c3:87:8f:98:5a:30:3c:cb:72:53:6f:67:
09:0b:3d:88:aa:08:3c:a7:85:ec:2e:17:a8:cf:59:c4:38:8b:
a2:b4:12:1c:71:29:b3:a9:e5:7a:ac:5d:64:3c:a2:f8:80:56:
43:3e:1b:84:1a:27:4b:59:b2:fc:b2:43:4b:49:28:c5:3b:df:
00:67:fe:76:74:5a:44:e6:ae:1f:94:c1:58:ef:00:3d:8e:67:
d0:e8:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 10:37:55 2024 by rpki-client on console-fra.rpki-client.org