Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/IKt7zRJLSBmOCiQ93_Q36M8bGe4.roa
File: IKt7zRJLSBmOCiQ93_Q36M8bGe4.roa (raw, json)
Hash identifier: Sc2fdgdcoJNo0dZYuA9aU2bQ8wJ7hq+AuZ4KbSEymT0=
Subject key identifier: 20:AB:7B:CD:12:4B:48:19:8E:0A:24:3D:DF:F4:37:E8:CF:1B:19:EE
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019350C4B8DE5C39EBF998086C9C913068AB
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/IKt7zRJLSBmOCiQ93_Q36M8bGe4.roa
Signing time: Thu 21 Nov 2024 22:08:09 +0000
ROA not before: Thu 21 Nov 2024 22:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 46.36.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:c4:b8:de:5c:39:eb:f9:98:08:6c:9c:91:30:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Nov 21 22:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20ab7bcd124b48198e0a243ddff437e8cf1b19ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:06:52:05:6f:ba:45:6c:f0:dc:95:22:fd:
0b:fc:1a:bb:14:91:c8:78:cd:6a:ed:f8:6d:7e:4f:
83:65:4c:21:31:c6:7a:e1:c3:91:a2:e4:ac:55:0a:
f4:3b:98:7d:75:30:87:bc:02:f0:c1:fc:4a:dc:94:
36:7b:4e:d3:01:2a:8d:a7:d3:84:e4:4f:a4:d3:cf:
fb:eb:f1:1d:a2:47:2c:9f:7e:8e:62:68:54:c6:5d:
7f:e5:7d:52:57:f0:d6:56:0f:cb:ec:d6:52:af:14:
6b:3b:eb:61:55:7e:cf:fb:7e:d3:8c:25:24:a8:54:
f2:78:b9:15:f7:ad:1b:81:2c:f7:cd:a4:a8:cf:3b:
dd:8f:05:35:0c:ae:7e:c1:dc:ff:ff:0b:85:52:40:
32:d6:b8:be:b5:a5:2b:3d:78:13:a9:2c:ce:bd:1d:
aa:7c:a0:1c:fc:f5:40:0a:d6:25:78:58:9c:df:6f:
5b:53:aa:c3:af:be:5b:21:87:0a:32:09:71:a7:ab:
06:84:1f:ef:68:6f:19:6a:28:df:d7:8c:4a:5b:52:
f0:2d:cb:5a:d9:55:9c:91:76:62:5f:f7:7e:3e:ba:
ae:dc:52:66:36:ea:a1:53:44:9b:31:7b:ec:35:86:
ad:f9:a2:38:a5:4c:47:c4:de:d1:42:cb:f1:0c:ff:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AB:7B:CD:12:4B:48:19:8E:0A:24:3D:DF:F4:37:E8:CF:1B:19:EE
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/IKt7zRJLSBmOCiQ93_Q36M8bGe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0d:1b:9c:a3:9c:2f:16:35:dd:d9:e6:d4:8d:49:dc:b8:c2:
c9:8b:07:9e:e9:53:0e:5b:6d:ac:4b:6b:40:5e:de:fb:a2:5d:
52:d9:04:35:21:88:b5:ce:56:18:1a:c9:bd:9a:74:0a:d3:30:
ea:ac:91:0f:0e:89:14:44:ef:0d:d0:51:f1:9e:d7:ce:49:28:
0a:c0:fb:24:6c:c4:33:37:87:e7:92:99:31:fa:f9:5d:c0:ef:
85:11:64:98:f2:b3:9e:53:3d:12:a1:a7:3b:61:8e:22:ef:90:
16:a1:ff:03:f3:3a:f2:f1:1c:3d:32:f7:92:2c:b0:11:8f:5c:
d2:20:11:71:8c:97:2a:45:7e:ad:e3:6d:9b:86:d3:f6:8b:f2:
b4:df:92:3f:0a:d0:5b:d7:04:0f:fc:ee:e1:1f:da:26:47:99:
f7:11:6b:8a:4e:48:3e:58:18:08:9f:4c:7b:8b:93:c4:fe:11:
ee:00:ae:d2:a7:00:27:ff:d2:8f:ca:45:e1:89:00:f4:5d:c7:
24:ea:87:62:44:b6:6b:77:e0:83:b5:ab:ba:43:59:e3:b2:de:
c3:70:2b:7e:a9:4d:b1:31:ee:57:6f:75:bf:ac:9c:b4:bf:54:
32:e4:78:1a:d7:e2:64:59:b2:d1:69:51:c9:43:23:3c:03:f8:
60:26:f1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:27:07 2024 by rpki-client on console-ams.rpki-client.org