Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/rDnNrQnwTrfOrZMmIHwUWK-HI2U.roa
File: rDnNrQnwTrfOrZMmIHwUWK-HI2U.roa (raw, json)
Hash identifier: 4QfgVrGeNNYFMkZVI/yQb9umz2qeeG8HOzADltA5VBk=
Subject key identifier: AC:39:CD:AD:09:F0:4E:B7:CE:AD:93:26:20:7C:14:58:AF:87:23:65
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 018CC87098F20F9F6FFAC886CE0C52AAD0CF
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/rDnNrQnwTrfOrZMmIHwUWK-HI2U.roa
Signing time: Tue 02 Jan 2024 04:31:11 +0000
ROA not before: Tue 02 Jan 2024 04:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49909
IP address blocks: 46.20.128.0/20 maxlen: 24
178.21.120.0/21 maxlen: 24
2a00:1d10::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:98:f2:0f:9f:6f:fa:c8:86:ce:0c:52:aa:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Jan 2 04:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac39cdad09f04eb7cead9326207c1458af872365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:52:06:73:0f:fd:71:78:53:63:75:11:59:60:
56:19:8e:76:dd:20:ae:7d:45:cf:ae:db:a5:36:7c:
6c:f1:df:d1:d1:0c:25:35:2d:34:44:80:0a:79:a1:
bb:73:fc:8d:c6:9d:e2:db:e9:d5:42:4b:b7:5a:ae:
4c:71:d4:d4:bc:9a:fd:76:92:43:98:42:7a:df:14:
f9:ef:96:50:69:cc:b9:b8:93:40:62:95:3a:84:1d:
13:9a:81:e8:38:12:e0:59:51:f8:fe:16:cd:4f:c5:
54:b6:cf:26:27:78:51:44:70:2b:c1:08:46:53:52:
c2:26:1f:7b:5d:aa:e4:7c:8c:ba:3a:1b:2d:9d:89:
0f:ed:27:0c:a2:8f:bc:9e:1e:6b:78:5c:51:48:14:
48:18:cb:37:0b:0f:e9:52:f3:73:5f:b8:ef:81:e1:
3c:e7:bd:26:d7:51:1f:ec:69:5d:ec:ff:9e:d1:ea:
9f:a9:bc:b9:a2:51:5d:f2:ca:53:70:d9:14:6f:32:
15:36:65:99:9e:0e:0b:17:cb:10:ef:27:94:15:7e:
96:82:9f:3b:3e:c3:20:31:1e:a9:1d:78:cb:6a:10:
84:80:03:07:40:cb:e8:9c:45:5e:af:d9:9c:5a:5e:
dd:aa:64:8b:96:09:53:0c:53:95:f7:65:42:89:35:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:39:CD:AD:09:F0:4E:B7:CE:AD:93:26:20:7C:14:58:AF:87:23:65
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/rDnNrQnwTrfOrZMmIHwUWK-HI2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.128.0/20
178.21.120.0/21
IPv6:
2a00:1d10::/32
Signature Algorithm: sha256WithRSAEncryption
81:66:0c:a7:64:56:a1:c8:72:4f:32:e8:e6:41:6a:89:63:b2:
b3:72:4a:f3:a1:fe:23:03:4d:5e:51:ff:89:52:8c:a1:16:5a:
34:53:19:51:de:37:61:88:0a:09:1f:ed:e4:a3:3c:71:1f:bf:
da:4d:5c:77:8c:31:2a:15:63:db:0c:50:e5:a2:a3:0b:29:38:
9f:a0:15:86:a8:c4:ed:b6:97:e5:e1:d8:5e:d4:1d:dd:e2:1a:
05:39:67:5f:f4:97:25:cf:bb:1b:fb:b5:b5:19:6a:d4:81:03:
af:86:a7:38:c3:c5:5c:b9:b3:33:a3:59:09:12:64:e6:e5:00:
84:bd:28:6d:56:fe:a8:2c:43:63:f5:c5:73:37:01:93:d5:eb:
8a:a2:38:aa:2b:e2:04:82:21:6a:26:95:2a:dd:15:8a:f0:5c:
da:2a:f5:de:81:ce:62:34:05:25:4e:6b:31:b2:58:79:65:40:
33:34:84:74:c1:87:d5:9d:5a:1a:2b:69:72:f0:68:f3:7a:13:
24:a5:b6:21:45:1a:a3:e7:43:17:6f:39:4d:4b:b0:4d:d5:80:
f4:0a:26:de:b0:83:64:76:d2:81:d0:97:36:fe:f9:d4:f7:8f:
03:51:9c:c6:0e:2a:24:d1:59:2a:98:e5:7f:f5:e0:13:d3:4a:
72:de:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:12:33 2024 by rpki-client on console-fra.rpki-client.org