Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/jEqR1MN7AxSHH4nC3HvBhGZ4qe4.roa
File: jEqR1MN7AxSHH4nC3HvBhGZ4qe4.roa (raw, json)
Hash identifier: lE4S1XiCRvSe8+5zoMVTjl51GbQirkwD8Mf8nHcv9pI=
Subject key identifier: 8C:4A:91:D4:C3:7B:03:14:87:1F:89:C2:DC:7B:C1:84:66:78:A9:EE
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 018EC1CF0045F92911C96438E9E86B91C970
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/jEqR1MN7AxSHH4nC3HvBhGZ4qe4.roa
Signing time: Tue 09 Apr 2024 07:42:32 +0000
ROA not before: Tue 09 Apr 2024 07:42:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1136
IP address blocks: 46.231.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:cf:00:45:f9:29:11:c9:64:38:e9:e8:6b:91:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Apr 9 07:42:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c4a91d4c37b0314871f89c2dc7bc1846678a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:25:d0:49:0a:e2:be:f5:23:2d:b5:65:19:
fa:4e:af:16:5d:05:25:95:d2:e6:80:51:ed:06:5b:
1f:44:3f:7e:f1:d8:ee:58:1d:1b:85:c8:be:13:5e:
d8:02:cb:85:d5:91:de:1d:9a:1a:7d:37:73:83:76:
82:84:ab:be:fc:9d:9c:97:10:85:aa:2c:0f:82:e9:
54:26:7f:13:f4:a2:dd:ca:cb:73:9b:19:37:52:c2:
e9:52:f3:c9:5b:7f:57:58:63:93:96:d3:f7:c6:41:
ea:ee:e4:52:6e:33:1a:8d:3e:d0:c4:9a:3f:cf:af:
0c:93:09:da:42:54:ee:11:e3:49:36:ea:a8:01:17:
db:b5:83:77:9d:f1:e7:03:20:b5:d3:1e:ac:6a:67:
0d:b7:71:44:11:3a:b0:12:fd:ca:6a:01:d7:07:d7:
31:96:8d:aa:79:d6:5c:0c:c6:7e:99:72:f6:e5:c7:
4a:94:f1:9e:45:9a:b3:e1:db:7d:4d:9e:79:19:3f:
cf:54:3a:90:d8:77:f8:cb:81:33:be:92:3f:6e:a1:
c4:20:75:20:a3:9f:b2:9c:5c:13:5f:b7:2d:76:81:
6e:0d:c4:0b:a7:26:89:63:33:c1:4c:f2:d2:b7:83:
fb:ab:81:e6:39:7c:fb:ab:e7:bb:25:1a:5b:a7:f4:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4A:91:D4:C3:7B:03:14:87:1F:89:C2:DC:7B:C1:84:66:78:A9:EE
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/jEqR1MN7AxSHH4nC3HvBhGZ4qe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:64:68:18:50:75:a0:45:04:a2:18:25:6e:d2:2a:4d:f0:8d:
54:d5:fe:2b:3b:b6:f3:cd:df:cd:13:51:eb:a5:96:32:b0:c0:
e4:5d:c5:a1:41:23:4f:61:19:18:dc:cd:a7:47:10:a3:f3:39:
bc:56:1f:c1:f5:34:16:05:55:5e:aa:72:fa:67:d8:8d:c5:98:
c9:a4:27:0c:06:17:f5:6a:d2:1a:99:9c:25:d5:fc:3f:f9:d5:
c8:cd:0a:f9:c7:54:cb:1d:f7:53:18:5f:b4:88:2b:3c:e2:fd:
df:f3:b0:a2:79:e4:bc:c5:24:03:74:19:07:cd:8d:df:48:92:
ec:5b:54:48:5f:99:ce:05:43:2b:bd:ed:f9:87:db:06:90:b6:
95:8e:8b:73:04:73:63:60:cd:61:e4:51:da:90:de:76:a1:b6:
c3:f6:aa:00:f7:fd:25:69:9f:00:ee:97:dd:8f:22:f6:e1:37:
7a:f1:32:d9:9c:43:11:67:ca:c1:cd:94:6f:2e:fd:03:1f:27:
a8:ee:14:ee:9f:da:a1:2b:5d:3d:3d:d8:60:40:ea:28:9b:3a:
68:57:3b:8b:6e:7f:80:85:7d:90:9a:35:2e:0a:d5:f8:75:e3:
51:8e:ab:17:a8:01:03:c9:5d:69:b7:61:fa:d3:a8:c9:29:10:
31:c7:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:33:17 2024 by rpki-client on console-ams.rpki-client.org