Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/04bwpMKZTXeKV7BxaSiq9ODlmEk.roa
File: 04bwpMKZTXeKV7BxaSiq9ODlmEk.roa (raw, json)
Hash identifier: B4MlDM6nriV1iWTrx5B8z6DwgufVmP40Iyaso5Ns1pU=
Subject key identifier: D3:86:F0:A4:C2:99:4D:77:8A:57:B0:71:69:28:AA:F4:E0:E5:98:49
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6A4F45163E29660BCBE67F092608
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/04bwpMKZTXeKV7BxaSiq9ODlmEk.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30407
IP address blocks: 46.232.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6a:4f:45:16:3e:29:66:0b:cb:e6:7f:09:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d386f0a4c2994d778a57b0716928aaf4e0e59849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:d4:2e:df:80:8a:1d:5c:73:1b:fd:79:38:
5d:71:e8:c2:ee:9e:00:b4:06:41:01:18:a6:b8:b2:
84:9d:f2:ea:39:ca:2f:22:ec:3d:ee:08:54:89:fe:
f0:27:6f:56:b7:57:48:fb:ab:d9:82:2e:80:3c:9e:
55:de:df:48:0c:97:4c:81:ac:87:a4:d1:17:8f:61:
ba:9e:ed:e1:56:e5:22:03:41:8e:16:0c:72:7c:81:
98:a2:9c:fe:2c:03:6b:e8:91:e4:b6:d8:a7:94:f6:
ee:36:0d:d0:15:a9:92:1a:a2:c7:95:79:b5:08:1e:
46:5b:6e:3b:9f:68:5c:3e:fb:c7:47:69:dd:d5:fb:
b6:7c:81:e9:3c:fd:05:4f:18:b3:7f:d7:b6:2c:e9:
d5:d9:d1:37:b1:ad:67:54:28:ce:11:7c:da:2b:58:
c8:d7:21:de:63:00:2b:d9:fc:56:08:3f:89:8d:e8:
79:b9:16:46:78:d9:f7:dc:66:12:f1:b4:dc:43:b7:
45:23:b7:49:ea:b9:6a:cc:16:67:3b:35:70:75:50:
9e:ec:57:b1:ec:b2:e7:6d:ae:37:2f:af:1d:28:c2:
3f:86:4e:a3:ab:23:d9:a6:2f:c4:14:d9:09:4b:f3:
9c:66:69:f4:51:61:b8:f4:db:e3:75:73:85:93:8f:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:F0:A4:C2:99:4D:77:8A:57:B0:71:69:28:AA:F4:E0:E5:98:49
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/04bwpMKZTXeKV7BxaSiq9ODlmEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
40:4f:d7:f7:3f:9f:98:05:d9:35:f7:c8:13:df:ec:7b:6c:ad:
db:49:14:b0:da:04:d0:40:9f:eb:b1:a3:35:79:20:cc:d0:f6:
ca:5c:ca:cf:81:34:ed:19:3f:fc:d0:ec:80:73:4b:a2:3f:14:
20:a6:d8:e8:c9:04:9a:4c:d8:6f:c8:7e:21:44:b9:87:e7:89:
f6:70:8b:c3:5c:25:98:9d:98:4f:14:ce:99:ee:5e:05:1c:1f:
15:1a:1e:de:2d:5a:03:eb:0a:f1:9b:51:55:2d:81:06:85:02:
0c:d6:a2:d0:d1:10:f8:31:34:aa:90:01:f4:b6:23:52:56:06:
80:44:6a:d7:be:3c:88:e8:7a:b9:14:55:97:bf:db:5d:fd:1f:
c7:be:f9:86:41:23:9f:84:44:27:bb:ac:07:4b:d3:a8:ad:2d:
43:6b:54:90:46:ea:d2:30:52:fd:ef:99:1f:e4:24:3e:14:2d:
2f:a5:a8:da:7f:08:bb:44:75:67:10:08:cb:7a:85:fb:07:e1:
43:bd:3c:4b:d1:e7:d9:2c:47:bd:39:75:72:98:94:4f:f0:35:
68:02:b0:28:4e:32:97:3b:6c:e5:fd:58:86:fb:d3:60:14:8a:
7b:81:58:ac:31:8c:cc:7f:58:66:02:d6:05:ee:fc:bb:aa:24:
d4:6a:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:56:01 2024 by rpki-client on console-ams.rpki-client.org