Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2IjOfF9GFJH89HEv1ym7tv-yVDw.roa
File: 2IjOfF9GFJH89HEv1ym7tv-yVDw.roa (raw, json)
Hash identifier: HCuB2TvybnhyytD017j7uUcUMQsS11VB7UMk41vq6gg=
Subject key identifier: D8:88:CE:7C:5F:46:14:91:FC:F4:71:2F:D7:29:BB:B6:FF:B2:54:3C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6E718CF9F70F1FE7EACB8560578C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2IjOfF9GFJH89HEv1ym7tv-yVDw.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138687
IP address blocks: 46.3.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6e:71:8c:f9:f7:0f:1f:e7:ea:cb:85:60:57:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d888ce7c5f461491fcf4712fd729bbb6ffb2543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:f1:96:76:d7:b4:27:db:a9:6a:cd:1d:9c:
27:40:d6:e9:ce:3c:ef:11:cc:f8:9d:ce:e2:9c:1a:
d7:71:2e:9a:09:62:76:72:14:bb:12:99:9f:a4:19:
13:5d:a7:0a:82:87:6b:97:24:d3:3f:e8:54:1e:cc:
b7:87:13:6a:19:42:aa:79:7b:33:16:04:4e:dc:39:
f3:0d:34:1d:7c:53:fb:dd:27:a7:ab:c5:07:6b:2a:
e9:51:17:13:30:62:40:d2:66:a2:a7:6b:fe:44:c2:
35:a0:6b:73:71:af:49:52:6f:20:bc:10:01:d1:67:
d5:f4:f8:ae:03:08:d9:a4:76:9c:4d:b8:c8:85:e9:
2a:05:e3:48:db:ed:3a:39:ac:23:0b:c9:92:86:22:
8a:e1:ff:9d:2c:60:2f:d5:bc:45:32:b6:18:5d:54:
31:d1:fb:27:da:2d:1c:c3:0c:68:0d:04:a3:e8:66:
53:0d:38:2f:9d:94:f4:43:22:28:2e:ae:96:6f:05:
c2:30:5c:09:7c:01:33:49:f2:36:0a:6a:f0:c5:6e:
b0:19:b5:54:6e:11:6b:2a:1a:8d:f9:93:28:86:b5:
da:1f:cb:3a:e1:1e:a6:20:87:f1:f2:06:6c:7e:80:
91:57:b0:11:e1:73:6d:90:36:49:ca:86:45:d6:fe:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:CE:7C:5F:46:14:91:FC:F4:71:2F:D7:29:BB:B6:FF:B2:54:3C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2IjOfF9GFJH89HEv1ym7tv-yVDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.238.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7e:0e:7c:5d:ab:ac:6f:76:56:33:0a:a9:24:d7:79:aa:de:
b1:7f:e7:38:60:0a:d4:ad:94:94:8a:f4:0d:97:a8:d7:16:f6:
02:02:e0:ec:f4:c9:ce:cd:d7:fc:d1:41:06:95:1e:1a:17:55:
22:54:b8:de:f5:76:d9:aa:5e:e4:9e:b5:57:87:8e:a1:ab:92:
3f:2b:c2:a9:55:62:f1:c3:1c:d4:e8:76:c8:5a:29:d9:0c:7f:
99:cd:99:59:c3:60:2b:51:59:f9:38:fd:a4:7d:15:a6:3d:46:
d2:11:4c:f9:7d:4e:f8:c5:d5:08:fe:64:ec:8f:31:0b:9f:20:
69:b3:cb:b1:42:93:c7:36:e3:31:a1:01:fd:18:51:c8:9a:d0:
21:19:43:ad:f3:b3:90:83:da:df:f1:30:46:de:36:4b:36:36:
5d:c3:d0:80:d9:08:f9:b4:8b:4e:1e:f3:9b:d4:6c:90:cf:f2:
50:8a:57:b0:85:88:6a:a6:09:39:a9:3c:51:bb:79:79:cf:96:
12:73:37:88:b5:d4:ef:53:f8:43:bb:80:f9:1b:40:7b:47:83:
27:61:06:0e:17:f3:5b:86:46:3d:6e:ef:aa:29:a9:46:7e:50:
46:c8:87:b7:98:9a:6c:c9:be:8a:c6:9b:0e:04:8d:b7:61:24:
1f:46:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 05:47:49 2024 by rpki-client on console-ams.rpki-client.org