Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3k8Q8GKHN0z26Rp-fKuhzHxGVVI.roa
File: 3k8Q8GKHN0z26Rp-fKuhzHxGVVI.roa (raw, json)
Hash identifier: uiZwLiNov/J4fF/Nzo6YZxhJx/d31Pouwka5lPddhV8=
Subject key identifier: DE:4F:10:F0:62:87:37:4C:F6:E9:1A:7E:7C:AB:A1:CC:7C:46:55:52
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E68D5D39436215EAAD7854E24BBF4
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3k8Q8GKHN0z26Rp-fKuhzHxGVVI.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9833
IP address blocks: 46.232.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:68:d5:d3:94:36:21:5e:aa:d7:85:4e:24:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de4f10f06287374cf6e91a7e7caba1cc7c465552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:85:3f:16:37:b4:dd:40:e5:d2:ff:d4:f1:
fa:94:0d:4e:e8:ec:65:dd:ed:22:7b:f0:e8:07:ed:
f9:bd:ad:a5:a5:e4:fb:0f:e3:f2:d2:77:89:92:16:
e7:fb:db:ee:69:eb:9c:cc:bb:ad:33:2a:a3:41:9f:
6e:86:84:bf:40:20:ee:c7:9a:b7:e6:df:4b:24:48:
8e:02:37:27:06:86:e3:16:28:e1:b4:37:4a:e1:4e:
24:fc:7e:12:89:7e:34:92:b4:aa:a1:d2:3a:b0:09:
fc:ed:fb:9c:51:5c:62:54:6f:6a:11:35:f6:5f:a9:
67:dc:5c:51:2e:9b:62:dc:c1:c1:89:90:aa:fe:f8:
78:5d:ad:9d:da:50:41:12:fb:e8:77:4e:14:8a:bb:
5e:1f:63:5f:8b:73:58:50:87:7a:37:87:c3:d7:38:
dc:ad:c4:83:92:ff:c9:a2:3b:2f:59:7a:0e:cc:26:
d4:32:2d:73:0d:f1:2e:60:8b:41:59:38:c6:03:48:
f9:8c:60:c8:03:94:0c:e4:d0:f6:0c:ae:d0:79:8e:
84:b8:a0:4f:f5:44:61:48:da:1c:da:6c:d0:c9:a9:
8d:f3:9b:82:6f:9f:d9:46:66:09:d3:e5:fe:48:bd:
44:1f:16:07:ff:01:8c:7d:78:ba:c7:d8:10:6b:cd:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:10:F0:62:87:37:4C:F6:E9:1A:7E:7C:AB:A1:CC:7C:46:55:52
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3k8Q8GKHN0z26Rp-fKuhzHxGVVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5e:b1:d5:2f:0a:55:5b:d0:51:96:48:c2:cc:a5:b2:f7:55:
2e:9c:f4:76:b1:40:59:cc:7a:c8:a1:e1:02:ef:8a:5b:7d:99:
7f:a7:ce:dd:83:65:bd:5a:b6:e5:13:02:11:65:a0:55:88:b1:
22:44:8e:5d:aa:a2:aa:4e:98:00:94:18:16:a6:0b:8b:0f:90:
79:5b:4a:7f:f4:bd:99:df:8c:72:87:55:ed:73:35:07:4a:03:
90:86:37:36:b9:38:b3:9c:44:35:a6:9a:e7:cd:35:df:13:5b:
6f:1c:11:a0:d4:1d:2d:ca:6a:1a:ed:d3:bf:62:d5:d9:19:1f:
4d:a4:45:9c:93:4b:69:25:04:82:d3:ab:ad:86:92:b6:dd:69:
db:36:e8:49:5c:2d:6c:1f:d0:ec:21:20:2d:3d:7a:dc:b0:f9:
27:21:b6:ae:57:2a:2f:29:19:26:2b:41:70:c4:cf:f0:e8:d9:
33:05:76:61:72:da:ef:ac:09:4f:d0:a3:e5:eb:5e:84:d0:c9:
e1:21:3e:05:01:b5:c3:c1:b3:24:1c:d6:fe:f2:7b:bb:fe:6a:
ca:14:93:e4:10:b8:38:37:c3:9f:58:eb:c9:ca:68:81:eb:2d:
bf:4c:4c:79:5f:20:10:e3:75:4c:b1:95:83:41:3f:8e:94:30:
cd:d8:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:43:00 2024 by rpki-client on console-fra.rpki-client.org