Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fR0FfgE1DgkY5f-rbngaZpvWSHM.roa
File: fR0FfgE1DgkY5f-rbngaZpvWSHM.roa (raw, json)
Hash identifier: 1FgKuZYB/BOUgkMwi0GR7I13CN1rjdb1C+UCyQBjxoY=
Subject key identifier: 7D:1D:05:7E:01:35:0E:09:18:E5:FF:AB:6E:78:1A:66:9B:D6:48:73
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6D844EA42018C8CB05970EB12FD3
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fR0FfgE1DgkY5f-rbngaZpvWSHM.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6d:84:4e:a4:20:18:c8:cb:05:97:0e:b1:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d1d057e01350e0918e5ffab6e781a669bd64873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:27:ef:6f:e9:85:20:ee:99:37:6e:5b:db:
5f:2e:2a:f1:48:7c:e5:6c:f6:b4:f2:40:8b:17:0a:
21:ee:79:35:0a:f7:62:49:5a:b5:80:41:ea:ed:9e:
3f:a2:b3:e3:b5:4a:0f:a9:6f:c2:77:e8:46:62:ae:
b2:6d:9e:dc:15:03:b5:27:dc:bd:b0:91:52:67:16:
8b:b8:b0:46:18:80:a8:bc:ef:85:d6:f7:30:dd:41:
08:7c:60:b6:c1:55:86:0c:e2:f1:84:48:14:3c:d8:
e9:03:6a:80:f4:b4:4d:e7:09:af:31:31:6a:5f:24:
fb:39:b4:7f:6b:dd:4f:c8:3e:74:d2:46:67:07:c8:
e0:60:67:98:0d:18:ad:15:33:48:f5:5a:d1:06:26:
b0:a0:58:41:c3:cf:de:0e:fb:4f:0b:00:d3:38:28:
52:10:03:ae:95:cb:40:b9:dd:86:f5:6e:6b:4a:dc:
fd:b3:05:c0:20:8f:c1:73:33:39:ee:3e:59:20:e9:
f6:ff:f4:7b:f9:40:cc:8e:e3:42:6f:d4:35:f1:e2:
45:89:28:29:5f:e7:7b:d9:36:0f:17:a4:5c:04:08:
ec:4a:4b:43:b6:0f:3d:53:8d:a3:0f:f6:4e:3d:b4:
3d:96:2a:5e:61:6e:5f:9c:17:73:c4:f0:51:a7:0c:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:05:7E:01:35:0E:09:18:E5:FF:AB:6E:78:1A:66:9B:D6:48:73
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fR0FfgE1DgkY5f-rbngaZpvWSHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.152.0/22
46.3.238.0/23
149.126.203.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cc:c4:91:1d:ee:4b:dc:0f:aa:42:25:2d:a3:0d:ac:06:26:
7f:71:9f:2d:85:11:2e:7a:56:28:a5:7c:9b:cd:c2:ec:98:cf:
b3:98:90:7d:81:52:b5:fd:50:5a:3f:25:5a:dd:73:34:13:83:
78:f9:41:04:37:e9:3b:d6:8b:06:a3:8f:c8:b4:cc:08:87:2a:
8b:78:9b:d6:3e:bd:1e:1b:a0:89:0d:94:00:53:e5:75:38:42:
8c:d2:54:17:14:98:67:8c:bd:6a:8e:06:40:04:00:ce:dc:24:
0a:8b:1c:8f:b3:d0:33:91:cb:38:be:f3:46:0f:ab:ac:74:76:
2f:fc:e0:b1:b7:62:ab:bf:60:ee:c6:be:f6:ab:7f:ba:91:40:
e3:53:15:ce:77:8a:4a:8c:0a:eb:5d:2d:06:49:8a:46:36:3d:
b2:3f:c1:e9:3d:e9:05:50:4a:40:9f:d4:3c:ad:5a:75:64:0c:
68:3e:59:dd:a1:97:a6:48:28:b9:f7:1a:3c:72:83:87:c7:68:
22:d5:5b:9a:de:17:24:9d:1c:f3:1c:6b:24:46:d7:12:d9:bb:
b8:8f:95:8b:64:c7:60:a1:1e:41:f0:42:48:53:4a:a5:00:c8:
2c:c0:6b:60:8d:31:46:7c:dd:7e:83:0c:67:c0:5c:67:8f:a9:
af:a0:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:17:26 2024 by rpki-client on console-ams.rpki-client.org