Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/h2GjlXkJ8y-4zVtHt3d6nrBGItA.roa
File: h2GjlXkJ8y-4zVtHt3d6nrBGItA.roa (raw, json)
Hash identifier: bY7z14zleIltyz4zIOYvt+3P5o/WPmZxbIiMsd13zec=
Subject key identifier: 87:61:A3:95:79:09:F3:2F:B8:CD:5B:47:B7:77:7A:9E:B0:46:22:D0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6C161E3E37D79816A5066BDD977F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/h2GjlXkJ8y-4zVtHt3d6nrBGItA.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47553
IP address blocks: 46.232.56.0/21 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6c:16:1e:3e:37:d7:98:16:a5:06:6b:dd:97:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8761a3957909f32fb8cd5b47b7777a9eb04622d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:5c:a5:18:77:16:c3:cb:47:0f:74:a8:4d:
65:39:b5:0b:48:d3:4d:93:ba:ce:63:93:18:d5:63:
1c:cd:7d:ea:80:3e:80:6e:37:5a:e0:b5:01:5b:27:
7b:58:ab:6c:a9:36:cf:c6:a0:5c:7a:9f:8a:d7:01:
ea:77:06:b7:10:a5:3a:9c:db:fb:ad:67:6d:54:f4:
55:0d:87:ec:88:49:d1:c1:45:82:fc:32:21:4f:c8:
50:a7:14:3b:c1:89:1b:e1:92:64:c1:06:44:81:e7:
ef:c9:c8:85:db:4f:36:f8:fa:13:4e:3a:d3:af:a8:
48:f4:59:91:20:82:c8:44:f4:cd:e5:d2:d1:36:d2:
1f:ff:9f:46:4d:4f:fa:59:09:d8:6f:50:54:4d:7e:
55:9b:f8:20:a5:2f:9a:42:af:06:7f:2c:2c:51:d1:
b3:b3:ba:ba:fb:a8:d2:c2:90:5f:58:c5:54:07:77:
f8:9d:b2:a8:08:de:29:33:c9:fe:a1:de:89:0a:fb:
79:1a:57:80:02:1a:61:42:dd:15:0b:a9:4d:58:7b:
f2:37:bd:67:8e:f0:8d:c0:11:fc:14:67:75:7b:48:
01:f0:51:d2:c7:40:5a:19:4f:b0:4b:f3:81:49:5a:
33:a2:52:15:4f:8a:2b:a6:64:4c:ac:c0:54:2e:18:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:A3:95:79:09:F3:2F:B8:CD:5B:47:B7:77:7A:9E:B0:46:22:D0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/h2GjlXkJ8y-4zVtHt3d6nrBGItA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:5f:0c:80:b2:4d:27:3b:c6:cc:e3:80:c4:1c:74:c2:75:67:
20:14:c7:78:f1:3c:5e:3f:bd:b5:76:03:28:4a:d5:6d:3d:02:
11:1d:66:2e:2a:32:82:08:04:0f:0f:12:df:3a:59:24:60:2b:
24:32:aa:05:e5:36:69:e2:9e:fc:a5:fb:00:8a:75:29:2a:dd:
83:db:dc:fe:9a:cb:9f:d7:f4:bb:68:4d:b2:fb:d3:c7:7e:8e:
ae:b5:66:7c:a4:32:e9:a9:d8:97:a9:9f:b5:0c:53:bf:58:33:
2d:62:22:62:65:42:9f:be:41:fe:d8:10:4e:ff:e0:cb:74:8c:
5e:ac:f2:71:04:51:45:38:af:8b:76:46:81:a7:37:dc:32:be:
2a:40:48:17:4c:52:e0:c4:50:20:27:da:bb:5d:09:a4:41:97:
bc:a7:d6:25:29:3c:d6:46:91:c4:dd:fa:90:14:d8:fc:f8:88:
80:82:b7:a2:91:f6:89:d1:43:eb:7a:36:59:f0:66:11:f8:56:
a1:04:fb:10:2d:e7:13:6d:0d:c7:1f:84:66:74:6d:ad:34:d3:
dc:70:f1:44:a5:fa:c7:13:b2:57:96:59:be:4f:68:7c:b3:fd:
12:17:01:b3:41:56:34:97:56:de:c1:6c:54:26:d9:eb:e8:ef:
6a:73:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:06:05 2024 by rpki-client on console-fra.rpki-client.org