Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qi7aywjUftpAmhsQozWuU1cqDnE.roa
File: qi7aywjUftpAmhsQozWuU1cqDnE.roa (raw, json)
Hash identifier: +AZHRloA/SfwUIagU7s84J27JeE/+/BmhoGAUp17Ykc=
Subject key identifier: AA:2E:DA:CB:08:D4:7E:DA:40:9A:1B:10:A3:35:AE:53:57:2A:0E:71
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6E1F007A572B0EED8E290CA5B98C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qi7aywjUftpAmhsQozWuU1cqDnE.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137443
IP address blocks: 46.3.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6e:1f:00:7a:57:2b:0e:ed:8e:29:0c:a5:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa2edacb08d47eda409a1b10a335ae53572a0e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:e1:da:f9:76:a2:99:b1:3b:bc:76:e9:09:
89:80:f4:d9:72:a0:0a:5b:a5:1e:82:e1:a5:0c:10:
c0:38:2f:01:f1:8b:8e:ef:8e:4a:c9:14:96:94:26:
83:9a:42:32:e7:06:0d:f5:f4:b7:f4:24:9b:f6:85:
15:2b:3e:cd:f7:b6:0f:d2:5c:5c:5b:5e:de:13:81:
16:30:08:07:0c:3f:89:85:ab:45:1f:f2:cc:1e:f1:
8e:9c:95:dd:50:06:53:4a:f4:12:62:56:5c:d9:58:
71:83:d9:e4:ee:7b:40:f5:9c:e3:c5:d6:46:b1:88:
31:c5:bd:77:8c:92:b9:0d:fc:31:53:4f:bf:de:21:
5a:42:f3:a4:6e:8d:6a:cc:e9:8e:47:83:ce:19:79:
bb:89:42:69:4c:60:bc:05:2c:e9:68:54:28:2d:a7:
79:3b:bf:bf:ac:69:26:aa:0e:b1:3f:a1:2e:03:da:
e7:cb:b1:ea:5b:d1:bb:a5:e5:09:cf:a7:05:fb:d0:
e8:7f:00:50:94:e2:70:f9:32:1d:9f:98:e0:ef:9a:
8c:da:2a:e3:99:4d:9a:1d:3c:c5:1c:ff:49:fb:fe:
84:96:87:e5:09:d7:f7:35:5e:cd:21:f1:9a:3e:26:
66:1b:78:ea:a1:7d:f6:b1:b6:39:0d:81:99:39:63:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:DA:CB:08:D4:7E:DA:40:9A:1B:10:A3:35:AE:53:57:2A:0E:71
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qi7aywjUftpAmhsQozWuU1cqDnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.112.0/23
Signature Algorithm: sha256WithRSAEncryption
78:11:8d:88:90:78:10:49:bc:01:78:bc:59:e8:0c:7a:ed:08:
27:94:c2:40:4c:74:4d:f4:b9:a7:24:4c:9b:f1:97:1c:44:8e:
cb:d4:d1:64:d1:fd:f3:0b:fd:6e:56:19:46:ea:b4:90:df:ca:
8e:1c:0b:d7:83:df:76:43:69:f5:4a:b7:1a:6d:82:ad:24:27:
43:1e:fd:f2:c5:06:4c:99:74:d6:0a:67:09:b0:25:c0:3a:88:
35:a3:f6:68:94:a7:6b:0f:c6:af:b2:f9:ad:4b:d1:2b:26:a5:
5d:6c:e5:c6:96:53:f6:29:1c:d0:64:61:8c:5b:c8:ed:80:88:
f1:75:ae:6a:ca:93:22:80:f0:4a:9a:dc:2a:b7:21:4c:cb:d8:
f9:3d:de:5c:e8:15:c8:e9:23:24:8b:ab:2e:17:d6:eb:0b:d8:
43:7e:e8:59:c4:b8:96:81:82:f2:f4:32:c8:a1:06:15:3f:fe:
da:63:08:35:cb:98:54:b3:24:20:78:0b:77:7c:5b:92:8b:f3:
2a:7c:9d:a4:f3:23:9f:82:25:96:12:88:95:05:3d:24:4c:5d:
01:a1:55:65:d4:f5:78:95:3d:4d:1e:28:bd:ce:9e:98:2c:b6:
d8:80:7c:a6:3c:a0:9e:61:f2:96:eb:f9:b2:e3:94:72:55:96:
e3:6f:ea:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:03:30 2024 by rpki-client on console-ams.rpki-client.org