Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/t_4texXuHUmEMjYOdmfUC-DpSpY.roa
File: t_4texXuHUmEMjYOdmfUC-DpSpY.roa (raw, json)
Hash identifier: 0q/npKIoo9HPRjK5JTv2PKiGmDU7pvvcdoAbLhHMr7M=
Subject key identifier: B7:FE:2D:7B:15:EE:1D:49:84:32:36:0E:76:67:D4:0B:E0:E9:4A:96
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018D6647796E4A27F678281FAC61829E9ED9
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/t_4texXuHUmEMjYOdmfUC-DpSpY.roa
Signing time: Thu 01 Feb 2024 20:06:16 +0000
ROA not before: Thu 01 Feb 2024 20:06:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 46.3.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:47:79:6e:4a:27:f6:78:28:1f:ac:61:82:9e:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 1 20:06:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7fe2d7b15ee1d498432360e7667d40be0e94a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:68:4d:9e:18:1b:52:1f:d7:50:a7:4b:67:78:
66:8a:d4:75:49:e7:6d:09:1d:8a:9c:8d:27:14:e4:
64:cb:21:9c:78:cf:96:00:5c:8f:bd:f7:7d:32:71:
17:82:bd:1b:1a:29:7e:da:6f:ff:53:e7:a3:fd:4a:
94:9d:bf:10:f7:35:9a:d2:ed:20:86:26:38:1b:76:
17:ed:32:fe:87:b9:67:57:19:78:e5:c1:51:51:64:
72:cd:48:35:ed:15:50:cf:c7:db:43:1f:12:37:d5:
5a:ee:72:e7:6e:56:8f:d5:66:3a:3e:a6:e2:f7:cf:
d6:73:9d:83:2c:19:f3:a7:b2:1c:cd:3b:5a:c1:6a:
42:fe:d6:b5:b3:5f:50:e7:9e:43:c5:a4:0d:df:51:
65:e3:0c:15:59:af:45:65:7c:ab:b5:c5:2b:cc:b8:
27:17:61:7f:8e:42:12:bb:17:76:83:81:4d:7c:36:
20:f7:73:cc:a3:1a:e1:2f:18:98:2c:a6:3c:1b:af:
44:d6:e5:da:3e:eb:3a:b5:b8:f5:7b:02:c6:05:7a:
c7:cd:ce:1d:13:d3:a9:0e:87:7d:04:d2:6f:62:53:
76:ad:e3:df:59:a7:a2:1a:f9:48:65:93:64:85:65:
ed:41:14:db:7b:47:82:48:96:07:45:1b:8b:7c:ce:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:2D:7B:15:EE:1D:49:84:32:36:0E:76:67:D4:0B:E0:E9:4A:96
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/t_4texXuHUmEMjYOdmfUC-DpSpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.228.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bd:8d:d0:1a:92:55:6c:68:bb:a9:d1:3c:24:dc:06:60:8d:
f1:37:05:c5:b0:b1:46:29:0c:a2:c7:01:5b:0c:46:0a:1f:af:
9a:ae:4e:9e:9e:8b:7a:e1:9f:aa:13:04:8c:e7:56:95:e9:c8:
80:37:a2:5f:9a:75:8e:25:47:6b:a3:37:33:32:ae:b8:8b:6c:
f3:d0:0a:d3:e2:58:36:0e:71:f3:36:25:74:65:24:73:24:4c:
e7:54:62:12:4f:b0:d7:14:17:39:55:ed:28:71:22:60:e5:62:
96:ba:1c:50:56:11:11:7b:3c:32:96:33:41:14:8d:44:82:a1:
bd:45:32:d2:41:d7:39:cd:84:bb:11:5b:5b:b1:3f:c8:c5:fd:
70:d8:bb:6f:21:12:53:fc:82:50:b0:f9:38:65:2e:07:6a:f0:
57:b5:a2:41:10:79:ed:5e:50:9a:03:d8:ee:7f:b7:a7:f6:31:
8c:19:8b:3e:aa:78:21:e7:ee:65:79:86:1e:39:09:09:d0:56:
f9:81:0e:b4:1e:0e:fb:5d:5c:73:7e:d8:15:5c:63:32:c7:d6:
d7:ed:da:88:2b:46:d8:30:d3:66:57:63:4c:f5:b5:34:1b:8b:
06:91:2d:18:60:05:73:3c:52:98:91:75:51:70:de:eb:1a:95:
43:63:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:27:52 2024 by rpki-client on console-ams.rpki-client.org