Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/PHoYvpSHtbfyE7VOvl2PMfXwWV0.roa
File: PHoYvpSHtbfyE7VOvl2PMfXwWV0.roa (raw, json)
Hash identifier: wcIGz83WpsGpBckHeDjSAoRJqwejp3yCHDfVbIO3hOA=
Subject key identifier: 3C:7A:18:BE:94:87:B5:B7:F2:13:B5:4E:BE:5D:8F:31:F5:F0:59:5D
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 018CC26D3FA062AA6CAF1949C2FD0658B4C7
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/PHoYvpSHtbfyE7VOvl2PMfXwWV0.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51606
IP address blocks: 46.16.136.0/21 maxlen: 21
46.16.137.0/24 maxlen: 24
46.16.136.0/24 maxlen: 24
46.16.138.0/24 maxlen: 24
46.16.140.0/24 maxlen: 24
46.16.143.0/24 maxlen: 24
46.16.142.0/24 maxlen: 24
46.16.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3f:a0:62:aa:6c:af:19:49:c2:fd:06:58:b4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c7a18be9487b5b7f213b54ebe5d8f31f5f0595d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:a3:cb:5b:14:b9:45:fb:14:78:db:c6:20:
fa:9b:ba:ce:60:b8:33:6c:82:50:86:ce:54:7c:49:
a7:c5:02:fa:57:33:9f:04:03:0f:36:93:75:4e:44:
9b:4c:24:b4:79:3b:c9:60:d6:b4:49:ce:45:0a:ac:
8a:85:09:31:31:ff:81:46:44:b8:39:9b:90:2c:47:
8b:e2:9f:13:e1:13:af:5f:8f:e0:08:ac:2c:86:85:
7c:f4:64:65:62:b5:00:3d:9a:29:51:23:92:6d:2f:
d0:95:75:42:fc:38:b3:65:63:e7:77:32:ee:14:27:
cf:2b:c5:ca:98:af:b8:0b:50:cf:f8:60:90:2a:dd:
8d:66:65:c4:37:01:50:d0:1f:81:cf:d3:79:65:ce:
2e:47:8b:2a:a1:d7:cc:f5:82:98:21:b8:15:93:b1:
09:45:e2:5d:5b:e8:d2:f4:81:72:7c:71:47:78:db:
91:90:1f:29:1a:05:6e:6d:db:c1:b4:5d:cb:5d:5f:
b9:7b:ca:d9:67:96:68:4c:37:e9:bd:7e:01:25:e4:
34:78:94:a0:ee:ad:98:88:e8:3f:ee:77:34:a6:d7:
24:2c:d4:c0:90:cd:56:49:f2:6f:9e:85:fb:1f:9f:
5b:fc:72:ff:fc:ea:ac:1a:e2:8f:29:40:68:1a:c0:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:18:BE:94:87:B5:B7:F2:13:B5:4E:BE:5D:8F:31:F5:F0:59:5D
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/PHoYvpSHtbfyE7VOvl2PMfXwWV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.136.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:0d:68:2e:6c:04:64:58:4b:12:41:8b:d1:e5:9e:7b:e7:3a:
b7:51:55:30:01:92:7e:63:68:32:a5:0e:9b:ba:04:f9:0c:cc:
94:89:06:af:0d:71:3e:ea:b1:78:d6:b6:dc:2b:03:aa:af:53:
3d:e3:50:f0:33:e3:56:a5:e0:97:62:9e:07:9b:9c:1e:5e:5a:
90:89:b8:79:07:f5:c7:7d:d4:dd:eb:0c:4b:1c:7d:06:b5:a6:
df:0e:a1:c4:01:2c:02:5d:d6:c5:e4:3b:a4:6b:71:21:42:7a:
e7:82:68:0b:7c:33:05:f9:6c:f6:42:ff:e3:7b:b8:7b:80:be:
99:52:f2:6c:93:e0:5b:5b:8e:76:45:f5:29:57:c6:5c:7e:79:
f4:c0:f2:15:6f:91:53:f5:26:27:a3:6a:d4:59:55:08:60:77:
fc:6c:b1:39:83:69:0b:6a:f3:ed:a0:9f:be:90:96:77:19:5b:
68:65:56:bc:d9:2c:ec:78:cd:14:1c:09:b8:3a:74:89:3f:66:
28:16:49:9f:d3:27:a4:2b:a9:a0:11:ca:a3:9f:b0:59:b6:a0:
79:ed:26:83:22:89:ca:e3:57:97:8e:cf:04:05:a7:f1:97:b4:
ea:2a:2b:58:e1:58:12:43:51:0f:1f:4c:9e:bc:86:07:2f:dc:
57:6e:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:06:28 2024 by rpki-client on console-fra.rpki-client.org