Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/To9gn0-XYtUh46V6WuHTP3mmobs.roa
File: To9gn0-XYtUh46V6WuHTP3mmobs.roa (raw, json)
Hash identifier: 5khSI0RA3oW+xn6lG6ARPRowmVrE9PnwzlNf/FmCSnQ=
Subject key identifier: 4E:8F:60:9F:4F:97:62:D5:21:E3:A5:7A:5A:E1:D3:3F:79:A6:A1:BB
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 018CC9BC7781BA0ECB923F824D15CD6887A3
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/To9gn0-XYtUh46V6WuHTP3mmobs.roa
Signing time: Tue 02 Jan 2024 10:33:40 +0000
ROA not before: Tue 02 Jan 2024 10:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34315
IP address blocks: 85.93.96.0/19 maxlen: 19
151.237.224.0/21 maxlen: 21
46.227.8.0/21 maxlen: 21
2a00:c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:77:81:ba:0e:cb:92:3f:82:4d:15:cd:68:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 2 10:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e8f609f4f9762d521e3a57a5ae1d33f79a6a1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:54:aa:f7:45:8c:6c:c9:9f:1d:a7:d5:01:
57:86:b4:0b:26:60:6a:7b:20:9c:a2:26:3a:e0:a1:
cb:67:ce:4c:76:79:9e:63:d6:76:f2:85:2d:66:d3:
e8:22:d6:5e:1e:e5:c0:52:7c:a5:f2:e8:f0:2c:71:
06:a8:d1:08:ac:54:5b:59:27:52:85:45:77:5e:d9:
13:17:3d:bc:ab:63:28:95:80:10:b7:ba:d2:c9:2d:
ac:07:e2:0a:f3:5c:b7:f6:31:9e:55:6f:0d:e6:b4:
4a:87:51:f5:1b:ca:6b:e7:3c:fc:68:b7:1b:98:2e:
f7:0a:63:ad:76:5e:3a:18:fb:85:e4:fc:c2:6a:3f:
28:a6:00:22:9e:8a:e8:39:f3:a0:48:58:3c:19:4c:
27:d2:6d:e5:c3:28:f1:cc:86:e2:2e:5d:10:88:c4:
30:78:86:47:e9:33:88:8b:db:71:3a:da:8d:92:08:
43:0c:23:23:cb:db:f0:97:ce:7b:b9:32:00:7e:4c:
b8:59:9e:ae:15:5d:f3:d5:85:57:b3:97:da:05:92:
77:2b:f9:d6:ff:51:e1:c2:b4:27:36:5a:24:ca:ce:
00:26:b0:03:28:74:63:bb:dd:90:89:0f:1c:55:96:
3e:2f:3d:a4:3a:7a:31:ea:54:d0:78:3d:f2:71:af:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8F:60:9F:4F:97:62:D5:21:E3:A5:7A:5A:E1:D3:3F:79:A6:A1:BB
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/To9gn0-XYtUh46V6WuHTP3mmobs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.8.0/21
85.93.96.0/19
151.237.224.0/21
IPv6:
2a00:c40::/32
Signature Algorithm: sha256WithRSAEncryption
b3:88:a0:35:a6:d7:ee:dc:0f:41:3f:50:49:67:bc:e1:32:55:
7c:46:dc:96:b4:d2:11:a6:61:1e:07:39:db:a8:de:e2:f9:42:
f3:d9:a5:77:b5:d0:a7:61:c9:d3:35:7c:5b:4e:e2:8c:2c:77:
ee:d1:1a:58:de:ee:07:59:b4:dc:44:63:63:b1:65:39:7b:33:
03:f6:09:12:40:ac:11:1e:7a:86:34:8e:f2:1f:06:e0:70:3e:
2f:21:82:77:1c:ec:82:d2:52:e4:87:cf:a8:3d:ba:60:f1:e4:
44:76:0e:7c:d5:35:20:31:a8:ad:8a:31:4d:15:6f:e7:06:0d:
05:55:74:c8:96:78:78:37:ed:26:e7:2c:98:58:88:a4:46:d2:
7a:d9:c5:9e:e4:bf:23:14:3e:21:23:b3:c4:96:dc:a7:2a:42:
e5:29:74:ff:c9:6c:1b:40:06:e4:f0:8a:b9:25:83:fd:64:77:
04:30:a9:91:30:a9:71:11:2e:f3:65:f0:bf:f8:ee:e9:47:44:
95:94:6c:1d:e7:38:1e:a1:87:d0:fa:2d:a1:22:8d:f7:43:8e:
20:b8:47:ad:b3:7b:12:79:57:07:2e:05:92:25:96:cf:6c:24:
8a:32:93:71:d1:a8:ce:ed:e8:35:56:a7:f2:fa:a3:1a:90:42:
b4:37:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:52:07 2024 by rpki-client on console-ams.rpki-client.org