Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xkgV_HH_UMSbVrsUnsiYniDCCFc.roa
File: xkgV_HH_UMSbVrsUnsiYniDCCFc.roa (raw, json)
Hash identifier: p0wXHDkR6b6AFc6xLLEYx9J3EjdGpcf+PZbQg46Slpc=
Subject key identifier: C6:48:15:FC:71:FF:50:C4:9B:56:BB:14:9E:C8:98:9E:20:C2:08:57
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01929ACB2334955A09906BD95477FBBF3011
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xkgV_HH_UMSbVrsUnsiYniDCCFc.roa
Signing time: Thu 17 Oct 2024 14:04:16 +0000
ROA not before: Thu 17 Oct 2024 14:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47959
IP address blocks: 46.23.110.0/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:cb:23:34:95:5a:09:90:6b:d9:54:77:fb:bf:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 17 14:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c64815fc71ff50c49b56bb149ec8989e20c20857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:33:7b:d5:ef:e6:b8:c6:6c:be:4b:6a:84:
88:7d:68:f7:40:45:d8:45:fe:03:24:d7:da:7e:57:
1e:05:c3:2b:71:89:89:df:8d:d3:c3:22:96:ba:fb:
18:5e:df:98:80:c1:62:47:c5:7d:ac:d4:76:9f:73:
0a:12:09:c3:4d:70:46:ec:69:12:1c:c1:db:f5:8d:
0f:4c:cb:0b:ca:52:a5:bf:81:eb:53:6e:10:01:09:
ec:22:02:4a:6c:4a:9a:c4:88:d3:74:8e:fb:0a:41:
73:1b:16:70:43:8d:ed:e1:62:4e:9d:bb:b9:bd:f4:
50:1f:4f:49:18:43:fa:3a:48:4c:b5:a1:f0:3e:22:
8c:1a:e6:6c:37:bd:8b:fe:64:01:ab:85:48:3c:32:
cd:95:62:c5:5a:35:4e:52:bf:24:23:59:c6:9b:41:
bd:03:45:df:5a:19:da:82:b6:16:c4:00:40:37:7d:
eb:80:d3:f9:94:e1:a4:b5:fa:2d:9e:e7:17:e2:b0:
6d:50:06:8b:60:58:7a:29:69:3c:a9:ff:9a:e1:b1:
07:0e:d2:a0:d2:e4:65:e6:19:5f:35:f7:57:65:51:
42:c3:ca:a8:ec:c3:92:47:dd:00:78:1e:44:6f:69:
78:3f:83:42:48:51:ba:ff:69:09:17:e2:15:4a:1a:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:15:FC:71:FF:50:C4:9B:56:BB:14:9E:C8:98:9E:20:C2:08:57
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xkgV_HH_UMSbVrsUnsiYniDCCFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/26
Signature Algorithm: sha256WithRSAEncryption
8c:e5:c1:5b:67:d4:0f:e4:78:32:ef:a6:b6:68:3f:a4:e1:04:
3e:63:f4:b3:be:82:ef:5a:76:fb:ff:3c:a1:6c:53:6c:54:42:
ed:d0:84:9b:1b:1d:17:72:a8:49:70:b3:58:eb:bf:27:89:a7:
c0:bc:21:16:15:bc:76:c2:1a:b6:d9:c8:71:ac:9c:25:6f:94:
df:a1:b3:d3:cb:6d:43:f0:4d:cf:46:57:6a:f0:16:d2:06:6c:
27:95:12:f4:6e:01:2e:df:97:c5:ff:58:90:dc:e8:d4:ed:37:
f2:e4:ef:56:13:2b:ac:cf:2e:cc:3d:2d:3b:26:19:4a:61:19:
4a:b8:40:6f:d8:50:c4:1a:3d:c0:2f:83:77:c8:cd:06:28:e9:
21:37:fe:ca:e5:27:cb:66:34:20:bf:eb:e2:60:cc:91:d8:d4:
88:15:cd:eb:03:23:58:ff:ac:72:cc:ef:86:c5:c1:46:49:be:
b2:18:7b:8d:52:cf:e7:70:5c:69:45:92:06:b0:ea:62:e4:51:
4b:15:6e:63:48:8a:44:b6:db:0d:68:55:5f:74:93:02:fd:a1:
84:24:84:c3:5c:6b:32:9b:64:92:9b:3d:08:a3:f1:3d:ad:e5:
95:9c:86:06:6d:cc:c2:fc:b7:98:7a:b8:99:91:f4:ab:11:c5:
6c:58:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:06:00 2024 by rpki-client on console-fra.rpki-client.org