Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/tK94GAp3hNOP7jKGpFoIPqktjRs.roa
File: tK94GAp3hNOP7jKGpFoIPqktjRs.roa (raw, json)
Hash identifier: dj52wX6TGijNkdB9W4ir1PFY2MrCyctUXexQn4L135k=
Subject key identifier: B4:AF:78:18:0A:77:84:D3:8F:EE:32:86:A4:5A:08:3E:A9:2D:8D:1B
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 018CCA2A0D9ECD02C4AB921B8E0B29EF60C4
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/tK94GAp3hNOP7jKGpFoIPqktjRs.roa
Signing time: Tue 02 Jan 2024 12:33:22 +0000
ROA not before: Tue 02 Jan 2024 12:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52140
IP address blocks: 46.255.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0d:9e:cd:02:c4:ab:92:1b:8e:0b:29:ef:60:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Jan 2 12:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4af78180a7784d38fee3286a45a083ea92d8d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:21:6b:18:11:9c:fd:f4:08:76:7c:a8:56:
a2:89:bf:d8:45:12:57:f5:6d:59:af:d6:43:77:c5:
a6:59:95:9c:b6:71:6b:24:b3:2b:1d:2c:9f:06:a7:
3b:ee:97:36:7a:be:91:d7:4b:0d:a0:d2:3a:4a:28:
65:12:c5:c2:31:2f:08:c0:8a:f2:75:30:8a:03:12:
a3:ce:0d:70:1b:ae:12:c5:80:5c:19:a6:19:16:fd:
07:ce:2b:07:30:7f:d6:fe:26:fa:b6:33:d1:4a:57:
15:46:a9:f7:4d:e8:4f:30:d0:1f:a7:86:50:1c:f2:
f3:19:bb:d2:11:6e:1d:06:28:7d:f4:a6:95:a2:26:
65:cf:68:0a:4c:30:b0:47:ad:0c:7a:8a:73:f9:c5:
d8:d9:dd:df:7b:fb:a2:3a:8c:62:25:45:7d:61:67:
ba:cd:59:6a:1f:29:16:49:0c:7c:b9:36:cb:d5:28:
30:19:af:fe:79:78:02:97:e1:56:ad:9c:ea:a6:76:
c1:79:be:80:c0:88:bb:81:6c:6d:ac:28:28:1c:7d:
a8:a4:00:90:23:3d:59:cc:2e:a1:df:ba:20:5a:ad:
82:12:6d:d9:eb:de:08:21:3c:15:60:2a:0f:84:73:
87:16:46:d0:15:61:d6:54:e7:a0:1d:52:00:5b:80:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:78:18:0A:77:84:D3:8F:EE:32:86:A4:5A:08:3E:A9:2D:8D:1B
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/tK94GAp3hNOP7jKGpFoIPqktjRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.216.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:ca:db:3e:8c:e0:ec:a9:c6:dc:71:a1:4b:24:61:e5:92:72:
9e:26:20:22:8a:26:42:e8:91:04:7b:cf:aa:3b:d7:01:33:e9:
03:44:98:f5:56:b2:db:57:01:83:3c:39:0b:84:2b:79:62:98:
46:d8:a3:d6:33:4f:dd:90:80:5f:71:f8:c4:3b:b4:f4:59:d5:
aa:ad:d6:e4:09:10:0f:a6:c5:c2:4c:ee:7d:2a:3b:0c:52:59:
29:b1:cc:8b:8d:af:09:cb:ba:54:c4:21:9c:54:cd:cc:22:da:
b2:10:6a:75:5b:cb:0d:81:22:1d:6a:46:24:d8:3e:4f:3a:f8:
93:86:bf:eb:3a:9f:7f:3d:df:44:5c:a4:e5:ce:38:10:98:9d:
14:a7:49:4b:bb:33:a1:7d:96:d5:c3:ea:30:0f:11:8f:e1:c4:
ce:bb:26:db:e2:79:b5:0e:8e:05:ca:f0:37:c5:df:0a:0c:60:
c4:c4:93:f8:d5:10:48:62:0e:20:71:35:43:6b:01:b6:c6:d6:
4d:b0:a8:ce:0c:2a:63:63:ae:a4:68:06:db:5a:b7:d9:71:7d:
0d:c7:43:82:fc:47:72:b7:2c:1e:50:8a:3c:d1:17:55:fe:71:
f9:a8:21:10:b4:5f:58:9f:f5:b3:d7:c0:05:dd:8d:30:ce:f5:
a5:ab:d6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:55:39 2024 by rpki-client on console-fra.rpki-client.org