Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/Jrzm1M3N7X6QjNQNPoJ66lrL5QU.roa
File: Jrzm1M3N7X6QjNQNPoJ66lrL5QU.roa (raw, json)
Hash identifier: 2hOB1kOEUOARTAuiBcdHniy2ISEdo89ab+byPOFJtHo=
Subject key identifier: 26:BC:E6:D4:CD:CD:ED:7E:90:8C:D4:0D:3E:82:7A:EA:5A:CB:E5:05
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 018CC2DAE1FC334547CB27C0E822A89FF7C2
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/Jrzm1M3N7X6QjNQNPoJ66lrL5QU.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35588
IP address blocks: 46.33.48.0/22 maxlen: 22
46.33.48.0/21 maxlen: 24
46.33.52.0/22 maxlen: 24
46.33.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e1:fc:33:45:47:cb:27:c0:e8:22:a8:9f:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26bce6d4cdcded7e908cd40d3e827aea5acbe505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:b4:78:e4:c9:20:04:17:6f:ac:e4:82:f5:
da:8f:f2:b1:dc:67:1a:02:ef:03:7d:21:88:1e:9d:
7a:87:b5:84:11:25:e8:73:ac:ad:cb:36:d8:c2:fb:
25:3a:c1:0e:b7:00:27:c5:a3:da:7e:92:b5:27:aa:
7c:89:07:31:39:02:20:cd:ac:7f:fe:4b:e5:c0:7e:
20:32:61:f0:29:be:9e:a7:cf:e8:a9:1a:58:03:f7:
e9:9e:c0:c9:87:64:04:f6:16:b0:e2:b8:a5:b3:75:
57:75:8f:ed:40:8a:12:cd:c1:94:34:f2:b3:54:80:
11:9b:b1:86:3e:22:28:9b:c3:a7:b5:ec:c0:3d:40:
9b:f0:f5:06:73:8e:15:9a:4f:1f:d7:55:e7:c7:b7:
ef:b3:15:26:1a:9b:44:86:c9:a6:d8:82:32:b2:d0:
c6:9e:bf:df:d7:b5:a2:11:ab:b3:1f:38:94:78:db:
8a:14:8f:7b:ce:c4:c6:41:64:07:3f:06:fb:d1:20:
93:53:a1:7b:d0:d2:82:68:05:ba:1d:84:b2:23:68:
fc:0a:ca:d6:be:98:92:ad:e8:38:32:eb:d6:db:a1:
d7:b2:cc:a7:d4:c7:8f:32:af:05:a8:a6:01:93:44:
d5:95:6a:2c:ad:7d:4f:fd:74:91:f6:7f:af:87:41:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BC:E6:D4:CD:CD:ED:7E:90:8C:D4:0D:3E:82:7A:EA:5A:CB:E5:05
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/Jrzm1M3N7X6QjNQNPoJ66lrL5QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.48.0/21
Signature Algorithm: sha256WithRSAEncryption
82:fd:38:aa:29:7d:f4:ac:af:05:57:96:63:46:92:63:0d:80:
fa:c9:47:bf:d3:69:3a:6f:50:8f:38:6d:ae:95:24:51:e2:f8:
b6:29:e3:c7:9a:ae:7e:ab:5f:7f:30:5d:46:24:d2:36:1d:31:
38:76:22:32:6a:ed:a6:6b:d8:6e:c3:e9:9c:e3:32:18:cf:8f:
46:69:aa:6e:02:0f:ec:ee:10:20:5d:1f:a0:eb:9f:d7:0f:5b:
89:c3:6d:e7:23:e9:8e:5b:9e:d1:ee:d3:46:2b:ea:6f:87:84:
53:16:3c:d7:60:29:98:fb:75:52:0f:57:6e:23:08:24:ce:6c:
cf:61:41:bc:92:cd:74:31:2a:64:00:e3:46:2c:a4:20:ce:2c:
a9:af:59:7e:18:08:c1:f1:2a:e1:94:17:20:da:ea:d1:9f:a8:
0e:7f:a2:72:5d:8a:c2:4c:7f:b2:3e:89:a6:9f:7b:8b:37:af:
16:47:34:04:bd:ca:7a:1f:07:42:7b:6c:dd:0e:a8:c4:cd:74:
df:4f:c4:da:97:f6:da:9e:51:7b:77:88:7c:47:3b:ca:e2:03:
30:ca:91:80:8c:ff:b8:62:25:71:b6:98:f9:6f:c4:f4:ef:db:
a1:f1:43:c6:84:b3:ae:9c:55:c6:c2:72:6b:87:0c:c4:28:03:
10:5c:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 10:04:31 2024 by rpki-client on console-ams.rpki-client.org