Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5ZgE2e3eV09KlDVinR9tB_RoTpo.roa
File: 5ZgE2e3eV09KlDVinR9tB_RoTpo.roa (raw, json)
Hash identifier: dXzj4t48x2Hgpg73KNkIloN6xlAn9qHqOJxLWoCXcZo=
Subject key identifier: E5:98:04:D9:ED:DE:57:4F:4A:94:35:62:9D:1F:6D:07:F4:68:4E:9A
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6EB7727EAA5CAD8C274A0A33EB7F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5ZgE2e3eV09KlDVinR9tB_RoTpo.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146839
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6e:b7:72:7e:aa:5c:ad:8c:27:4a:0a:33:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e59804d9edde574f4a9435629d1f6d07f4684e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:dd:12:d1:27:cd:2e:bf:fa:48:36:1e:e3:
88:21:22:7d:62:7e:a4:37:8b:e9:78:e7:cf:c2:0e:
21:7c:39:ff:5b:8b:30:7b:b2:09:0b:e5:2a:80:69:
c3:9e:aa:ef:97:d9:ca:34:bb:88:c5:d1:69:85:98:
e3:8b:1b:78:51:00:36:2d:6a:82:51:16:43:1c:26:
84:40:01:97:07:92:15:dc:6b:81:ce:b6:d0:dc:37:
82:33:2c:6e:41:79:4b:5a:b6:ac:53:3a:d4:4f:83:
b8:22:02:44:54:90:b5:fc:47:46:4c:a1:30:7d:b7:
0c:8f:28:5a:c5:af:f9:de:ce:f6:df:9e:b3:57:20:
f1:6a:7c:3e:f3:fa:f7:e5:9f:b2:21:cd:82:ca:67:
c3:63:dc:43:73:42:83:fe:04:aa:5c:52:fb:86:b3:
de:e3:66:b8:a4:0d:59:19:d7:56:d1:04:75:ee:94:
64:1f:c6:d8:4b:51:75:8e:1b:3f:e7:a1:d1:ff:e2:
32:d7:74:a1:a3:b2:53:d0:ba:45:0a:3d:a5:f0:8d:
94:cd:60:94:c9:b2:6f:e2:b5:76:2a:ed:f0:4b:82:
52:57:f2:30:8b:ef:01:ec:e2:e5:d9:46:b7:90:7a:
40:a6:58:10:62:6e:91:4e:52:66:9b:dc:7d:3b:dd:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:98:04:D9:ED:DE:57:4F:4A:94:35:62:9D:1F:6D:07:F4:68:4E:9A
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5ZgE2e3eV09KlDVinR9tB_RoTpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
21:87:12:a9:98:de:5a:ed:f6:cd:5c:00:45:a4:79:85:4b:75:
4e:f1:b9:f5:03:3a:2d:31:d3:a5:31:4c:a1:a2:2c:97:8f:14:
8a:03:ef:de:ff:ce:d9:b8:b0:98:77:26:74:e8:1d:2e:8c:28:
c1:fb:83:35:62:a0:1f:a2:7e:c2:8c:75:11:10:ca:c3:77:2e:
b4:56:63:de:11:b5:50:16:7c:0e:fb:50:ed:85:62:b2:dc:05:
51:72:a3:d4:94:ea:23:5e:c4:59:66:db:4f:7e:4c:fb:7b:2a:
c5:7b:cf:90:f3:cb:bd:00:b9:98:3e:87:e4:99:ff:19:a7:fb:
96:9d:74:a7:89:12:78:80:3a:e1:a2:cc:2f:9b:50:a8:34:e1:
d9:0d:51:5d:48:88:20:32:8c:d1:99:86:0a:ad:35:48:83:18:
34:3a:fc:49:36:94:fe:60:b7:28:73:24:10:4f:68:cf:45:41:
18:a1:35:2f:88:01:97:cb:e1:f8:77:d2:41:e6:29:bc:ee:2a:
0c:ff:6c:cc:d8:a7:ce:7f:a9:76:05:22:c3:b2:d6:0e:fc:cd:
7e:11:9e:3e:53:82:ea:5b:5b:81:8c:47:2c:86:54:bc:03:5e:
59:6c:43:9f:7f:6b:af:eb:5a:99:67:52:7b:b7:48:50:ac:58:
3a:63:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:35:29 2024 by rpki-client on console-ams.rpki-client.org