Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ARMLjfYRQi8xmTGuCk670_9-D_A.roa
File: ARMLjfYRQi8xmTGuCk670_9-D_A.roa (raw, json)
Hash identifier: IEtlNSvnPuIv59RqMZuHD2NVNCQTajVno6QYzyTMaYU=
Subject key identifier: 01:13:0B:8D:F6:11:42:2F:31:99:31:AE:0A:4E:BB:D3:FF:7E:0F:F0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E8FD591D2C4AFF7882783941573B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ARMLjfYRQi8xmTGuCk670_9-D_A.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 46.3.8.0/22 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e8:fd:59:1d:2c:4a:ff:78:82:78:39:41:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01130b8df611422f319931ae0a4ebbd3ff7e0ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:ea:18:42:2c:93:51:05:20:8e:9a:ac:8e:
41:e8:7b:ac:3a:14:f1:15:0c:79:f7:7f:28:a8:c9:
4e:86:7d:71:53:da:5d:95:99:9d:89:8a:db:5f:1e:
75:f2:76:50:98:d7:b5:44:a0:61:6e:83:1f:ae:f6:
f9:64:1b:8e:63:46:fe:38:ac:7b:f5:46:4c:db:55:
57:1d:58:91:73:88:9f:38:7c:08:e0:e0:a1:a1:30:
91:91:f4:9b:77:ea:35:14:68:af:05:a5:8b:11:f2:
4d:20:58:27:bc:94:b2:4a:2d:12:8d:52:db:3e:e4:
56:42:09:67:af:c7:fe:81:91:61:e7:c0:27:17:ab:
e4:36:02:b9:7e:a6:cd:4e:bd:26:e5:66:b7:31:d8:
c2:ab:46:cd:da:20:5f:2c:1e:e0:2b:ee:c0:ac:13:
37:68:57:ca:29:0c:c7:41:95:0b:4a:93:c0:06:92:
f5:45:b7:7d:14:52:82:ae:67:bb:39:16:80:d6:9f:
99:8e:fd:ea:73:64:6b:d1:0b:b5:1b:94:33:1f:a3:
51:b6:57:13:ea:0c:3b:77:95:87:c3:10:34:94:ad:
ae:bc:b5:94:02:32:52:c7:27:3c:23:82:45:0d:94:
79:b8:dc:0c:15:15:c0:23:98:23:9a:22:58:8e:1e:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:0B:8D:F6:11:42:2F:31:99:31:AE:0A:4E:BB:D3:FF:7E:0F:F0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ARMLjfYRQi8xmTGuCk670_9-D_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/22
46.3.80.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.208.0/21
149.126.203.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
77:97:fa:e8:f8:4a:32:3c:59:dc:39:47:ae:5b:68:01:91:68:
3c:6e:99:47:2a:91:a0:48:2f:ee:67:88:7b:d6:cb:1c:53:6a:
ee:38:55:a1:86:47:fe:60:7d:ad:a1:b9:4b:db:07:05:7a:15:
31:9a:3d:b9:40:95:96:be:52:b9:ec:71:88:25:02:b5:b5:78:
db:fd:b1:b6:f4:6c:fa:74:e9:0b:4f:f9:c4:4b:75:23:b0:9c:
7b:45:9a:14:93:d2:a1:92:5f:7a:2a:04:b7:20:14:46:b6:eb:
b2:63:f2:73:51:b1:50:dd:91:a2:aa:94:30:5f:6f:39:47:5f:
01:4b:0c:a7:63:05:cd:ed:92:14:81:7c:c4:21:1b:be:6f:e4:
c6:b1:8a:d9:25:25:18:0e:01:78:2a:e3:cf:ab:2f:71:0b:e0:
ae:38:07:18:f6:be:7b:5b:8a:ce:c8:27:cb:6a:c0:b2:37:d9:
50:37:eb:9a:a6:25:f8:49:ff:05:ab:51:6d:54:93:95:36:ff:
d6:48:90:25:d2:a0:31:e0:70:e8:84:18:be:8c:12:23:d5:b2:
b8:f7:e6:fb:87:50:28:4b:ba:90:a6:37:14:a7:b7:8c:b2:e3:
12:ff:4d:79:0e:5d:2c:cf:28:d5:40:62:8d:13:92:38:e6:30:
1c:20:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:35 2025 by rpki-client