Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vh9PqC6Ngv10vLfs7nbiBcPjWjc.roa
File: vh9PqC6Ngv10vLfs7nbiBcPjWjc.roa (raw, json)
Hash identifier: PZbiUVEJUzKvyO7/kuPZJ3btcjvfrz1gbVNWiL2LeF4=
Subject key identifier: BE:1F:4F:A8:2E:8D:82:FD:74:BC:B7:EC:EE:76:E2:05:C3:E3:5A:37
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01934643D4B53772FE7745DC3BF115286075
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vh9PqC6Ngv10vLfs7nbiBcPjWjc.roa
Signing time: Tue 19 Nov 2024 21:11:10 +0000
ROA not before: Tue 19 Nov 2024 21:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 46.3.64.0/20 maxlen: 20
46.3.80.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.3.96.0/19 maxlen: 19
46.3.128.0/23 maxlen: 23
46.3.160.0/20 maxlen: 20
46.3.176.0/20 maxlen: 20
46.3.216.0/21 maxlen: 21
46.232.0.0/24 maxlen: 24
46.232.16.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.232.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:43:d4:b5:37:72:fe:77:45:dc:3b:f1:15:28:60:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 19 21:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be1f4fa82e8d82fd74bcb7ecee76e205c3e35a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:72:21:c9:e0:a3:37:43:a7:b5:7c:19:61:
b0:52:62:2d:0c:5c:c8:04:9f:23:ff:9c:b2:2e:3e:
2f:af:10:67:d2:54:ea:5f:12:5b:0c:9a:45:3c:0e:
56:75:e2:93:5b:5e:fb:4a:13:85:bd:e6:e1:cb:11:
49:8c:89:49:37:17:90:32:ed:5f:2b:69:7f:34:e8:
8f:f7:d7:79:da:d3:8a:b0:c0:9b:c7:ff:9a:c2:50:
da:dd:70:f5:7f:df:43:ad:b5:6f:5a:22:88:ad:22:
90:c1:0d:64:39:93:0c:c5:7b:af:70:07:f7:73:6c:
a5:8d:b6:ca:2b:70:fa:94:2a:da:e5:cb:1f:a0:fa:
d0:a2:81:70:76:ea:03:6c:32:17:f6:ed:66:cd:f9:
13:a6:1f:36:af:a3:d1:fb:5b:17:ab:6d:b2:e2:a5:
37:f5:e0:81:14:84:d4:95:e2:6f:3a:f3:3d:37:a5:
69:6d:fe:b1:fa:f3:3d:7f:64:3c:22:2d:e0:ae:9f:
08:0b:85:8b:c2:9e:01:42:c4:61:77:50:bb:6e:bb:
71:79:2e:9b:70:0f:b6:98:4f:f4:97:30:19:f0:75:
3b:e0:59:7b:6d:00:f4:48:46:ac:91:d9:d4:8a:68:
5d:7c:07:0c:9d:33:a5:5f:9d:53:17:da:19:62:d2:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:4F:A8:2E:8D:82:FD:74:BC:B7:EC:EE:76:E2:05:C3:E3:5A:37
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vh9PqC6Ngv10vLfs7nbiBcPjWjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.64.0-46.3.129.255
46.3.160.0/19
46.3.216.0/21
46.232.0.0/24
46.232.16.0/22
46.232.32.0-46.232.127.255
Signature Algorithm: sha256WithRSAEncryption
24:08:83:fa:0f:9f:6a:4e:a2:c4:4f:32:c6:d7:3c:dd:bd:af:
f3:31:07:a2:db:87:0f:72:7b:3e:4b:3e:41:b8:cb:ab:df:5c:
a5:c3:a6:3c:5c:0c:f6:01:87:e0:f2:76:59:9a:50:94:d8:6e:
cc:e1:d3:8e:9a:de:c9:c8:64:be:3b:1b:3d:26:cf:a1:91:48:
89:d0:59:3e:10:9a:1e:e3:19:7a:f2:cb:7c:fa:9b:f0:ad:43:
2a:65:d8:e5:3d:b3:63:a7:60:df:aa:0f:c3:1b:0a:33:87:80:
97:1e:17:a6:ae:34:9e:41:3a:1e:50:9b:ec:7f:a5:3b:68:6a:
4a:04:f0:7f:06:01:aa:7a:2b:e8:a5:ae:c0:d4:a8:a4:26:7c:
ed:64:ec:6c:a4:e9:81:57:90:6d:3a:72:0c:7a:6b:da:c5:98:
fc:07:a3:19:af:a5:c9:fb:93:f7:6a:e5:6f:a2:10:52:9a:2c:
07:ea:b0:8f:8e:f4:94:25:cb:25:53:18:66:29:aa:08:dc:08:
0f:ca:86:fb:d3:6a:38:34:0d:12:4b:6b:48:6f:de:47:f8:34:
da:c1:2d:46:ba:94:c3:f9:26:f5:7f:73:07:1e:f9:0e:ac:47:
4a:2d:a3:07:db:86:63:77:d4:1a:f6:eb:ba:f2:5c:4e:16:3c:
4b:cd:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:52:05 2024 by rpki-client on console-fra.rpki-client.org