Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/VgMGztS-twAdTFkbN3TxrsO5fhI.roa
File: VgMGztS-twAdTFkbN3TxrsO5fhI.roa (raw, json)
Hash identifier: uyVKhk065hRLLg4EZwMmHajeM2olP3irhlyMcY3ksCw=
Subject key identifier: 56:03:06:CE:D4:BE:B7:00:1D:4C:59:1B:37:74:F1:AE:C3:B9:7E:12
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019344155B6A9B4EBE98309B13AB5EAA28AE
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/VgMGztS-twAdTFkbN3TxrsO5fhI.roa
Signing time: Tue 19 Nov 2024 11:01:10 +0000
ROA not before: Tue 19 Nov 2024 11:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12618
IP address blocks: 46.238.192.0/19 maxlen: 24
46.238.224.0/22 maxlen: 22
46.238.228.0/22 maxlen: 22
46.238.232.0/24 maxlen: 24
46.238.234.0/23 maxlen: 23
46.238.239.0/24 maxlen: 24
46.238.248.0/21 maxlen: 21
46.239.144.0/20 maxlen: 20
46.239.160.0/20 maxlen: 20
89.191.144.0/20 maxlen: 24
94.141.128.0/19 maxlen: 19
212.122.216.0/22 maxlen: 22
212.122.220.0/22 maxlen: 22
2001:90c::/31 maxlen: 31
2001:90e::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:15:5b:6a:9b:4e:be:98:30:9b:13:ab:5e:aa:28:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Nov 19 11:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=560306ced4beb7001d4c591b3774f1aec3b97e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:ea:80:4b:fe:fd:f2:e5:be:25:d1:07:ec:
f5:78:49:67:1c:11:29:72:fb:6e:1d:77:c3:a6:df:
4b:63:d8:a8:10:53:5d:19:bd:a0:db:8b:18:fb:2e:
e8:b8:d2:ce:b0:58:ad:48:4b:7e:ec:af:7f:fd:c2:
c4:42:0e:30:3d:b8:ed:3f:da:0d:f5:42:d2:24:31:
d6:a6:e5:12:d7:d9:fc:11:b7:87:83:f5:b6:73:6d:
03:c4:80:2a:7c:36:7c:05:cb:ed:95:f4:84:77:24:
92:49:d5:24:e9:26:fe:6b:cb:64:6e:7b:07:ff:3d:
fd:5d:9c:90:61:71:b3:41:d0:60:08:6c:7d:01:af:
12:9e:65:2f:5a:56:d8:5d:e7:d1:c8:7d:5c:7d:2d:
92:3a:20:15:af:ed:ee:c8:60:15:9a:fd:01:39:2b:
60:fb:6c:0f:80:65:19:72:2e:bb:32:4a:6e:bb:95:
f9:1f:11:87:21:7b:18:ba:59:6c:ff:0e:2e:e5:96:
e7:b5:0b:fc:66:f4:37:d0:a7:6a:a6:94:1b:ce:fa:
73:0d:d5:e1:e9:c8:53:bd:65:4d:8b:80:fb:d0:5b:
e1:3a:57:ea:d2:87:8d:ef:0b:03:84:b4:fb:61:6a:
25:7d:7f:aa:0e:6b:39:8f:f6:9f:18:f8:d7:17:22:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:03:06:CE:D4:BE:B7:00:1D:4C:59:1B:37:74:F1:AE:C3:B9:7E:12
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/VgMGztS-twAdTFkbN3TxrsO5fhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.192.0-46.238.232.255
46.238.234.0/23
46.238.239.0/24
46.238.248.0/21
46.239.144.0-46.239.175.255
89.191.144.0/20
94.141.128.0/19
212.122.216.0/21
IPv6:
2001:90c::-2001:90e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:60:5d:26:e7:ee:f0:28:62:dd:fd:4f:50:80:bb:54:df:5e:
5b:da:2d:47:9b:34:59:13:de:47:4c:92:dc:85:ef:2e:71:25:
2a:16:d0:a8:4f:ae:ab:16:e5:12:8c:9e:24:a5:6f:58:5e:13:
02:f3:0c:63:07:32:b2:93:36:4a:f8:d3:a5:70:7e:5b:b3:24:
b3:80:ea:7b:b5:13:11:a8:d7:ed:47:c0:9f:d6:7a:8e:89:e2:
fa:b5:56:bb:78:e1:b6:ba:60:e9:d6:74:45:29:31:fb:cd:7a:
cc:1a:46:ab:b9:f3:d3:21:1f:50:d6:f9:19:1c:04:eb:85:c0:
97:05:67:c5:81:a6:ed:91:b4:f0:a8:a5:87:16:6f:da:ef:d5:
a3:4c:82:1a:3f:09:c8:4d:5d:ff:27:28:81:29:ff:35:86:c2:
5c:d4:79:96:1a:7a:d8:b6:9b:be:41:fd:24:37:2a:c7:41:c7:
f0:95:34:c8:3a:7c:e4:46:a6:84:92:12:e6:c7:0b:c4:dd:63:
29:64:3d:85:27:2e:a6:63:76:51:19:97:81:6f:e3:81:cd:2f:
b3:6e:20:c9:9c:8b:37:d9:63:88:86:fc:27:5a:06:e8:4e:96:
0f:8a:69:c9:47:c5:0c:b6:86:08:66:67:b0:82:71:92:2d:64:
57:1c:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:05 2024 by rpki-client on console-ams.rpki-client.org