Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/oLE5YK792lmNmSw9f9GiLhPYga4.roa
File: oLE5YK792lmNmSw9f9GiLhPYga4.roa (raw, json)
Hash identifier: SSdH53udH3LELbqXHbQXc6EmTkh5Yg4ueTk2Ah/3R6w=
Subject key identifier: A0:B1:39:60:AE:FD:DA:59:8D:99:2C:3D:7F:D1:A2:2E:13:D8:81:AE
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 018CC56E7A8D231205F65E824BB9DE1D2B57
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/oLE5YK792lmNmSw9f9GiLhPYga4.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44558
IP address blocks: 46.106.192.0/24 maxlen: 24
46.106.196.0/24 maxlen: 24
46.106.193.0/24 maxlen: 24
46.106.197.0/24 maxlen: 24
46.106.194.0/24 maxlen: 24
46.106.198.0/24 maxlen: 24
46.106.195.0/24 maxlen: 24
46.106.199.0/24 maxlen: 24
46.106.200.0/24 maxlen: 24
46.106.201.0/24 maxlen: 24
46.106.203.0/24 maxlen: 24
46.106.202.0/24 maxlen: 24
46.106.209.0/24 maxlen: 24
46.106.213.0/24 maxlen: 24
46.106.208.0/24 maxlen: 24
46.106.212.0/24 maxlen: 24
46.106.211.0/24 maxlen: 24
46.106.210.0/24 maxlen: 24
46.106.217.0/24 maxlen: 24
46.106.216.0/24 maxlen: 24
46.106.215.0/24 maxlen: 24
46.106.219.0/24 maxlen: 24
46.106.214.0/24 maxlen: 24
46.106.218.0/24 maxlen: 24
46.106.221.0/24 maxlen: 24
46.106.220.0/24 maxlen: 24
46.106.223.0/24 maxlen: 24
46.106.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7a:8d:23:12:05:f6:5e:82:4b:b9:de:1d:2b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b13960aefdda598d992c3d7fd1a22e13d881ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:44:37:12:74:a7:e0:0f:13:c4:f8:9b:28:
3f:03:3a:f7:ab:22:d4:b3:e4:c1:06:fd:3b:40:a3:
3b:e3:57:04:e3:b2:ad:0a:a5:c4:b3:54:51:76:59:
b8:99:c4:5d:58:35:e7:7f:fb:87:34:e3:24:97:f3:
08:da:39:61:13:d3:c3:5a:9b:c8:8f:23:bd:60:c7:
e3:73:4a:17:b7:67:b0:b3:66:63:79:d0:19:cb:a7:
0b:ee:69:44:25:8e:33:61:4f:7b:7f:c4:ea:3a:9d:
d3:54:ed:94:72:e9:88:75:2b:9b:9b:a0:f4:2b:db:
17:28:a9:ef:b7:4e:29:09:a7:7f:7a:23:fa:26:c6:
20:86:64:55:ab:cf:bb:fc:5f:e3:ee:e1:d2:ce:ea:
cb:e8:84:dc:2b:a5:9b:b3:fe:dc:0e:b9:c5:b8:1d:
06:77:55:54:b5:a3:b0:6b:2b:b1:d3:6d:50:9c:a1:
b5:01:57:2e:77:f6:89:63:32:ed:27:7c:5e:55:e8:
b7:1b:77:35:a9:05:e4:06:b4:53:e2:67:1e:15:66:
1d:7a:48:8f:2c:64:63:98:a4:df:ea:f6:47:05:d5:
11:29:bc:45:c4:41:bc:5c:1f:91:86:63:85:46:f6:
5f:93:6d:cd:e7:27:10:f0:80:60:86:f2:07:31:f5:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:39:60:AE:FD:DA:59:8D:99:2C:3D:7F:D1:A2:2E:13:D8:81:AE
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/oLE5YK792lmNmSw9f9GiLhPYga4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.106.192.0-46.106.203.255
46.106.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:e6:1f:ce:7e:c3:e9:a5:1f:83:9e:8d:1c:6b:ef:0a:27:77:
04:93:37:1b:cc:cf:5a:9a:07:71:9d:31:ae:49:16:0d:59:f9:
95:9c:de:c5:40:e8:d3:42:ad:c8:27:72:1f:e8:88:10:99:d1:
9d:69:c2:a0:38:ee:58:8d:d4:c5:5b:1b:a6:7b:10:25:8e:9c:
90:53:44:9e:f4:a3:63:0d:3e:6e:6b:81:50:93:2c:87:18:b9:
5b:78:3a:b1:30:97:f7:34:ef:84:b8:1d:73:a1:a6:87:c0:e4:
dd:62:50:cd:b1:ba:67:fd:e8:d6:f6:e8:f0:86:52:92:aa:c3:
31:f8:84:30:26:b8:9e:de:3f:0c:12:a9:c2:df:4a:01:4c:a1:
ff:ae:89:d2:75:fd:f7:f8:6b:a1:45:a3:63:2a:49:6b:45:f5:
65:5b:9a:87:b7:c2:e0:72:6a:c8:5b:9f:b9:4b:6f:da:87:1a:
6d:04:59:df:99:9e:e7:8a:62:38:d9:8c:5e:72:2c:4f:ec:55:
85:70:ec:83:1d:5e:bd:a6:c8:5d:42:8b:70:ba:7a:0a:21:d9:
d6:f2:a4:05:ae:2a:ca:da:7c:bc:a0:44:95:cd:85:95:f2:da:
25:2a:f5:3b:68:94:c0:4e:25:28:1b:70:aa:ae:49:3e:44:11:
cd:84:60:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 7 05:57:21 2024 by rpki-client on console-ams.rpki-client.org