Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/rRlE-zjcBxlYsw7WsxHZi3Y6r7I.roa
File: rRlE-zjcBxlYsw7WsxHZi3Y6r7I.roa (raw, json)
Hash identifier: XSltUlgvHzB+Fn/wmBQDLqIP0wFAWbsINauooqCDU/c=
Subject key identifier: AD:19:44:FB:38:DC:07:19:58:B3:0E:D6:B3:11:D9:8B:76:3A:AF:B2
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018CC3B6D34610F890750F34C79B32F75759
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/rRlE-zjcBxlYsw7WsxHZi3Y6r7I.roa
Signing time: Mon 01 Jan 2024 06:29:47 +0000
ROA not before: Mon 01 Jan 2024 06:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 158.46.144.0/24 maxlen: 24
158.46.145.0/24 maxlen: 24
158.46.146.0/24 maxlen: 24
158.46.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d3:46:10:f8:90:75:0f:34:c7:9b:32:f7:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 1 06:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad1944fb38dc071958b30ed6b311d98b763aafb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8b:49:34:82:cb:02:ce:1f:cd:2a:31:dd:a9:
82:cb:b8:48:dd:10:fc:d3:ef:09:d2:a5:42:45:64:
87:91:a2:1e:57:9e:fc:88:87:ca:e0:a1:7b:f2:4e:
80:14:89:eb:be:6d:a4:d6:df:b4:66:3c:c7:10:6b:
60:5a:f9:4d:db:46:a6:eb:97:4e:16:bd:70:ca:e1:
8a:be:a7:c1:1b:48:a0:da:17:68:e4:9d:4c:d4:6f:
75:ef:d6:f2:8a:8b:c3:62:9c:7c:b9:6c:77:7f:eb:
14:21:df:8f:ad:88:54:34:f7:74:63:bc:2c:56:1d:
3c:06:74:01:37:b7:b9:3e:60:bb:40:3e:b0:07:c7:
47:cc:c5:10:bd:d5:6c:e3:34:08:76:ba:aa:42:59:
39:fd:62:f1:c5:57:3f:9f:99:e3:db:bc:44:e5:30:
f2:e3:2b:67:5d:42:ce:87:eb:4a:12:44:6b:51:06:
7b:ff:80:d5:5d:81:6c:2d:87:22:aa:15:79:47:b8:
57:87:4f:b4:38:0c:dc:23:b0:ed:8a:ac:41:01:22:
dd:f7:20:31:ce:bf:e4:02:8e:82:c7:ee:30:6e:88:
7c:56:ca:cb:18:de:57:9c:70:90:11:cb:c8:9c:1f:
7e:4b:ed:d4:22:65:50:10:0a:6d:97:4f:1a:7a:54:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:44:FB:38:DC:07:19:58:B3:0E:D6:B3:11:D9:8B:76:3A:AF:B2
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/rRlE-zjcBxlYsw7WsxHZi3Y6r7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.144.0/22
Signature Algorithm: sha256WithRSAEncryption
93:fd:4b:bc:3f:bb:3e:fb:8d:54:8c:38:7c:1f:e4:6e:69:00:
1f:bc:e3:24:7e:ae:50:cb:8d:de:f7:af:09:e3:33:de:84:56:
77:73:b2:6c:db:bc:43:87:ff:1f:0a:b2:d6:bb:d6:da:a0:23:
62:bc:69:cc:e9:45:aa:b4:21:4a:6d:4d:84:8e:b7:65:a4:fc:
a4:f5:3b:27:22:ed:f5:37:66:d2:34:63:c3:79:84:a3:d4:59:
82:d9:4f:d0:d4:73:31:6f:89:00:13:ac:27:5a:10:d0:d6:1f:
f6:4e:44:2c:ac:75:52:64:f9:82:d0:54:2a:a7:ab:dc:29:c3:
3a:d9:5a:90:b9:7a:a2:00:f1:00:36:e0:a5:7d:b0:4e:47:03:
91:b0:33:02:67:61:6b:98:0d:37:b5:6b:12:96:b1:cb:4e:05:
07:1e:79:e3:0a:12:94:2c:70:ab:64:9c:a2:a9:07:f4:de:2c:
0d:1a:50:5c:f6:57:6d:dc:43:18:72:89:d2:0e:60:36:e5:7e:
c7:53:31:e4:3b:07:bb:2f:d9:b1:d0:06:e8:3e:a0:6c:3e:07:
43:70:e0:e4:89:eb:06:01:6d:e9:39:6b:6c:80:2d:32:82:f9:
2e:a5:ea:b4:5d:46:23:b3:83:34:bb:8b:3a:e2:d1:06:ef:ea:
6d:0c:0d:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDttNGEPiQdQ80x5sy91dZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjQwMTAxMDYyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDE5NDRmYjM4ZGMwNzE5NThiMzBlZDZiMzExZDk4Yjc2M2FhZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4tJNILLAs4fzSox3amCy7hI3RD8
0+8J0qVCRWSHkaIeV578iIfK4KF78k6AFInrvm2k1t+0ZjzHEGtgWvlN20am65dO
Fr1wyuGKvqfBG0ig2hdo5J1M1G9179byiovDYpx8uWx3f+sUId+PrYhUNPd0Y7ws
Vh08BnQBN7e5PmC7QD6wB8dHzMUQvdVs4zQIdrqqQlk5/WLxxVc/n5nj27xE5TDy
4ytnXULOh+tKEkRrUQZ7/4DVXYFsLYciqhV5R7hXh0+0OAzcI7DtiqxBASLd9yAx
zr/kAo6Cx+4wboh8VsrLGN5XnHCQEcvInB9+S+3UImVQEAptl08aelQRzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK0ZRPs43AcZWLMO1rMR2Yt2Oq+yMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvclJsRS16amNCeGxZc3c3V3N4SFppM1k2cjdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCni6QMA0G
CSqGSIb3DQEBCwUAA4IBAQCT/Uu8P7s++41UjDh8H+RuaQAfvOMkfq5Qy43e968J
4zPehFZ3c7Js27xDh/8fCrLWu9baoCNivGnM6UWqtCFKbU2EjrdlpPyk9TsnIu31
N2bSNGPDeYSj1FmC2U/Q1HMxb4kAE6wnWhDQ1h/2TkQsrHVSZPmC0FQqp6vcKcM6
2VqQuXqiAPEANuClfbBORwORsDMCZ2FrmA03tWsSlrHLTgUHHnnjChKULHCrZJyi
qQf03iwNGlBc9ldt3EMYconSDmA25X7HUzHkOwe7L9mx0AboPqBsPgdDcODkiesG
AW3pOWtsgC0ygvkupeq0XUYjs4M0u4s64tEG7+ptDA1r
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:44:26 2024 by rpki-client on console-ams.rpki-client.org