Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pJbAMcK3LKBdaBvvubQGBDRl000.roa
File: pJbAMcK3LKBdaBvvubQGBDRl000.roa (raw, json)
Hash identifier: dzPHNMHShQ14u+c+TeCsYXriftE9+O1x+IkjANkEyJM=
Subject key identifier: A4:96:C0:31:C2:B7:2C:A0:5D:68:1B:EF:B9:B4:06:04:34:65:D3:4D
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018FB43942C3D778769EAB1E7B0ABB36209A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pJbAMcK3LKBdaBvvubQGBDRl000.roa
Signing time: Sun 26 May 2024 09:26:42 +0000
ROA not before: Sun 26 May 2024 09:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215535
IP address blocks: 46.38.132.0/24 maxlen: 24
46.38.133.0/24 maxlen: 24
46.38.134.0/24 maxlen: 24
46.38.135.0/24 maxlen: 24
46.38.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b4:39:42:c3:d7:78:76:9e:ab:1e:7b:0a:bb:36:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 26 09:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a496c031c2b72ca05d681befb9b406043465d34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:7b:a2:6e:4c:44:30:bf:36:d1:09:d8:da:
d6:f6:21:f5:e5:f8:30:5e:35:a0:9e:89:54:0b:ba:
0f:55:8d:aa:e8:34:70:fc:17:45:05:18:e2:89:81:
90:b5:68:e7:65:5c:70:02:19:26:db:62:c4:bf:58:
13:29:29:ef:e4:29:30:e3:a2:d9:df:d6:7d:93:2a:
c4:b7:55:ea:a9:9f:63:08:47:1b:81:02:cc:75:00:
e1:3e:23:c6:05:a4:87:a8:7a:1f:ed:ff:2b:9b:8b:
f3:29:dd:7c:e1:e1:68:ac:ef:67:45:49:9a:0a:d4:
c1:17:c7:9a:2f:0a:3a:56:bc:3a:6b:c1:5e:cf:1b:
f1:4e:7a:56:68:b5:80:06:51:19:34:4a:1c:2f:f1:
52:fd:ff:4e:62:08:62:3c:0f:11:83:48:e1:ec:1c:
e9:30:2e:02:58:81:39:f1:23:00:e5:05:0e:8b:d4:
db:1f:d3:85:f3:40:cf:a1:63:90:e5:4a:cb:a4:70:
44:9a:06:89:d3:c4:1c:52:e2:ca:aa:5a:b5:00:3c:
20:b8:83:71:9c:a4:b6:93:c9:41:4d:c3:c8:5a:ac:
0d:61:b5:11:5d:49:cb:b1:12:39:2d:d0:29:b6:bd:
cf:ef:d0:6d:0a:62:69:44:e6:1b:51:c4:89:10:ab:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:96:C0:31:C2:B7:2C:A0:5D:68:1B:EF:B9:B4:06:04:34:65:D3:4D
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pJbAMcK3LKBdaBvvubQGBDRl000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.132.0/22
46.38.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1f:c9:63:99:e7:8a:dd:dc:e6:60:ec:31:9a:5d:bc:48:3c:
8d:28:a7:14:42:a2:33:34:71:5d:a4:74:62:c7:ac:4c:49:ae:
39:49:37:f7:1d:d6:d7:3a:64:a2:bd:26:cf:33:31:d9:e3:3d:
46:5d:fd:33:35:54:84:70:92:89:5b:cc:d8:24:3c:92:42:49:
cc:d0:f1:72:40:7c:c5:e0:bc:71:ff:5e:b7:fc:77:50:9f:b0:
19:65:0a:39:78:d6:e2:42:06:b0:6c:76:48:a9:43:38:32:16:
f1:2b:7c:67:b8:ef:f1:0a:0b:cd:11:2f:63:67:42:ac:d0:e6:
ee:6b:33:57:c8:09:50:41:4a:df:3d:5b:b8:89:28:75:c6:b9:
e4:4e:49:74:8a:c9:9c:88:df:b9:9b:04:e0:7c:2e:1c:54:7b:
70:df:0d:bd:7d:1d:7d:cf:25:f6:4c:84:76:eb:29:16:b6:94:
18:5a:8d:ae:7d:bf:f3:92:69:7e:a4:05:b4:26:52:6c:d2:99:
c5:b8:10:b1:8a:6b:40:5d:4f:00:f4:f3:70:bc:b5:6d:45:55:
07:67:0e:6b:6d:09:b7:4a:b6:32:77:ac:24:c6:3f:3f:f9:be:
65:12:07:77:ab:f3:41:19:06:62:a2:82:3d:92:af:5c:de:68:
d2:24:ff:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+0OULD13h2nqseewq7NiCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwNTI2MDkyNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDk2YzAzMWMyYjcyY2EwNWQ2ODFiZWZiOWI0MDYwNDM0NjVkMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42N7om5MRDC/NtEJ2NrW9iH15fgw
XjWgnolUC7oPVY2q6DRw/BdFBRjiiYGQtWjnZVxwAhkm22LEv1gTKSnv5Ckw46LZ
39Z9kyrEt1XqqZ9jCEcbgQLMdQDhPiPGBaSHqHof7f8rm4vzKd184eForO9nRUma
CtTBF8eaLwo6Vrw6a8FezxvxTnpWaLWABlEZNEocL/FS/f9OYghiPA8Rg0jh7Bzp
MC4CWIE58SMA5QUOi9TbH9OF80DPoWOQ5UrLpHBEmgaJ08QcUuLKqlq1ADwguINx
nKS2k8lBTcPIWqwNYbURXUnLsRI5LdAptr3P79BtCmJpROYbUcSJEKuRBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKSWwDHCtyygXWgb77m0BgQ0ZdNNMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvcEpiQU1jSzNMS0JkYUJ2dnViUUdCRFJsMDAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLiaEAwQA
LiaeMA0GCSqGSIb3DQEBCwUAA4IBAQBKH8ljmeeK3dzmYOwxml28SDyNKKcUQqIz
NHFdpHRix6xMSa45STf3HdbXOmSivSbPMzHZ4z1GXf0zNVSEcJKJW8zYJDySQknM
0PFyQHzF4Lxx/163/HdQn7AZZQo5eNbiQgawbHZIqUM4MhbxK3xnuO/xCgvNES9j
Z0Ks0ObuazNXyAlQQUrfPVu4iSh1xrnkTkl0ismciN+5mwTgfC4cVHtw3w29fR19
zyX2TIR26ykWtpQYWo2ufb/zkml+pAW0JlJs0pnFuBCximtAXU8A9PNwvLVtRVUH
Zw5rbQm3SrYyd6wkxj8/+b5lEgd3q/NBGQZiooI9kq9c3mjSJP+a
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:30 2024 by rpki-client on console-ams.rpki-client.org