Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/2BYD8DCOWXMfrD4ngWAhWfhD8UM.roa
File: 2BYD8DCOWXMfrD4ngWAhWfhD8UM.roa (raw, json)
Hash identifier: O6V1lmEL5GM2/cUI6RmDA1sH5ifn1W24Aoa2bUYbG+0=
Subject key identifier: D8:16:03:F0:30:8E:59:73:1F:AC:3E:27:81:60:21:59:F8:43:F1:43
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 01903B77A1E915DF2461639547814ACB6E7A
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/2BYD8DCOWXMfrD4ngWAhWfhD8UM.roa
Signing time: Fri 21 Jun 2024 15:43:34 +0000
ROA not before: Fri 21 Jun 2024 15:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210560
IP address blocks: 46.243.146.0/23 maxlen: 23
46.243.146.0/24 maxlen: 24
2a11:f740:2::/48 maxlen: 48
2a11:f740:20::/44 maxlen: 44
2a11:f740:20::/48 maxlen: 48
2a11:f740:21::/48 maxlen: 48
2a11:f740:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:77:a1:e9:15:df:24:61:63:95:47:81:4a:cb:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Jun 21 15:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d81603f0308e59731fac3e2781602159f843f143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:49:20:09:6e:64:77:33:36:13:d1:59:99:
92:24:a1:ad:aa:6c:d3:55:ae:82:62:f7:4f:02:99:
05:8c:46:57:6a:0c:17:14:d1:09:18:79:f3:a0:88:
64:e6:ca:49:a8:36:c1:f4:2f:50:87:73:27:49:84:
69:8d:a3:01:71:4f:ab:2b:02:8e:c2:a5:61:55:28:
72:76:f5:ef:f6:8f:3a:86:b4:d6:c2:41:17:32:8b:
cf:d1:d7:fd:b3:84:d5:ed:4f:f8:fe:1d:86:d3:e9:
f5:3e:69:83:f5:62:8c:37:61:1e:98:bc:83:d3:ce:
06:47:61:a9:ae:a6:a8:66:1e:53:45:4b:fd:3d:31:
5c:c7:47:e2:b0:93:a5:ab:5a:44:f9:0b:0b:b6:c5:
42:45:0a:00:05:08:60:56:6f:b8:0c:0c:34:0b:e1:
a2:3d:f2:e6:1a:2d:ae:54:ab:4c:a8:3f:66:47:15:
20:e2:97:c9:af:bf:9d:35:28:79:47:fd:5d:9a:17:
6d:99:8b:08:b2:49:fa:3b:d6:4a:a4:87:d5:7e:f1:
5c:47:10:b4:c5:22:97:56:34:45:da:43:1a:a6:00:
44:ce:c4:ad:cf:ea:bd:29:0a:0f:0c:55:76:0e:d7:
c3:fe:e8:f2:ad:d5:75:4d:87:7f:d7:5c:39:ae:49:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:16:03:F0:30:8E:59:73:1F:AC:3E:27:81:60:21:59:F8:43:F1:43
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/2BYD8DCOWXMfrD4ngWAhWfhD8UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.146.0/23
IPv6:
2a11:f740:2::/48
2a11:f740:20::/44
Signature Algorithm: sha256WithRSAEncryption
54:70:5d:ce:9c:7f:02:58:69:a4:ff:f0:49:20:49:30:5b:39:
cd:57:d1:cd:ff:6e:85:e7:41:e5:6d:8b:9a:46:a2:b4:6a:68:
8b:1e:8a:fe:59:37:14:16:b4:e6:a3:7a:6c:b0:fa:ae:28:70:
c4:21:a1:24:73:5a:b4:ba:8e:86:30:78:c5:79:30:12:f0:87:
3e:c0:f2:e0:38:cd:29:92:cb:23:51:32:c1:b8:fb:a2:23:2b:
2b:9c:f7:83:24:9d:66:8c:bc:46:3c:69:21:db:7b:f3:b5:55:
55:bf:63:e6:a8:44:bf:de:b8:1e:4c:dd:b3:84:c4:7a:53:98:
62:f3:53:fd:07:16:72:51:30:bd:81:48:b2:b6:e5:fa:36:b0:
71:54:39:19:39:22:fb:36:f1:f2:77:a3:9e:f6:80:c2:c5:2b:
9e:a6:1d:b1:60:a2:79:db:4f:48:fb:c0:33:b7:c3:87:36:d7:
78:b2:6f:75:19:d4:68:1b:6d:d7:88:7f:53:cc:e9:06:32:b7:
7a:ac:08:30:3d:56:6f:ef:15:71:cf:b2:e2:f4:e4:1a:c8:85:
88:d8:d5:3f:cd:4f:6d:40:ac:bc:2d:a2:b4:8e:b3:a1:c5:bd:
24:d9:7c:e2:4b:e9:1f:81:f7:99:98:f3:c3:a0:a7:06:aa:4d:
66:a7:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:40:38 2024 by rpki-client on console-fra.rpki-client.org