Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/1-xr8bIRpOz4rnaulyPryleaA3fs.roa
File: 1-xr8bIRpOz4rnaulyPryleaA3fs.roa (raw, json)
Hash identifier: cYTpfTuubJUPPVJVeYeu3LEg0cSKaTegYtDvBPLiSY4=
Subject key identifier: FB:1A:FC:6C:84:69:3B:3E:2B:9D:AB:A5:C8:FA:F2:95:E6:80:DD:FB
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018CC5003D3572864A6F00F16CB3CB40FE03
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/1-xr8bIRpOz4rnaulyPryleaA3fs.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16273
IP address blocks: 46.228.128.0/24 maxlen: 24
46.228.128.0/23 maxlen: 24
46.228.129.0/24 maxlen: 24
46.228.130.0/24 maxlen: 24
46.228.131.0/24 maxlen: 24
46.228.132.0/23 maxlen: 23
46.228.134.0/24 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.134.0/23 maxlen: 23
46.228.141.0/24 maxlen: 24
46.228.143.0/24 maxlen: 24
193.110.108.0/23 maxlen: 23
193.110.108.0/24 maxlen: 24
2a03:7800:a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 20:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3d:35:72:86:4a:6f:00:f1:6c:b3:cb:40:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb1afc6c84693b3e2b9daba5c8faf295e680ddfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:9d:5b:4d:db:f9:79:e7:37:f9:dc:a6:0f:
79:e4:14:ac:f1:61:35:68:a3:95:de:cc:4c:ec:eb:
a4:76:01:32:25:77:9f:15:5f:68:59:4c:b0:94:a8:
0e:aa:f5:ee:9d:b7:e3:88:1f:dd:61:5c:cb:b0:1d:
dc:aa:61:57:54:4f:fd:e9:29:aa:37:70:ba:f8:19:
38:09:a2:aa:73:b2:49:df:70:5a:2f:c6:a9:1f:4a:
ca:b1:56:0e:fd:ba:f9:cf:ff:db:f8:2d:c4:80:9d:
f0:28:c3:0a:47:fe:93:9e:a8:07:94:9d:03:a2:ff:
fb:a9:9e:ae:2d:9e:88:b8:d9:21:fb:c6:60:d0:49:
ec:ad:59:7a:5f:83:10:ca:c1:91:f8:95:5d:23:6a:
eb:dc:5e:fc:78:de:c5:14:2d:5c:86:73:8c:b1:b1:
c7:c1:dc:0f:72:ce:12:48:61:70:56:76:07:f3:91:
00:df:77:9f:05:77:1c:18:a1:5a:33:9c:3d:75:12:
09:de:dc:a6:06:ad:e8:e9:33:0c:86:79:8e:02:1c:
a2:ad:eb:45:12:c1:31:50:85:02:55:91:5b:81:95:
15:25:57:5a:be:5a:41:80:c1:b1:9c:35:4a:9c:08:
33:f1:c0:04:da:fe:c6:e2:71:4e:5b:89:95:f2:b9:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1A:FC:6C:84:69:3B:3E:2B:9D:AB:A5:C8:FA:F2:95:E6:80:DD:FB
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/1-xr8bIRpOz4rnaulyPryleaA3fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.128.0/21
46.228.141.0/24
46.228.143.0/24
193.110.108.0/23
IPv6:
2a03:7800:a00::/40
Signature Algorithm: sha256WithRSAEncryption
79:28:2d:b0:42:45:16:09:8d:fd:09:d4:af:4b:04:f5:65:1b:
eb:67:72:ea:3f:c6:2f:42:d6:b8:71:b1:7d:7e:1a:de:e8:8e:
36:d2:bf:51:2a:da:c0:22:7c:c1:44:bf:fa:7e:64:37:c5:78:
41:6b:cc:dc:7a:60:0a:71:5d:10:f0:9c:57:71:09:1b:15:0c:
94:c2:88:c2:93:6a:c6:e3:f2:f5:cf:85:45:20:73:1d:0c:28:
a0:d5:39:68:ba:86:72:07:dc:cd:be:57:e8:11:f9:c6:20:0e:
27:3a:bf:cd:90:49:6a:71:a5:0c:a0:28:99:9b:68:b0:1b:c2:
5e:21:92:03:ab:3b:c5:61:78:18:48:f6:fd:f8:ee:51:e1:ce:
ac:02:45:7a:19:88:ee:b1:93:60:ff:96:2b:0c:65:44:77:ce:
8b:b3:d1:fc:4b:69:6f:cc:13:ae:f7:fe:5d:86:f1:2c:88:1b:
5f:e4:dd:38:1f:bc:55:b5:31:45:d7:49:b2:28:b6:ad:06:3c:
bc:43:d6:8c:58:fb:32:a7:24:50:72:6a:8b:f6:f4:c6:a6:90:
60:b0:c3:18:72:ab:4e:a7:a2:9a:16:10:bd:25:e9:b8:08:bc:
ef:8f:da:af:f2:1a:35:e9:fc:b5:ec:24:fe:c2:4a:90:83:b5:
d7:ce:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 03:39:11 2024 by rpki-client on console-fra.rpki-client.org