Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/Xhn2w9vFSDcYfW0E6h97MFOSlOs.roa
File: Xhn2w9vFSDcYfW0E6h97MFOSlOs.roa (raw, json)
Hash identifier: zNLL2MARZ388bl8vlZwPSkBlOzEe3inJCQPHhMe6d10=
Subject key identifier: 5E:19:F6:C3:DB:C5:48:37:18:7D:6D:04:EA:1F:7B:30:53:92:94:EB
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 018CC56EC3F23B580D403488AE500DF36F75
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/Xhn2w9vFSDcYfW0E6h97MFOSlOs.roa
Signing time: Mon 01 Jan 2024 14:30:19 +0000
ROA not before: Mon 01 Jan 2024 14:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197581
IP address blocks: 46.235.233.0/24 maxlen: 24
46.235.232.0/24 maxlen: 24
46.235.232.0/21 maxlen: 21
46.235.237.0/24 maxlen: 24
46.235.234.0/24 maxlen: 24
46.235.236.0/24 maxlen: 24
46.235.235.0/24 maxlen: 24
46.235.239.0/24 maxlen: 24
46.235.238.0/24 maxlen: 24
2a00:5ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c3:f2:3b:58:0d:40:34:88:ae:50:0d:f3:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Jan 1 14:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e19f6c3dbc54837187d6d04ea1f7b30539294eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:e1:ca:07:7a:6b:48:7e:b0:e8:73:97:da:
9d:ac:10:a4:41:5d:f7:5f:88:2a:f2:97:4a:76:d4:
52:9e:de:0c:b4:6b:8a:5f:a7:bf:d6:f6:b2:5e:18:
12:a0:ab:64:24:c2:3c:b6:e3:ec:af:8f:6b:ab:b4:
3e:36:ec:4a:c3:92:76:df:d5:0e:26:a3:87:50:0f:
8d:c8:32:df:db:1b:d4:2f:31:16:00:41:ca:c9:14:
6b:0b:74:d0:e5:58:3b:10:bf:0f:72:83:58:7a:e7:
de:b3:0c:f1:03:0e:47:16:2b:1f:ec:ce:11:8b:02:
9d:89:37:42:fa:ac:e4:61:6f:6f:f6:85:dc:9a:52:
ca:b8:b9:d0:ac:ce:ca:3d:57:eb:51:41:78:d9:ec:
2c:ca:eb:4b:59:1f:63:89:9a:e1:b1:7b:d8:6b:22:
28:d1:17:df:f5:84:3e:c2:3d:bc:64:72:76:3a:1c:
0c:25:d8:6e:c6:f1:fb:2f:f7:a1:94:85:e6:ea:17:
85:98:bb:71:ef:b1:28:e6:4c:cf:09:65:bf:be:b3:
e7:16:c2:6a:77:af:93:c3:d2:bf:4d:66:9a:40:6e:
33:29:36:b1:57:27:d2:4e:a2:f8:62:5f:53:15:91:
ee:34:db:98:9a:8b:06:24:96:cc:fe:ff:f0:fa:af:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:F6:C3:DB:C5:48:37:18:7D:6D:04:EA:1F:7B:30:53:92:94:EB
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/Xhn2w9vFSDcYfW0E6h97MFOSlOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.232.0/21
IPv6:
2a00:5ec0::/32
Signature Algorithm: sha256WithRSAEncryption
35:db:d3:2f:f8:a6:64:f0:5c:58:d6:66:6f:53:b1:c8:7c:d0:
c8:b9:35:e2:89:cd:b7:95:ff:c8:7a:7f:77:1c:42:90:26:39:
1c:1a:ea:b9:c9:5d:08:55:17:29:29:47:65:c3:c9:ed:d4:0d:
94:5b:6b:3c:da:8c:c7:c3:f0:d5:c3:2d:37:f0:36:fe:ed:a7:
8d:e5:b2:dd:47:f9:e4:05:90:1c:f4:c6:da:19:cc:62:6f:2e:
04:cf:41:29:02:f4:ef:0e:8e:8f:8e:95:bc:17:93:2e:b1:05:
a0:63:53:37:1c:d9:6e:51:95:dd:60:7b:10:90:28:4d:f2:b7:
63:be:e4:04:c5:77:5d:c1:ff:d6:ea:1d:aa:97:1f:2c:1d:3d:
a0:84:1b:c1:05:53:d6:af:c4:bd:90:1e:2f:4a:43:06:60:1a:
ff:6c:e0:c6:a2:e3:19:61:ca:f3:60:27:db:e1:25:92:c8:8d:
45:57:6a:64:48:67:02:a4:1f:a6:c4:5c:94:16:ec:bf:c5:96:
a5:8b:63:3d:f3:69:1d:92:65:18:54:c5:c0:f9:ea:b1:6e:3c:
35:b6:c1:8c:f3:b0:59:19:10:40:48:de:d9:f8:94:db:92:97:
00:cf:d9:93:ea:c2:e9:18:7d:22:a2:68:3f:39:05:6d:cf:6d:
49:0e:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:40:39 2024 by rpki-client on console-ams.rpki-client.org