Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/Y4K2UTJnQxBht_Mfnt44AycKppI.roa
File: Y4K2UTJnQxBht_Mfnt44AycKppI.roa (raw, json)
Hash identifier: 4H4WBWuxA88GKW5gdCEuAGOhm6KPBK5yLOilXqHXlDE=
Subject key identifier: 63:82:B6:51:32:67:43:10:61:B7:F3:1F:9E:DE:38:03:27:0A:A6:92
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 0193B23CB237F0FC2ECE9870879B9F5A5878
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/Y4K2UTJnQxBht_Mfnt44AycKppI.roa
Signing time: Tue 10 Dec 2024 20:22:22 +0000
ROA not before: Tue 10 Dec 2024 20:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48416
IP address blocks: 46.32.64.0/22 maxlen: 22
46.32.68.0/22 maxlen: 22
46.32.72.0/22 maxlen: 22
46.32.76.0/22 maxlen: 22
46.32.80.0/22 maxlen: 22
46.32.84.0/22 maxlen: 22
46.32.88.0/22 maxlen: 22
46.32.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:3c:b2:37:f0:fc:2e:ce:98:70:87:9b:9f:5a:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Dec 10 20:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6382b6513267431061b7f31f9ede3803270aa692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:b5:30:c4:fb:50:bc:09:7f:1c:13:d3:32:
68:40:bc:66:9d:e9:91:34:f6:94:de:f9:79:b9:73:
c1:67:37:a3:29:d1:85:ec:f9:f7:67:16:3d:24:7f:
d0:a6:ff:de:ed:a9:99:09:b6:72:c5:af:73:6e:12:
4c:81:a7:fd:10:b2:a2:7d:90:b3:5b:67:c1:f6:63:
08:90:db:c2:fc:ac:10:96:71:c6:93:e1:e6:dc:af:
a2:10:b9:07:09:d0:23:5c:15:4e:2f:40:54:e0:38:
3c:dc:f6:ca:dc:90:7d:a5:fa:e6:b1:e3:33:e2:12:
e3:d8:4b:fb:ce:1f:c0:da:6c:0e:96:60:d8:ff:ff:
a6:57:e3:b3:0b:b4:1c:dd:7a:95:fc:ba:b8:20:ae:
8c:65:8e:8a:d4:7a:f4:11:cb:73:b5:70:80:d6:d2:
01:3a:51:f5:a8:50:4f:b5:d7:5e:d4:c7:2c:ba:60:
10:f3:d4:11:1c:5d:11:2e:01:90:6b:16:0e:ad:07:
ec:3d:99:2c:0a:04:8b:74:e8:16:ab:d9:ff:71:87:
55:13:e7:78:37:24:b8:db:64:36:2b:15:cc:46:14:
69:e6:79:d7:43:8a:93:60:17:d3:89:ad:e4:db:17:
36:3a:fe:ad:b8:8a:30:2a:3f:55:51:14:d0:4c:fc:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:B6:51:32:67:43:10:61:B7:F3:1F:9E:DE:38:03:27:0A:A6:92
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/Y4K2UTJnQxBht_Mfnt44AycKppI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:68:0b:42:6e:b8:8c:f1:27:8f:fa:4b:b2:bd:e1:7c:33:b3:
13:8b:d0:16:a1:86:7c:da:a0:13:18:7b:84:64:c3:50:7b:79:
90:50:1f:84:11:d2:a5:db:b9:69:b2:e9:0e:0d:48:71:f1:d7:
be:7e:89:fb:f0:8d:35:0f:62:bb:96:eb:3d:d1:58:ed:94:35:
17:15:db:cd:7d:7f:9e:ae:d9:d1:c8:42:b5:51:e5:56:1e:53:
4f:b1:40:1f:11:03:de:f3:cd:3d:de:1d:09:44:a4:e5:4a:fe:
a5:5b:5e:e4:de:c0:17:72:3a:57:be:f8:67:fa:24:1b:21:3e:
d9:64:b3:fe:85:24:aa:88:8c:f4:2c:93:5c:59:f5:bd:1d:52:
f6:0a:aa:37:5f:58:81:4f:5b:da:5c:aa:aa:58:6f:13:03:8b:
2f:a1:37:f7:76:54:d4:85:13:ab:0b:b9:c3:d9:1f:f3:e2:10:
60:43:c3:64:d2:07:e6:a7:3e:37:d0:c6:a8:e6:92:0d:e1:93:
76:ba:28:a6:ad:e9:16:be:66:8e:0c:89:a0:5c:27:90:4d:29:
6f:e8:87:2e:7b:c3:99:16:17:1d:0c:5e:8e:18:a2:00:38:57:
99:b2:42:ad:df:03:58:57:7f:a5:41:f6:57:56:02:cc:e3:32:
4f:58:01:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 20:55:34 2024 by rpki-client on console-fra.rpki-client.org