Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/r535_ZiVdnxwSrq9NwZ3PHSB0h8.roa
File: r535_ZiVdnxwSrq9NwZ3PHSB0h8.roa (raw, json)
Hash identifier: Mu16izYWjSkv8WI9Wewop/41XvuqyE75M49pOIo0qlU=
Subject key identifier: AF:9D:F9:FD:98:95:76:7C:70:4A:BA:BD:37:06:77:3C:74:81:D2:1F
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 018CC2DB2E9427EEC054CEC80097D7581DDB
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/r535_ZiVdnxwSrq9NwZ3PHSB0h8.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43584
IP address blocks: 46.16.160.0/23 maxlen: 23
46.16.166.0/24 maxlen: 24
46.16.164.0/24 maxlen: 24
91.197.142.0/23 maxlen: 23
91.197.141.0/24 maxlen: 24
91.197.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2e:94:27:ee:c0:54:ce:c8:00:97:d7:58:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af9df9fd9895767c704ababd3706773c7481d21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:d8:4c:b9:5f:91:e9:0b:6b:7c:28:24:9a:
4e:f7:f0:52:8b:4c:c1:7e:cb:1c:f5:02:de:45:93:
ca:d3:2e:08:68:1b:41:5c:d1:34:f8:30:f0:05:8f:
4a:89:f0:ef:98:78:02:b6:0c:ef:c7:b0:d0:cd:42:
cf:92:77:b8:67:00:0c:75:6d:b3:8f:55:be:81:5c:
30:59:af:2c:97:c1:4e:e8:d2:84:4f:66:36:e1:92:
35:1f:ea:14:5f:f9:a2:6f:25:bc:f3:24:15:c5:53:
9e:63:e8:94:54:9b:46:67:c3:b0:38:6c:ed:20:be:
bd:4f:24:8d:50:39:e8:0a:90:06:21:eb:40:71:d6:
81:bd:da:a5:95:41:a6:22:b9:79:56:80:ec:9a:7d:
b1:7d:5f:bd:ee:7f:89:3f:b5:cb:0a:04:0f:b5:e2:
ef:8b:5e:38:9f:56:63:c7:ec:f4:5e:71:91:00:fc:
69:09:c6:6c:c8:23:e9:35:cc:10:f2:34:04:28:a8:
8d:73:7a:03:36:9b:25:6e:0e:3c:75:de:4d:0d:79:
37:48:cd:15:84:f3:4c:6b:f1:bd:d9:88:db:90:04:
98:fc:77:fd:ca:a4:56:03:7c:58:9a:a1:d8:19:cb:
ba:5b:28:9e:9a:a8:db:f9:93:79:f9:16:00:e9:87:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:F9:FD:98:95:76:7C:70:4A:BA:BD:37:06:77:3C:74:81:D2:1F
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/r535_ZiVdnxwSrq9NwZ3PHSB0h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.160.0/23
46.16.164.0/24
46.16.166.0/24
91.197.140.0/22
Signature Algorithm: sha256WithRSAEncryption
72:07:0f:cb:3c:93:9a:63:aa:4b:96:d7:73:ff:aa:11:64:04:
3f:c3:f9:06:0b:84:36:e4:3f:da:76:12:18:10:2b:e1:c7:fc:
3e:f5:0b:01:78:d8:81:48:44:5e:08:cc:bb:c1:c4:4d:11:77:
00:17:9a:58:95:a5:d2:15:14:75:13:c9:3a:b5:53:07:3f:74:
85:23:43:cc:75:a5:a5:41:06:d2:a1:34:cd:9c:f6:35:e1:0c:
a7:f2:42:89:af:24:31:99:af:c8:5e:17:e6:67:7f:59:44:f7:
00:c3:d5:63:90:c9:84:0e:68:7b:9e:dc:c7:ce:00:94:bc:fd:
3b:ae:ce:b2:22:0d:b5:a4:50:3b:db:a8:27:c2:88:a1:c2:3c:
71:b1:f2:8d:bb:45:a7:b4:f8:e0:6c:cb:46:77:5b:ed:17:27:
94:7f:1b:da:e6:f6:19:80:af:d4:c1:d7:55:a6:c7:d1:47:bf:
82:f4:9c:99:22:fd:6f:71:fb:e6:eb:b8:02:66:c5:53:e5:d5:
1d:97:91:bf:52:de:9a:b7:bb:c1:57:6b:e4:31:cd:87:76:44:
36:d2:36:d9:f7:04:29:0e:43:30:68:a0:49:11:74:fe:c2:09:
e6:ac:5c:81:11:58:0f:30:31:05:05:be:f6:d9:9b:27:d1:09:
d2:2f:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:19:35 2024 by rpki-client on console-ams.rpki-client.org