Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5kcAxZoRUAFTudEviCtwYgMW28s.roa
File: 5kcAxZoRUAFTudEviCtwYgMW28s.roa (raw, json)
Hash identifier: mPa45d+opjfqqLzUVJL7aEPv6OWHWLWgMy+SaKfgPiU=
Subject key identifier: E6:47:00:C5:9A:11:50:01:53:B9:D1:2F:88:2B:70:62:03:16:DB:CB
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E62CD4C996AE09054C49390FC2E9AAC2C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5kcAxZoRUAFTudEviCtwYgMW28s.roa
Signing time: Thu 21 Mar 2024 20:56:45 +0000
ROA not before: Thu 21 Mar 2024 20:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398083
IP address blocks: 46.3.80.0/21 maxlen: 22
46.3.216.0/21 maxlen: 22
46.3.224.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:cd:4c:99:6a:e0:90:54:c4:93:90:fc:2e:9a:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 21 20:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e64700c59a11500153b9d12f882b70620316dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:b4:58:bd:be:20:5a:93:66:7f:09:67:3f:
42:9a:06:89:b3:e6:61:a1:d0:56:cd:27:23:6f:dd:
2e:2c:86:67:30:09:df:9e:6f:36:cc:b8:ef:22:a7:
6d:f0:dc:04:eb:67:6e:47:e3:c6:a2:fb:eb:e1:b9:
82:ae:90:f5:52:5d:4d:c4:3b:6d:ab:a1:65:d1:21:
a1:49:7f:79:f9:cd:a7:ca:b8:97:ca:52:df:c9:a6:
f7:70:58:57:05:c1:63:8d:a2:29:35:34:1a:fd:51:
bc:46:a2:a8:c7:18:32:16:c6:14:a1:40:3e:13:85:
b3:0d:ea:8d:44:6d:14:45:98:0e:10:d6:f1:1d:b9:
76:e3:30:98:09:57:9b:4f:e7:79:1f:09:9d:8f:2d:
1a:01:34:d5:83:a7:ad:bd:dc:a6:33:1f:df:6c:93:
0b:aa:d1:d2:55:53:6d:7c:ce:1f:43:a0:f6:ac:88:
65:fa:f2:62:bc:2c:72:5f:13:7f:92:ae:71:f8:1d:
13:ae:4e:d3:67:77:2c:69:5d:9e:3a:48:a1:f6:a1:
cf:81:fc:be:7e:2b:17:7e:13:4f:a0:db:7b:90:d8:
1d:37:b5:02:95:12:1f:a7:e8:2b:a2:c0:39:2e:63:
b6:c1:0f:3f:aa:e7:6e:cf:c2:9d:14:8a:01:9e:00:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:47:00:C5:9A:11:50:01:53:B9:D1:2F:88:2B:70:62:03:16:DB:CB
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5kcAxZoRUAFTudEviCtwYgMW28s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/21
46.3.216.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
5a:1a:4c:16:f2:3e:15:b9:66:a2:2f:22:e3:ea:ed:f7:d2:24:
03:08:74:77:1b:d2:4b:86:06:8b:1a:f8:73:2e:96:52:0e:ab:
3e:03:8b:c8:aa:86:9d:9e:8b:3b:12:4f:ec:71:5c:95:9e:9f:
91:e5:f4:7f:f6:5a:4c:f1:81:8b:c8:6f:4e:3a:c4:64:2c:87:
c2:46:f5:13:ae:96:af:ff:2f:9a:6a:d2:84:87:96:66:4a:4a:
2c:78:0e:d2:e5:d0:96:e5:96:e8:23:03:7a:24:d2:61:76:41:
ef:cc:48:c6:2d:62:f0:be:a4:6a:3f:d8:a6:06:66:ba:d9:41:
34:fa:af:62:ad:33:1c:38:ac:1c:3a:87:2b:9b:66:db:b0:69:
a0:a2:26:5c:a3:3e:dd:14:38:b8:3d:de:17:95:82:09:64:24:
cc:c8:db:89:ad:03:75:67:81:00:d6:c1:fb:dd:77:f4:df:70:
26:b6:47:0e:26:57:3f:af:ca:bc:46:50:9a:52:ec:b3:38:d6:
2d:ec:7b:ee:a3:b8:4c:02:72:89:7f:68:2a:82:31:af:7f:d6:
0b:de:86:74:e2:7a:87:d6:a2:18:df:b0:1a:55:6c:d7:05:82:
70:28:00:d4:46:8d:0c:46:ec:47:21:b7:4e:53:87:04:42:65:
c4:41:79:64
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY5izUyZauCQVMSTkPwumqwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMzIxMjA1NjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjQ3MDBjNTlhMTE1MDAxNTNiOWQxMmY4ODJiNzA2MjAzMTZkYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzm0WL2+IFqTZn8JZz9CmgaJs+Zh
odBWzScjb90uLIZnMAnfnm82zLjvIqdt8NwE62duR+PGovvr4bmCrpD1Ul1NxDtt
q6Fl0SGhSX95+c2nyriXylLfyab3cFhXBcFjjaIpNTQa/VG8RqKoxxgyFsYUoUA+
E4WzDeqNRG0URZgOENbxHbl24zCYCVebT+d5Hwmdjy0aATTVg6etvdymMx/fbJML
qtHSVVNtfM4fQ6D2rIhl+vJivCxyXxN/kq5x+B0Trk7TZ3csaV2eOkih9qHPgfy+
fisXfhNPoNt7kNgdN7UClRIfp+grosA5LmO2wQ8/quduz8KdFIoBngDx7QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOZHAMWaEVABU7nRL4grcGIDFtvLMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvNWtjQXhab1JVQUZUdWRFdmlDdHdZZ01XMjhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDLgNQMAwD
BAMuA9gDBAMuA+AwDQYJKoZIhvcNAQELBQADggEBAFoaTBbyPhW5ZqIvIuPq7ffS
JAMIdHcb0kuGBosa+HMullIOqz4Di8iqhp2eizsST+xxXJWen5Hl9H/2WkzxgYvI
b046xGQsh8JG9ROulq//L5pq0oSHlmZKSix4DtLl0JbllugjA3ok0mF2Qe/MSMYt
YvC+pGo/2KYGZrrZQTT6r2KtMxw4rBw6hyubZtuwaaCiJlyjPt0UOLg93heVgglk
JMzI24mtA3VngQDWwfvdd/TfcCa2Rw4mVz+vyrxGUJpS7LM41i3se+6juEwCcol/
aCqCMa9/1gvehnTieofWohjfsBpVbNcFgnAoANRGjQxG7Echt05ThwRCZcRBeWQ=
-----END CERTIFICATE-----
Generated at Sat May 4 14:01:51 2024 by rpki-client on console-fra.rpki-client.org