Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/E_IX_co1RiFyTSA2jERqlqZ1k08.roa
File: E_IX_co1RiFyTSA2jERqlqZ1k08.roa (raw, json)
Hash identifier: iUg4Ls8vw/uEPCvIEPw3sPTxhReujxzt60BE6+SfAHE=
Subject key identifier: 13:F2:17:FD:CA:35:46:21:72:4D:20:36:8C:44:6A:96:A6:75:93:4F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6B4CC9AC376A53ACD07E57C0AAF2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/E_IX_co1RiFyTSA2jERqlqZ1k08.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40065
IP address blocks: 46.3.164.0/22 maxlen: 22
46.232.112.0/21 maxlen: 24
46.232.16.0/22 maxlen: 22
46.232.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6b:4c:c9:ac:37:6a:53:ac:d0:7e:57:c0:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13f217fdca354621724d20368c446a96a675934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:01:01:f8:de:20:5f:87:e5:01:19:fc:29:
6f:64:be:5a:5b:f1:8c:31:79:cd:ed:bf:a7:43:78:
fe:32:9e:26:8d:14:d2:08:0e:1c:e8:af:5b:5f:44:
ce:b0:a7:da:c3:ee:8c:2e:7f:6e:71:1f:d4:0c:b9:
be:d0:00:31:c8:7e:40:8b:bb:63:de:fc:c5:56:26:
c9:dc:bc:06:87:cf:30:90:d2:94:77:83:49:45:18:
14:a9:db:4f:e4:da:19:7b:b6:a6:60:20:6a:13:72:
0c:ce:3e:45:a3:b3:45:62:5c:94:94:40:91:4f:d1:
55:45:18:e9:36:06:31:67:04:fb:ca:87:da:94:f1:
fc:fe:f1:88:1f:93:d6:9c:76:f3:5c:44:3a:b8:a0:
2c:3f:ad:c0:d3:f9:27:9c:83:a3:dc:b3:3e:30:b1:
0f:49:5f:f5:af:40:ac:3b:ea:df:68:0b:5b:0a:ce:
d8:e4:3c:32:15:c6:0c:39:92:d9:3c:5e:34:7b:cf:
75:85:38:ac:d3:5c:ee:8a:e5:2c:be:5c:7e:09:29:
52:06:60:32:01:78:d9:0a:28:77:92:dd:dc:56:9d:
3f:6e:31:4b:96:14:a2:18:99:4d:ea:5d:a2:a6:3e:
ad:d1:05:b1:92:77:ea:1f:a3:b6:bb:9c:d9:72:ff:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:17:FD:CA:35:46:21:72:4D:20:36:8C:44:6A:96:A6:75:93:4F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/E_IX_co1RiFyTSA2jERqlqZ1k08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.164.0/22
46.232.16.0/22
46.232.112.0/21
46.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
96:a2:66:d8:11:a4:9b:1c:fe:f7:3e:c2:59:32:3a:c3:f9:38:
e9:30:da:f4:7c:c9:3c:db:8b:b5:13:59:b6:f1:1c:4d:a7:59:
3d:24:06:2f:20:62:83:0a:df:5c:6a:c6:5d:5f:04:01:84:33:
82:fe:82:8d:f8:47:3f:73:1b:30:84:4d:8d:97:a1:34:06:74:
c8:79:c0:c3:e8:2e:ad:7c:26:ab:77:fe:45:a2:fc:79:45:f7:
bf:63:38:be:81:b0:b0:1a:60:5b:ba:8d:f1:68:3b:03:ba:bc:
57:a7:a7:93:39:b0:60:6a:19:8c:7b:d1:5f:1d:17:10:5f:ae:
d6:e2:46:00:3c:98:ef:9f:07:57:be:ad:7a:8a:22:33:1b:1c:
e5:fe:48:b2:2d:1a:8c:7d:50:ba:31:19:fa:ed:bb:f9:4b:49:
80:1e:0d:25:7b:fc:1a:ce:b7:e4:f1:a6:40:b7:44:22:c1:d0:
17:94:a4:a9:60:55:bc:0d:78:3e:55:fc:f2:0e:f6:82:c2:db:
e9:95:11:8c:ad:34:da:e2:68:a2:4f:4f:57:90:c5:98:1c:98:
a0:ef:78:ef:6e:0a:50:6a:40:01:b1:d1:ee:f2:b4:6d:b4:27:
76:42:42:e8:0e:fe:8b:28:51:75:3d:3e:c9:bb:07:81:dc:12:
f6:93:f5:09
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzJTmtMyaw3alOs0H5XwKryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMTAyMDgzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2YyMTdmZGNhMzU0NjIxNzI0ZDIwMzY4YzQ0NmE5NmE2NzU5MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrkBAfjeIF+H5QEZ/ClvZL5aW/GM
MXnN7b+nQ3j+Mp4mjRTSCA4c6K9bX0TOsKfaw+6MLn9ucR/UDLm+0AAxyH5Ai7tj
3vzFVibJ3LwGh88wkNKUd4NJRRgUqdtP5NoZe7amYCBqE3IMzj5Fo7NFYlyUlECR
T9FVRRjpNgYxZwT7yofalPH8/vGIH5PWnHbzXEQ6uKAsP63A0/knnIOj3LM+MLEP
SV/1r0CsO+rfaAtbCs7Y5DwyFcYMOZLZPF40e891hTis01zuiuUsvlx+CSlSBmAy
AXjZCih3kt3cVp0/bjFLlhSiGJlN6l2ipj6t0QWxknfqH6O2u5zZcv/BvwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBPyF/3KNUYhck0gNoxEapamdZNPMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvRV9JWF9jbzFSaUZ5VFNBMmpFUnFscVoxazA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLgOkAwQC
LugQAwQDLuhwAwQCLuh8MA0GCSqGSIb3DQEBCwUAA4IBAQCWombYEaSbHP73PsJZ
MjrD+TjpMNr0fMk824u1E1m28RxNp1k9JAYvIGKDCt9casZdXwQBhDOC/oKN+Ec/
cxswhE2Nl6E0BnTIecDD6C6tfCard/5Fovx5Rfe/Yzi+gbCwGmBbuo3xaDsDurxX
p6eTObBgahmMe9FfHRcQX67W4kYAPJjvnwdXvq16iiIzGxzl/kiyLRqMfVC6MRn6
7bv5S0mAHg0le/wazrfk8aZAt0QiwdAXlKSpYFW8DXg+VfzyDvaCwtvplRGMrTTa
4miiT09XkMWYHJig73jvbgpQakABsdHu8rRttCd2QkLoDv6LKFF1PT7JuweB3BL2
k/UJ
-----END CERTIFICATE-----
Generated at Sat May 4 04:59:56 2024 by rpki-client on console-fra.rpki-client.org