Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/K1k1oTz405vJNRbbW2FJTFKy04Y.roa
File: K1k1oTz405vJNRbbW2FJTFKy04Y.roa (raw, json)
Hash identifier: yPw39EuVuppnN2ChCHFDT14hXNtguYPJHr6ck7Fp9Kk=
Subject key identifier: 2B:59:35:A1:3C:F8:D3:9B:C9:35:16:DB:5B:61:49:4C:52:B2:D3:86
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6B0B5AAA694EDE47316859580DC7
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/K1k1oTz405vJNRbbW2FJTFKy04Y.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38136
IP address blocks: 46.232.120.0/22 maxlen: 24
46.3.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6b:0b:5a:aa:69:4e:de:47:31:68:59:58:0d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b5935a13cf8d39bc93516db5b61494c52b2d386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:14:d8:97:69:75:eb:19:4d:70:93:1c:af:
be:15:a7:f2:09:b1:19:b4:a9:db:a1:9c:dd:d3:35:
17:49:5b:79:aa:83:de:4b:e0:37:37:d5:f5:ed:f7:
ff:45:72:72:a5:ca:c0:5b:20:a7:25:9a:05:28:92:
cc:ba:e5:5e:5e:88:c5:93:0d:56:67:d7:56:cc:76:
83:93:3f:e9:05:c9:a4:bd:e1:fd:5a:5b:a9:5d:ff:
67:9f:e2:77:24:d5:e8:ef:7a:6b:2c:a0:ba:58:ba:
32:19:54:aa:f9:cc:ed:1c:1a:9a:60:49:b4:02:8e:
20:70:f7:16:a4:26:42:10:1a:8a:ce:33:e6:e4:de:
df:81:81:b1:1a:c2:be:67:7a:0b:9c:3d:ab:76:ab:
2a:36:63:ef:c0:1b:0e:4b:ff:6a:55:77:d9:95:84:
5e:c9:45:2f:7f:77:22:03:50:cc:4a:d2:1a:13:f0:
0e:20:f1:85:2f:24:55:8c:ed:93:e2:e6:7d:2b:a7:
46:3b:c9:00:e4:91:be:a0:83:83:c4:54:c5:d4:0b:
71:0b:04:a2:30:db:64:bc:d4:cb:bb:ab:36:e1:d8:
10:86:73:7c:64:85:82:81:89:13:ab:51:17:4f:2a:
06:a6:bd:9f:e9:1f:c5:70:14:96:6a:48:bf:52:d3:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:35:A1:3C:F8:D3:9B:C9:35:16:DB:5B:61:49:4C:52:B2:D3:86
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/K1k1oTz405vJNRbbW2FJTFKy04Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.240.0/22
46.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
67:31:0d:9a:6d:75:cd:65:72:4b:4e:0a:f5:c5:40:74:14:cb:
ba:47:f2:24:ce:c4:34:18:07:50:20:6a:60:cc:1d:58:0f:4d:
e5:b4:d8:83:00:70:21:12:34:4c:86:a6:9f:74:3b:86:b0:90:
33:bf:bb:c3:97:02:7c:70:9c:51:b4:7a:a5:e0:91:29:0c:29:
1b:38:ca:f4:31:db:1d:46:97:96:00:4b:4e:5e:4c:e3:93:8b:
d1:cf:f3:50:30:d4:31:f3:0a:9b:95:f0:31:e9:bf:e6:b5:42:
63:09:2f:b3:67:4e:68:3c:51:4e:c6:ee:c1:a9:9e:30:99:1f:
c8:c9:da:03:2a:74:48:33:37:dc:a8:6d:2c:33:1b:44:ac:a0:
fb:90:8f:89:83:f7:ab:b3:17:b3:46:73:7a:30:19:3d:83:a6:
27:b6:43:7e:cd:61:ee:c7:f1:7b:31:a7:15:15:f2:49:4f:1b:
d2:46:f0:69:8e:16:ff:83:a9:f3:d9:a8:9d:e5:05:e8:60:35:
8f:78:e0:95:71:49:c5:65:38:c1:03:eb:23:1c:e3:03:49:0d:
46:6f:e9:d7:86:c9:ca:f9:a2:07:d0:d0:cc:14:d5:79:7c:cc:
74:40:19:07:52:e2:91:4b:a7:ed:46:20:c8:c7:2c:86:02:97:
f0:bc:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:36:47 2024 by rpki-client on console-fra.rpki-client.org