Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NkCk5ez8EXIRUC7XmbtkYy8CbTk.roa
File: NkCk5ez8EXIRUC7XmbtkYy8CbTk.roa (raw, json)
Hash identifier: v7v8ebQSl1/L49q/aMXitO/1Qx5FCktAZ/dNO7N+8aw=
Subject key identifier: 36:40:A4:E5:EC:FC:11:72:11:50:2E:D7:99:BB:64:63:2F:02:6D:39
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E62CD4B3C199008F25F2A449055B1D28E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NkCk5ez8EXIRUC7XmbtkYy8CbTk.roa
Signing time: Thu 21 Mar 2024 20:56:45 +0000
ROA not before: Thu 21 Mar 2024 20:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.3.116.0/22 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
46.232.96.0/20 maxlen: 24
46.232.112.0/20 maxlen: 22
149.126.226.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:cd:4b:3c:19:90:08:f2:5f:2a:44:90:55:b1:d2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 21 20:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3640a4e5ecfc117211502ed799bb64632f026d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:2a:29:a1:26:42:ce:2c:1d:e6:11:d6:88:
c3:74:5f:87:05:f3:08:d4:db:db:03:8a:4a:64:e0:
0d:af:74:70:3e:97:ee:c9:bd:fd:d1:79:4a:f6:36:
fe:f6:17:00:13:a2:33:8d:ed:08:d2:10:8d:1f:d5:
c7:9c:a0:77:c4:9e:5d:d9:94:80:d8:82:1e:c3:00:
62:71:5d:81:41:24:66:9e:9a:cf:db:6f:4a:fa:06:
d3:df:3b:0b:6b:4f:ea:9b:07:be:ca:f5:6c:c0:94:
7a:c9:0d:37:85:2a:5a:4c:6f:76:85:16:cf:e3:5a:
fd:be:70:4a:35:d2:2e:ab:90:57:db:ae:97:a7:ab:
5d:19:87:bf:c5:ab:e7:49:8f:82:d6:97:5c:c1:d3:
bd:f7:f0:9a:ad:74:32:3e:fe:79:90:9c:a8:a3:5b:
42:d3:d9:fd:81:a9:a2:72:91:2f:00:9d:0c:0e:49:
ff:58:66:3b:5a:95:6d:38:a4:f1:7b:dc:35:a8:c1:
7f:78:1d:1a:a8:40:fa:0a:2d:a9:9a:e3:9e:99:d2:
4c:ad:f1:7b:85:5d:65:14:54:95:6c:26:8f:78:f4:
16:88:5f:0a:d3:78:c5:4b:25:6a:57:b1:db:f2:61:
48:f4:c2:e6:ff:b4:fb:88:b3:21:65:e2:74:04:99:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:40:A4:E5:EC:FC:11:72:11:50:2E:D7:99:BB:64:63:2F:02:6D:39
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NkCk5ez8EXIRUC7XmbtkYy8CbTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.116.0/22
46.3.190.0/23
46.3.200.0/23
46.3.208.0/21
46.3.220.0/23
46.3.230.0/23
46.3.248.0/24
46.3.250.0-46.3.255.255
46.232.67.0/24
46.232.69.0-46.232.70.255
46.232.72.0/21
46.232.96.0/19
149.126.226.0/24
149.126.244.0/24
149.126.246.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cd:02:e9:58:42:89:1a:c9:cb:ae:29:6d:a9:77:55:42:42:
4d:73:a5:d5:c1:c6:32:12:05:fc:9c:cd:6f:a2:95:fc:e7:2f:
24:59:19:22:1f:e4:0f:b0:71:2e:8b:62:94:77:88:1d:58:3d:
3f:a7:41:7b:53:f5:14:a2:99:50:b3:ce:27:9b:4c:c2:07:62:
2d:f0:b9:98:78:af:69:8d:9c:91:47:5c:19:76:9f:29:43:38:
aa:bc:bd:e4:53:ca:3a:5f:fd:51:4d:d2:b7:41:f2:1f:9b:09:
d7:6d:4b:07:41:a0:e1:c9:69:5f:21:ce:b5:d2:c9:42:23:9e:
a3:cd:6e:14:71:d7:23:3f:de:c5:6f:dd:1d:f3:60:63:96:ca:
88:f8:7e:57:53:c4:a5:53:01:8b:cc:26:95:e0:25:16:2a:dc:
60:d4:09:16:4e:b1:07:e8:1c:21:5b:0c:22:12:f7:28:bd:53:
69:c4:7b:d4:82:b2:f8:c8:cf:27:8a:51:49:10:0f:87:80:e1:
a1:fc:26:27:00:b9:68:6e:cc:cc:60:21:f5:a3:f6:6a:34:7c:
ba:68:09:53:ea:43:81:ee:02:35:eb:c7:94:31:b1:61:05:f9:
3d:ac:51:94:b3:14:f1:bf:36:25:94:fb:58:af:76:c0:86:2c:
69:57:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:27:52 2024 by rpki-client on console-ams.rpki-client.org