Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/RiqsgdWjcVt5MsgH8ATgCvuehnc.roa
File: RiqsgdWjcVt5MsgH8ATgCvuehnc.roa (raw, json)
Hash identifier: kfDIlrTOTuR3DMl5QO3Osdww7yP4pfACD8MSPRzdXqc=
Subject key identifier: 46:2A:AC:81:D5:A3:71:5B:79:32:C8:07:F0:04:E0:0A:FB:9E:86:77
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E62CD4D74875712C51B91790D9F16CFA2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/RiqsgdWjcVt5MsgH8ATgCvuehnc.roa
Signing time: Thu 21 Mar 2024 20:56:45 +0000
ROA not before: Thu 21 Mar 2024 20:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.32.0/19 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.48.0/21 maxlen: 24
46.3.56.0/21 maxlen: 24
46.3.80.0/21 maxlen: 22
46.3.96.0/20 maxlen: 24
46.3.160.0/22 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.216.0/21 maxlen: 22
46.3.216.0/22 maxlen: 24
46.3.222.0/24 maxlen: 24
46.3.224.0/21 maxlen: 22
46.232.20.0/22 maxlen: 24
46.232.64.0/22 maxlen: 24
80.243.128.0/21 maxlen: 24
80.243.128.0/23 maxlen: 24
80.243.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:cd:4d:74:87:57:12:c5:1b:91:79:0d:9f:16:cf:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 21 20:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=462aac81d5a3715b7932c807f004e00afb9e8677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:b9:1c:a6:a2:92:a0:83:99:8c:4b:e0:5f:
11:f4:49:93:c8:9e:4d:8e:86:4f:c1:81:38:7b:6e:
20:fb:3c:48:df:a5:dd:c3:55:d3:c9:83:49:d7:bd:
92:4a:9e:2b:29:d1:da:ed:e7:85:d9:2e:07:11:2f:
fb:80:d6:6e:6d:2a:ac:16:a5:21:3f:2f:c7:fc:3a:
b1:7c:02:77:e6:47:6a:4b:39:f5:b7:ce:45:bb:cf:
31:b6:5b:6f:4c:57:9a:40:6c:80:a9:09:2f:a2:01:
92:83:71:91:2d:33:72:66:d8:3a:f1:f9:36:9d:2c:
72:25:41:18:f1:17:47:15:ee:27:a8:d2:e0:44:41:
c9:1e:cd:16:e4:57:d3:d2:17:4b:2f:ee:91:e6:a9:
11:ed:5c:1f:f5:d8:06:35:e9:52:92:de:34:0e:34:
4e:9b:d5:d1:76:bc:13:9b:3c:da:51:94:ed:97:5d:
e5:0a:d7:ee:5f:28:9f:42:9f:28:79:37:ed:d7:9f:
33:cf:a7:3c:a5:37:ae:70:28:8f:75:a7:bd:74:b4:
da:c1:75:33:17:95:53:6e:81:b7:9f:f4:ad:96:1c:
27:2e:66:3b:19:89:63:e6:3d:cf:29:a3:fd:4a:1a:
01:73:bc:8b:7d:b0:4a:52:80:81:3a:97:42:43:68:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:AC:81:D5:A3:71:5B:79:32:C8:07:F0:04:E0:0A:FB:9E:86:77
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/RiqsgdWjcVt5MsgH8ATgCvuehnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.80.0/21
46.3.96.0/20
46.3.160.0/21
46.3.208.0-46.3.231.255
46.232.20.0/22
46.232.64.0/22
80.243.128.0/21
Signature Algorithm: sha256WithRSAEncryption
41:ac:b2:7c:c1:dc:15:fc:68:95:ca:cf:9e:db:68:f9:f9:59:
5d:e7:cf:7b:29:20:f5:0e:69:8e:8b:97:f4:8f:6a:fa:33:ac:
12:7e:1f:ce:3a:6d:4f:ae:1b:cd:bc:2a:7f:8e:10:77:f8:8d:
69:5d:ca:84:11:f9:f7:8a:d6:c9:f2:9f:cd:03:88:12:36:ab:
51:8c:66:03:01:aa:58:b5:97:d8:b2:87:58:40:b7:56:7d:9e:
3a:d5:04:35:14:75:93:a7:93:2a:ab:30:c0:2a:ca:d5:1f:f5:
2d:30:60:32:4c:34:93:1a:b4:84:80:47:3f:ed:e8:ae:e6:41:
f2:a2:84:6f:0e:35:a1:93:46:95:53:15:2f:5a:00:d5:c0:d9:
dd:79:bf:b2:61:4e:1e:a4:4f:2b:39:73:51:fa:5a:1e:8d:30:
ee:5f:7f:79:7f:f2:92:27:cb:dd:64:78:c2:4f:8f:a6:f8:9a:
fd:fd:9f:99:10:e4:2e:e2:4e:4a:7a:92:38:f5:a7:66:ba:92:
d1:9b:e7:66:ba:e2:55:c0:a9:16:ff:9e:e0:b0:b2:b5:9c:13:
ae:f1:1d:30:78:f7:f5:ec:7e:5c:c5:51:8e:a8:25:35:62:73:
a4:e5:ed:cd:77:23:af:e9:b3:c6:90:dd:be:de:73:25:b5:dd:
1f:09:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 09:10:08 2024 by rpki-client on console-fra.rpki-client.org