Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TD46V2jR1opt8sJOwrpU9_uS0nU.roa
File: TD46V2jR1opt8sJOwrpU9_uS0nU.roa (raw, json)
Hash identifier: 3UmhfjzhBrjlZfMFfV+S8qPlKq0ff4Bur8gXx95lMJU=
Subject key identifier: 4C:3E:3A:57:68:D1:D6:8A:6D:F2:C2:4E:C2:BA:54:F7:FB:92:D2:75
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01934643D71D82A517D28C6E745D651D35C4
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TD46V2jR1opt8sJOwrpU9_uS0nU.roa
Signing time: Tue 19 Nov 2024 21:11:11 +0000
ROA not before: Tue 19 Nov 2024 21:11:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 46.3.116.0/22 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:43:d7:1d:82:a5:17:d2:8c:6e:74:5d:65:1d:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 19 21:11:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c3e3a5768d1d68a6df2c24ec2ba54f7fb92d275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:de:af:6b:4f:9d:f5:1c:e1:f1:05:0b:10:
84:fe:25:81:ac:9b:5a:ad:c8:29:70:d3:f0:85:75:
74:ee:95:da:50:f9:5a:06:48:6f:27:60:84:5d:57:
29:11:cf:9d:a2:fc:b2:9c:fb:22:27:5b:97:f4:7c:
f8:c1:9a:8d:fa:4d:1b:c9:24:fe:67:ad:0e:d1:ca:
f4:c9:aa:81:13:77:8f:d1:04:ac:ae:6a:5d:3b:19:
62:6d:fa:09:49:9d:a2:ad:02:28:7b:d6:7c:bf:6a:
bb:fd:7f:9b:e3:f9:94:03:6e:81:3d:44:5f:a5:6a:
a0:c0:24:76:4c:14:ed:45:db:16:2e:5a:f0:34:96:
f7:92:16:09:57:e7:83:02:73:7d:72:9e:70:71:02:
0b:e9:3b:ed:0f:73:84:cd:88:4b:2c:75:ab:d5:a5:
6c:c0:56:73:c1:05:75:e7:89:97:2e:87:40:bf:24:
a8:cb:3a:9b:48:75:c5:b4:7e:27:fc:a2:db:e6:15:
ba:4e:0b:c2:cc:a0:7b:4f:81:f3:f5:8f:f0:35:89:
3f:6a:50:29:ed:60:fa:ec:92:8a:f5:63:01:d4:d3:
89:1f:c4:e9:25:2b:51:ab:bf:5a:af:cf:8b:ea:c9:
f6:ab:8c:77:5a:75:fa:0d:dd:53:b7:4c:f9:e5:a2:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:3A:57:68:D1:D6:8A:6D:F2:C2:4E:C2:BA:54:F7:FB:92:D2:75
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TD46V2jR1opt8sJOwrpU9_uS0nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.116.0/22
46.3.190.0/24
46.3.201.0/24
46.3.220.0/23
46.3.230.0/23
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.69.0/24
46.232.71.0/24
149.126.226.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
63:21:81:9d:9e:88:52:c0:a8:09:4d:9e:3b:b6:f9:f3:a6:a8:
54:64:aa:3b:31:f5:4b:c4:43:8b:94:88:97:c1:c3:b5:7a:f9:
9c:5c:9d:dc:c8:ac:16:1c:37:e6:34:e7:f4:8e:49:a1:fb:3e:
64:b9:7c:c6:47:75:ad:d0:b6:f5:ab:3b:5f:1d:55:c3:60:03:
c4:87:dc:fd:fc:be:72:f9:be:d2:90:c5:ac:e9:3d:da:db:35:
cf:d4:fc:1e:ae:d0:1a:3e:34:88:71:4f:ee:ed:9b:8c:cb:e4:
d6:1e:65:ef:be:c6:e7:f3:16:dc:c1:80:ea:11:5a:51:a4:7a:
8a:5c:05:08:94:2f:ef:ed:43:e1:63:5d:e4:c7:cd:00:79:80:
c9:8d:b5:31:13:da:6d:80:6e:cd:a2:b8:d0:bc:7e:67:7a:44:
61:cf:17:04:c1:1f:a8:21:62:2f:00:68:df:51:c4:53:60:f0:
2d:d6:8a:e8:0c:8b:be:d0:d5:4c:dc:8a:98:40:b8:af:9f:b8:
8b:69:f6:fc:c0:47:55:57:85:46:f7:4b:80:5c:6c:1e:be:7b:
35:25:43:45:b4:d0:20:46:01:d2:82:98:44:68:6e:3d:68:f6:
b9:b1:25:e7:6e:97:c6:d8:87:65:e5:51:95:65:1a:86:86:bc:
b6:c9:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:49:23 2024 by rpki-client on console-ams.rpki-client.org