Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TKHmkxX4NtHq6d9L4jo4LKg_sg0.roa
File: TKHmkxX4NtHq6d9L4jo4LKg_sg0.roa (raw, json)
Hash identifier: 1OmYtd5JK2mAStpIsv2SOzFss5ngE0hlwXHVmMbNWvU=
Subject key identifier: 4C:A1:E6:93:15:F8:36:D1:EA:E9:DF:4B:E2:3A:38:2C:A8:3F:B2:0D
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6C56F24CA586EABFE3936C246DFC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TKHmkxX4NtHq6d9L4jo4LKg_sg0.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48024
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/22 maxlen: 24
46.3.100.0/24 maxlen: 24
46.3.102.0/24 maxlen: 24
46.232.6.0/24 maxlen: 24
46.3.104.0/22 maxlen: 24
46.3.103.0/24 maxlen: 24
46.3.0.0/22 maxlen: 24
46.3.108.0/22 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 19:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6c:56:f2:4c:a5:86:ea:bf:e3:93:6c:24:6d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ca1e69315f836d1eae9df4be23a382ca83fb20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:85:02:2f:10:7d:99:b4:06:19:a0:f9:f5:
c7:46:23:28:a4:66:d9:81:57:89:3e:23:15:96:59:
d5:26:3c:d8:a8:ad:0f:c4:cc:24:93:34:1b:13:ad:
05:90:c4:d8:60:12:f8:eb:d3:8c:ee:5f:25:20:45:
1a:cc:aa:76:3b:83:31:78:56:bb:8c:10:b2:50:5e:
8c:47:d6:0d:37:eb:93:05:54:10:21:60:77:e1:3f:
34:4d:61:3a:73:06:d7:33:be:b3:87:3b:d5:6c:4a:
37:86:71:0c:d1:ee:3a:d8:33:5e:68:d4:14:b9:0e:
61:ab:41:e2:19:c8:09:eb:2d:c3:1d:41:37:96:1b:
e2:6b:1c:1f:89:16:09:7e:76:74:34:bb:bd:ed:bf:
9f:3c:e2:a5:11:e0:2a:29:84:3c:d1:b8:3d:cf:20:
80:a7:53:77:48:41:f0:f4:0a:07:b2:6c:cd:fe:66:
ad:51:4b:19:f7:de:41:32:9d:da:0e:89:61:4d:0d:
ce:e7:d0:25:a7:07:c5:f4:ac:49:f1:f3:4d:2f:35:
8a:eb:5b:8a:77:86:a3:bd:ba:84:eb:7f:a3:4a:b8:
4b:c5:db:37:27:d1:9c:e5:e3:be:c9:d1:c2:63:f0:
67:f7:a4:d9:f7:77:24:f7:79:33:6b:32:b6:d5:9a:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A1:E6:93:15:F8:36:D1:EA:E9:DF:4B:E2:3A:38:2C:A8:3F:B2:0D
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TKHmkxX4NtHq6d9L4jo4LKg_sg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.96.0-46.3.100.255
46.3.102.0-46.3.111.255
46.232.6.0/24
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
42:59:63:cd:af:95:fd:56:9b:6f:3d:51:ac:4a:b4:ab:bd:7d:
fd:35:1d:24:cb:fc:5a:27:59:99:6b:e6:18:d1:e6:79:5d:1b:
2f:d0:50:2d:c7:04:59:16:ca:9b:41:fc:14:76:1f:94:0d:86:
72:3f:40:7d:78:d5:cf:95:54:9d:af:a6:d9:4e:0e:9f:c2:55:
57:a6:39:c8:05:1b:eb:d4:1f:a8:6e:55:c2:5b:e6:a4:bc:ae:
bc:c5:9c:2b:8f:f3:99:d0:64:f0:c3:eb:f8:35:0c:38:98:58:
63:05:d5:c9:b0:8f:05:a3:4c:8e:d9:95:76:07:b8:59:31:af:
a1:33:c5:7a:d2:30:97:75:09:70:45:2e:68:7d:b0:f8:e4:a4:
dd:6a:5b:17:55:96:6a:f7:59:ea:2c:e7:ee:84:65:af:72:6b:
02:52:72:a9:65:ee:95:b6:20:89:b1:6f:f0:f9:6b:77:0d:b5:
2c:dc:fd:4f:b7:18:1c:70:d0:3d:0a:5f:4a:43:8b:aa:32:9c:
81:c8:48:b9:33:50:d1:35:a3:40:ca:55:aa:ed:26:e9:60:ba:
0e:83:ff:59:31:18:2f:a4:29:1d:f5:92:5f:fe:76:7f:df:40:
ae:9b:ad:ed:6a:af:79:7a:c3:6d:d3:aa:ca:63:94:50:c4:50:
63:cf:a5:29
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYzJTmxW8kylhuq/45NsJG38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMTAyMDgzMzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2ExZTY5MzE1ZjgzNmQxZWFlOWRmNGJlMjNhMzgyY2E4M2ZiMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2neFAi8QfZm0Bhmg+fXHRiMopGbZ
gVeJPiMVllnVJjzYqK0PxMwkkzQbE60FkMTYYBL469OM7l8lIEUazKp2O4MxeFa7
jBCyUF6MR9YNN+uTBVQQIWB34T80TWE6cwbXM76zhzvVbEo3hnEM0e462DNeaNQU
uQ5hq0HiGcgJ6y3DHUE3lhviaxwfiRYJfnZ0NLu97b+fPOKlEeAqKYQ80bg9zyCA
p1N3SEHw9AoHsmzN/matUUsZ995BMp3aDolhTQ3O59AlpwfF9KxJ8fNNLzWK61uK
d4ajvbqE63+jSrhLxds3J9Gc5eO+ydHCY/Bn96TZ93ck93kzazK21ZptNQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFEyh5pMV+DbR6unfS+I6OCyoP7INMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvVEtIbWt4WDROdEhxNmQ5TDRqbzRMS2dfc2cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCLgMAMAwD
BAUuA2ADBAAuA2QwDAMEAS4DZgMEBC4DYAMEAC7oBgMEBC7oMDANBgkqhkiG9w0B
AQsFAAOCAQEAQlljza+V/Vabbz1RrEq0q719/TUdJMv8WidZmWvmGNHmeV0bL9BQ
LccEWRbKm0H8FHYflA2Gcj9AfXjVz5VUna+m2U4On8JVV6Y5yAUb69QfqG5Vwlvm
pLyuvMWcK4/zmdBk8MPr+DUMOJhYYwXVybCPBaNMjtmVdge4WTGvoTPFetIwl3UJ
cEUuaH2w+OSk3WpbF1WWavdZ6izn7oRlr3JrAlJyqWXulbYgibFv8Plrdw21LNz9
T7cYHHDQPQpfSkOLqjKcgchIuTNQ0TWjQMpVqu0m6WC6DoP/WTEYL6QpHfWSX/52
f99Arput7WqveXrDbdOqymOUUMRQY8+lKQ==
-----END CERTIFICATE-----
Generated at Mon May 6 23:51:45 2024 by rpki-client on console-ams.rpki-client.org