Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ojgF6FkiPTptzkm8uWz7b16AMCg.roa
File: ojgF6FkiPTptzkm8uWz7b16AMCg.roa (raw, json)
Hash identifier: ChqeyaeWnoLyVQlzuN1NehwQ+yneCdCgxA8adzX2Xlk=
Subject key identifier: A2:38:05:E8:59:22:3D:3A:6D:CE:49:BC:B9:6C:FB:6F:5E:80:30:28
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E62D6748AEC01683F0B7794D5EB4EF168
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ojgF6FkiPTptzkm8uWz7b16AMCg.roa
Signing time: Thu 21 Mar 2024 21:06:45 +0000
ROA not before: Thu 21 Mar 2024 21:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.128.0/17 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:d6:74:8a:ec:01:68:3f:0b:77:94:d5:eb:4e:f1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 21 21:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a23805e859223d3a6dce49bcb96cfb6f5e803028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:bc:00:9f:61:e9:b1:0d:82:53:73:f4:c0:
60:c3:23:76:9c:dd:e9:b1:82:60:b6:69:dc:af:69:
37:44:84:f4:1a:9f:83:e4:7c:39:30:4a:b5:61:fc:
ed:f6:03:1f:ae:7f:28:fd:3e:fd:42:71:88:8b:0f:
02:c3:68:ff:22:bf:79:90:e9:60:26:12:28:10:29:
91:e4:6e:98:46:3d:6b:dc:bc:15:b8:06:d5:34:06:
fc:d9:20:ad:e2:30:33:69:84:3f:c2:38:94:65:49:
23:28:52:e4:72:94:a5:01:ba:74:f0:53:68:d6:e1:
fd:80:13:47:9a:89:61:43:2f:5e:95:75:d0:f9:b1:
5a:88:e3:75:0f:53:16:70:9b:a5:64:c4:83:7b:7d:
c5:60:f3:d2:45:cb:d4:53:c1:9c:43:ad:c3:e6:d9:
19:7a:59:53:b6:0f:d4:51:9f:0c:9e:91:4e:cf:43:
3b:8a:dc:7f:c4:2e:96:01:e8:15:6d:3e:1e:84:19:
17:01:47:c5:c4:e3:c1:4b:09:32:27:62:d5:2d:8f:
45:60:d8:f9:46:7e:67:a9:f2:c5:66:88:65:b6:ae:
75:cf:ab:d3:95:cf:1c:52:79:d7:93:5f:ab:12:c3:
82:ac:27:cc:53:ae:42:12:b9:8b:f0:da:1f:1b:b1:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:05:E8:59:22:3D:3A:6D:CE:49:BC:B9:6C:FB:6F:5E:80:30:28
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ojgF6FkiPTptzkm8uWz7b16AMCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0-46.3.15.255
46.3.20.0/22
46.3.31.0/24
46.3.40.0-46.3.63.255
46.3.77.0-46.3.79.255
46.3.84.0-46.3.88.255
46.3.128.0/17
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
29:07:9a:2c:e7:31:44:ec:4a:42:fd:cc:c7:bc:6a:c8:2b:7d:
d4:95:f1:04:b4:c2:06:c3:af:ef:19:8f:36:df:17:8b:06:79:
ef:7a:19:5a:f3:40:10:63:fe:8e:07:45:ed:1e:62:b8:5a:56:
6e:bd:a6:e3:98:a6:60:75:f7:1d:3b:b6:b6:9e:53:4b:69:c9:
89:04:01:25:87:92:f7:ec:9a:bd:8c:5d:f6:b8:3a:2e:af:4f:
75:6c:79:f1:c9:38:b5:76:2e:4c:08:48:7e:ed:5e:19:fc:fc:
a9:d5:38:fb:7d:af:bb:2c:30:2c:80:bd:b0:cd:d7:2c:ed:9f:
e4:a4:ca:b9:d8:87:e4:b1:6e:bd:56:c7:53:ed:f4:d8:c0:4a:
4f:5b:60:16:86:db:e4:bd:1d:51:de:78:5f:7d:d5:17:db:5e:
d1:14:42:1c:de:03:b8:2b:e1:c6:5a:89:28:ab:16:fa:74:c3:
90:04:e1:97:1d:c0:fb:31:1f:6b:12:1f:90:17:3b:64:b7:c3:
44:e1:0f:8f:60:46:74:6f:4e:e8:9f:5c:6a:e0:52:9a:19:8a:
c7:35:bf:e4:16:ee:7a:48:21:fb:40:fd:f7:c5:f1:c9:2b:00:
dc:75:69:85:56:60:b5:d1:0f:92:5d:6a:de:4b:3c:91:ff:ad:
9e:ac:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:43:00 2024 by rpki-client on console-fra.rpki-client.org