Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/xD-alzYzL6O8DTwa0cP76FXFN6g.roa
File: xD-alzYzL6O8DTwa0cP76FXFN6g.roa (raw, json)
Hash identifier: lcIXUyYci0/omDDSF/RfPIJoDotsX0nJFMXsQxJ+iLY=
Subject key identifier: C4:3F:9A:97:36:33:2F:A3:BC:0D:3C:1A:D1:C3:FB:E8:55:C5:37:A8
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0194A6E7583BA110E186D2F552D39161A42F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/xD-alzYzL6O8DTwa0cP76FXFN6g.roa
Signing time: Mon 27 Jan 2025 08:36:06 +0000
ROA not before: Mon 27 Jan 2025 08:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49304
IP address blocks: 46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
46.232.56.0/21 maxlen: 24
46.232.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:e7:58:3b:a1:10:e1:86:d2:f5:52:d3:91:61:a4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 27 08:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c43f9a9736332fa3bc0d3c1ad1c3fbe855c537a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:5f:7a:55:87:c8:73:74:eb:fb:8d:50:86:
4e:25:e5:6b:a3:dc:9d:72:07:cb:63:6d:44:37:18:
40:d9:8b:d3:f6:04:8c:96:3c:99:39:3f:42:1c:74:
00:e1:f2:8c:26:19:ba:fd:62:bc:3f:55:b4:4b:49:
e5:86:5f:6e:cc:29:90:33:02:52:c4:0e:a9:38:dd:
a6:95:0a:b4:41:35:32:0a:b2:cd:5d:03:01:f0:a7:
0f:2a:32:22:2a:4c:c7:7e:7f:e6:81:85:57:39:ce:
9c:40:b6:ea:b0:af:7f:76:9b:b0:81:ae:e4:10:de:
be:07:95:e4:0a:ec:9f:61:ed:32:d5:42:d2:ca:ea:
7a:28:b6:38:6c:9a:15:a3:05:0b:c0:e9:64:37:ba:
81:e6:de:a0:b9:b0:e5:4b:7c:3d:fc:d4:e1:5a:de:
62:46:08:20:31:b7:84:f4:1b:ee:87:16:db:58:e1:
84:04:ef:4a:1f:2a:89:3e:be:d3:3e:38:c0:48:c4:
4a:96:96:86:f6:55:60:fb:19:f0:79:88:81:4c:4c:
bc:e8:44:4a:37:94:6f:c5:91:a8:c4:1f:74:5f:65:
63:3a:bb:52:d1:6b:d3:26:02:88:d7:fa:ce:a7:e4:
09:7b:ce:a7:e6:4b:88:35:1e:e3:57:bf:6d:4e:d6:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3F:9A:97:36:33:2F:A3:BC:0D:3C:1A:D1:C3:FB:E8:55:C5:37:A8
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/xD-alzYzL6O8DTwa0cP76FXFN6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
46.232.104.0/21
Signature Algorithm: sha256WithRSAEncryption
33:25:86:d4:82:18:e7:91:31:6d:21:b4:64:7e:63:30:b5:77:
7a:72:29:32:86:07:d2:c4:b7:0c:02:2c:3a:c6:a4:d1:b2:11:
1a:fa:a4:65:3f:48:c3:0d:79:f3:7b:fb:02:44:a8:97:ac:d9:
84:e1:b4:f0:b7:8c:87:39:21:fc:23:02:c6:a8:e1:12:2c:54:
81:0b:55:2b:ba:28:8c:a5:55:43:7f:2c:65:06:13:49:bc:f4:
6d:c9:68:06:38:da:f3:f5:b7:68:e7:5b:f0:1e:b3:39:e4:93:
f0:86:fe:76:64:8f:e0:0e:e8:0e:c6:5e:35:33:85:9f:66:15:
d0:31:e6:89:c6:15:e9:45:6f:52:6b:ad:8b:1a:82:fd:1b:19:
9d:c4:b9:cd:65:c9:d4:2b:b4:74:5e:5c:eb:6e:ae:18:70:1d:
61:8b:77:7d:7f:56:d4:30:2a:d2:36:8b:57:f8:a4:19:9f:08:
87:1d:f4:0d:55:bb:47:d9:1c:a9:2e:12:05:25:35:7d:67:f6:
be:db:fe:e4:9d:ef:0d:92:9f:60:44:97:86:d5:a9:dd:80:6f:
68:f5:29:95:57:3f:1e:1d:6b:2f:4b:f1:74:ec:9e:f7:72:0f:
e9:31:da:98:d9:51:be:6e:b7:39:29:05:eb:37:03:2f:58:2e:
6b:d4:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:39 2025 by rpki-client