Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
File: AS46562.roa (raw, json)
Hash identifier: sc+c7L3wDMTB1lTKfpUzEc/BNsTqbSmEr+sj83yYduc=
Subject key identifier: 13:D4:07:9E:7F:2F:9B:2D:82:EA:A1:C9:4B:54:EF:54:70:D1:29:52
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 42DBD8C561B206034377A325360D6BB475EB5D9E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
Signing time: Wed 10 Jan 2024 21:50:08 +0000
ROA not before: Wed 10 Jan 2024 21:45:08 +0000
ROA not after: Wed 08 Jan 2025 21:50:08 +0000
asID: 46562
IP address blocks: 45.95.37.0/24 maxlen: 24
179.61.206.0/24 maxlen: 24
179.61.216.0/24 maxlen: 24
181.214.5.0/24 maxlen: 24
181.214.45.0/24 maxlen: 24
181.214.122.0/24 maxlen: 24
181.214.195.0/24 maxlen: 24
181.214.247.0/24 maxlen: 24
191.96.37.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.96.215.0/24 maxlen: 24
191.96.230.0/24 maxlen: 24
191.96.236.0/24 maxlen: 24
191.96.237.0/24 maxlen: 24
191.96.238.0/24 maxlen: 24
191.101.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:db:d8:c5:61:b2:06:03:43:77:a3:25:36:0d:6b:b4:75:eb:5d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 10 21:45:08 2024 GMT
Not After : Jan 8 21:50:08 2025 GMT
Subject: CN=13D4079E7F2F9B2D82EAA1C94B54EF5470D12952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:18:a7:23:be:d2:9a:fc:13:df:fa:eb:df:
f3:7a:98:11:09:c0:b0:b7:fd:b7:b8:6d:07:c6:0a:
3d:6a:b0:dc:4c:7f:17:b1:4e:47:5c:de:e2:d8:df:
b7:a1:86:94:ed:41:69:7b:7f:0f:28:45:f3:bd:0e:
03:44:03:88:67:c0:6f:ec:ce:a1:e9:9e:94:24:50:
ac:6e:17:08:ed:22:6b:f1:5f:f8:23:b8:e4:8c:f4:
a7:09:3d:3b:11:fd:1e:a4:5c:2e:f1:97:00:d4:9f:
28:df:69:8a:2b:1f:72:ab:e2:3d:9a:4d:61:65:29:
12:d1:2e:24:7d:1f:50:78:02:37:1b:e6:3e:6b:0e:
a2:ef:7d:f3:d0:a4:d8:35:b5:0a:b4:c6:b0:04:05:
07:91:19:70:a6:da:2a:02:4f:97:5b:32:68:66:e8:
58:7a:61:d1:c7:39:e6:6a:5d:84:ab:40:39:00:9b:
a8:fc:7e:b2:45:d6:e1:d8:d9:35:90:35:e5:74:ff:
11:5f:cb:71:6e:fd:d0:19:3d:68:3a:f2:d5:dd:73:
4b:76:5d:a9:a4:8b:87:f3:2e:85:04:f0:a9:4e:e6:
39:d1:3e:01:6c:38:b2:97:ca:a3:1f:3c:c7:1f:9e:
d5:20:93:6d:0b:59:c6:70:cb:4b:98:18:ac:41:31:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:07:9E:7F:2F:9B:2D:82:EA:A1:C9:4B:54:EF:54:70:D1:29:52
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.37.0/24
179.61.206.0/24
179.61.216.0/24
181.214.5.0/24
181.214.45.0/24
181.214.122.0/24
181.214.195.0/24
181.214.247.0/24
191.96.37.0/24
191.96.103.0/24
191.96.215.0/24
191.96.230.0/24
191.96.236.0-191.96.238.255
191.101.237.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6f:3b:da:98:09:12:d3:54:5d:ba:85:b6:0a:2d:1b:ca:6b:
39:f5:1a:2d:3c:03:27:cc:48:58:7f:91:c5:9c:04:5e:9a:dc:
35:ec:5c:ee:51:00:18:ab:74:6f:52:fe:b8:b2:6e:78:ea:df:
b6:34:5e:68:f8:77:14:00:8c:9b:3b:7c:00:cb:45:76:9f:b6:
32:05:ef:91:ae:2f:78:e9:0e:02:1e:02:56:17:0b:3c:cc:34:
0a:1b:98:58:90:1c:da:c0:3a:56:e2:1d:b9:c5:cb:bb:b2:27:
54:bb:39:38:58:57:93:06:e4:d9:d2:9d:99:89:1c:a4:55:cf:
0c:53:f6:5c:a6:74:b1:24:38:aa:68:ee:2f:fa:ac:6b:74:96:
c9:1b:a4:1c:b5:82:14:6c:98:f9:0f:26:65:19:24:b3:55:f1:
bd:d2:b0:ad:af:62:5a:88:ea:6f:30:e7:48:49:4d:c5:79:e1:
3e:a6:09:41:7b:5c:2a:fc:67:d4:37:59:b4:35:ff:cb:ba:bd:
01:b6:fb:b0:26:87:6c:1a:22:e0:1e:36:54:b7:93:35:54:84:
28:a3:45:bd:a4:25:2f:d5:0f:7e:f1:b2:49:94:f2:90:39:82:
48:49:e4:77:82:9a:a2:41:75:8f:26:8c:81:75:8f:ed:d4:74:
25:cd:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 08:17:00 2024 by rpki-client on console-ams.rpki-client.org