Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
File: AS46562.roa (raw, json)
Hash identifier: sXuNvcvPtBZKVaxphGR8O8K8xzo708O7pB7a+/7MPE0=
Subject key identifier: D3:4C:C5:71:B5:AB:42:FB:2E:D0:E1:32:67:59:BF:C6:AA:46:DD:CD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 629E22FE2A11B99DD67C2400770F5501FA73B6EE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
Signing time: Mon 07 Oct 2024 08:00:12 +0000
ROA not before: Mon 07 Oct 2024 07:55:12 +0000
ROA not after: Mon 06 Oct 2025 08:00:12 +0000
asID: 46562
IP address blocks: 45.95.37.0/24 maxlen: 24
181.214.5.0/24 maxlen: 24
181.214.45.0/24 maxlen: 24
191.96.37.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.96.215.0/24 maxlen: 24
191.96.230.0/24 maxlen: 24
191.101.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9e:22:fe:2a:11:b9:9d:d6:7c:24:00:77:0f:55:01:fa:73:b6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 7 07:55:12 2024 GMT
Not After : Oct 6 08:00:12 2025 GMT
Subject: CN=D34CC571B5AB42FB2ED0E1326759BFC6AA46DDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:3b:e4:54:81:2e:30:9d:07:8e:76:9c:bb:
c3:f7:51:93:60:ce:b6:4e:d7:46:3a:e0:4c:f1:7e:
66:21:a2:0b:40:69:16:fb:3f:0d:f6:59:20:4d:05:
0b:67:2a:f2:ed:a5:73:ed:27:b4:eb:ea:b5:cc:47:
23:40:a9:06:21:b8:be:00:37:85:10:31:ac:75:89:
c3:d2:01:63:f6:68:41:cb:c8:1c:f7:10:7e:81:57:
3e:48:57:aa:83:fb:a1:c3:88:be:51:ed:16:c8:37:
28:42:89:19:7c:a3:e3:c9:a3:4e:57:db:38:ff:74:
a2:c2:15:0e:22:74:d9:9e:3a:5c:4c:e9:0e:e4:fb:
42:b3:cc:57:e1:f8:d4:e2:e6:2e:27:18:ec:bd:e1:
70:70:85:87:e6:76:e5:fc:49:b1:73:7a:12:d3:b2:
ad:ed:c6:c1:8d:3a:88:c0:fe:ed:61:c0:ec:66:f7:
15:9e:18:fa:d8:03:3e:bc:d2:e4:e1:5d:e7:db:58:
ae:1b:a4:a6:db:b4:ef:9a:26:ae:f0:b6:1c:58:58:
85:31:fd:04:be:61:27:4a:28:f4:12:74:fa:6b:7d:
1f:fa:b6:5a:07:ee:82:46:cd:86:be:5f:5b:75:15:
c5:c9:24:c5:f6:45:fb:31:2f:74:94:81:a6:68:77:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:C5:71:B5:AB:42:FB:2E:D0:E1:32:67:59:BF:C6:AA:46:DD:CD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.37.0/24
181.214.5.0/24
181.214.45.0/24
191.96.37.0/24
191.96.103.0/24
191.96.215.0/24
191.96.230.0/24
191.101.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a2:2a:7f:49:24:9a:60:d0:ef:ce:72:2b:1f:ed:41:a9:85:
8d:55:bc:91:d4:ac:d9:0a:4b:3c:bc:da:2b:e4:ef:6a:53:85:
85:c1:cd:49:39:e3:cc:23:a4:b7:34:57:5f:30:0f:36:7c:27:
4b:7b:d7:02:22:c4:a1:f7:82:ee:35:58:3b:94:83:f3:d1:50:
8f:02:4c:c0:69:ca:6f:8c:2d:83:d3:48:fd:3e:01:85:aa:f8:
b5:03:52:9a:d5:b0:3d:4d:4f:11:87:e5:05:b2:48:94:3b:c7:
bd:5c:c1:85:9e:f4:50:87:26:0c:c8:c6:ef:77:cc:27:99:82:
a2:f0:3b:27:76:e9:7c:fa:f9:5f:4b:f0:a8:ad:76:ad:bb:7e:
3b:b1:94:6e:09:39:26:4f:42:ed:c4:f6:d0:7a:ea:e7:82:b4:
25:61:c1:38:89:a6:b1:bf:e0:8e:28:0c:c1:ef:f4:1b:4e:8a:
e0:49:59:7c:39:42:b5:a5:ad:ab:93:27:60:07:e7:36:f2:84:
67:bf:6b:20:d3:75:b3:20:a2:64:8a:95:20:f5:b4:28:57:9a:
5d:9a:dd:9b:ce:51:0e:8f:1f:89:d5:d3:8a:99:99:58:de:c6:
59:23:7c:5b:30:d7:7d:ff:bd:6d:ae:cf:b1:e9:7e:b4:68:cd:
56:71:35:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:59 2024 by rpki-client on console-ams.rpki-client.org