Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46261.roa
File: AS46261.roa (raw, json)
Hash identifier: 3j2x/W3v2eTyHSpQW0/JiXttTEF1uOO5oYkhXtQ1KqU=
Subject key identifier: 2C:81:8A:AD:30:88:B3:1D:2C:C6:33:27:63:E4:A0:E1:D9:84:30:92
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 28EDAA6AFF2756F7BAAE1F7335AB7D4BF4E94280
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46261.roa
Signing time: Wed 26 Feb 2025 22:29:54 +0000
ROA not before: Wed 26 Feb 2025 22:24:54 +0000
ROA not after: Wed 25 Feb 2026 22:29:54 +0000
asID: 46261
IP address blocks: 141.11.92.0/23 maxlen: 24
141.11.94.0/23 maxlen: 24
141.11.136.0/23 maxlen: 24
141.11.208.0/23 maxlen: 24
141.11.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ed:aa:6a:ff:27:56:f7:ba:ae:1f:73:35:ab:7d:4b:f4:e9:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 26 22:24:54 2025 GMT
Not After : Feb 25 22:29:54 2026 GMT
Subject: CN=2C818AAD3088B31D2CC6332763E4A0E1D9843092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:71:38:12:94:79:64:57:71:78:c4:c5:c3:
f8:5c:25:01:af:a1:ba:9d:e5:03:d2:8b:65:96:92:
38:a7:7d:44:2b:15:ee:f2:ad:ff:53:eb:5f:54:8a:
5a:e7:b5:46:bc:28:76:43:9b:e0:77:cd:3f:f6:86:
83:a1:57:7d:8f:d9:55:03:fa:3e:9b:3f:23:f4:f3:
1b:36:a6:3a:36:f2:54:a2:22:7a:27:28:db:45:3d:
d8:25:8b:05:95:1a:13:fd:f0:d8:e2:be:56:71:c9:
62:10:6f:b9:83:9c:57:6c:57:6f:7e:5e:18:5d:b0:
e4:ba:7f:4a:17:6e:f5:1e:8c:81:71:c2:ec:2c:7c:
fc:1a:65:1c:a0:8d:5a:94:d4:37:21:00:dc:6a:f5:
71:32:3c:82:4d:74:40:14:b2:d0:9e:2f:19:d0:26:
51:69:be:0d:d7:60:c1:9a:b5:05:c2:b7:d8:ad:79:
2b:cc:c1:27:d7:1b:9d:63:fc:ad:20:65:47:a3:d9:
68:60:8a:ae:e5:1a:3d:d5:89:ec:6c:45:a7:f7:15:
cc:26:91:1c:ba:0d:53:5a:fb:2a:7e:da:f9:83:86:
fc:cc:b3:c8:74:09:f2:c9:b0:2b:89:bb:8c:f8:fa:
b4:a9:ee:c7:77:f4:aa:ca:3a:fd:12:1a:28:13:09:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:8A:AD:30:88:B3:1D:2C:C6:33:27:63:E4:A0:E1:D9:84:30:92
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46261.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.92.0/22
141.11.136.0/23
141.11.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:38:b9:c3:24:d3:2a:b1:96:61:b6:e0:c1:ca:fb:b1:4e:8d:
aa:6a:01:9d:ea:e7:58:69:90:0c:74:d9:90:04:bf:73:ec:81:
0f:3d:cf:66:67:df:e3:c5:93:37:f4:b1:d8:50:11:e2:50:84:
c1:f3:44:40:76:18:d2:33:01:c0:06:a1:8b:89:15:2e:b2:13:
00:15:69:f9:44:0c:cd:d6:55:bb:2b:f0:09:6c:b0:25:06:cf:
e2:b9:93:f6:23:9f:c4:49:9f:12:21:83:4f:d2:e2:e5:b2:53:
af:e5:b7:c5:01:0e:98:41:b3:f9:5e:45:91:4f:22:2b:85:0d:
35:e9:b3:fe:88:2c:ff:54:bf:a1:59:8d:eb:1c:76:13:17:da:
fa:68:fd:48:d6:a7:72:20:19:c4:86:d5:df:28:42:01:77:22:
eb:64:cd:90:96:3c:56:68:ec:ac:15:f7:98:bc:ce:f2:86:65:
5c:85:0a:b1:f3:f1:be:91:96:2c:16:18:3c:e8:91:e2:13:c6:
b0:a4:35:46:79:fb:5c:a1:38:93:58:d7:1d:0c:ef:d9:27:97:
9f:1e:42:ae:2b:f6:cf:87:c2:0e:7a:67:86:c5:bb:21:87:88:
10:d7:77:79:be:b5:81:73:17:ad:14:39:ea:cd:de:ee:5f:83:
bb:37:de:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:09 2025 by rpki-client