Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47692.roa
File: AS47692.roa (raw, json)
Hash identifier: u/4HISInzl7mFJugKMCtus3ShqMLHkGtwEPFvYYynAE=
Subject key identifier: 00:32:5F:68:E2:3C:CF:7D:E7:BD:90:1D:83:38:78:5F:A7:24:0B:2D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 02FE20AE30F5EEE299185E2A7281ECC64B157E04
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47692.roa
Signing time: Tue 05 Nov 2024 13:50:08 +0000
ROA not before: Tue 05 Nov 2024 13:45:08 +0000
ROA not after: Tue 04 Nov 2025 13:50:08 +0000
asID: 47692
IP address blocks: 46.202.252.0/24 maxlen: 24
46.203.19.0/24 maxlen: 24
46.203.59.0/24 maxlen: 24
46.203.88.0/24 maxlen: 24
46.203.96.0/24 maxlen: 24
46.203.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fe:20:ae:30:f5:ee:e2:99:18:5e:2a:72:81:ec:c6:4b:15:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 5 13:45:08 2024 GMT
Not After : Nov 4 13:50:08 2025 GMT
Subject: CN=00325F68E23CCF7DE7BD901D8338785FA7240B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:a6:df:5f:f0:68:ab:4d:56:26:32:5d:87:
9f:a6:4a:c4:ef:d4:b6:91:e0:a4:d8:d2:75:20:79:
d0:ee:3b:da:08:7c:8f:59:60:42:a9:0b:d7:b5:3d:
65:cb:26:26:83:0e:c6:d2:17:ee:70:9c:bb:df:1e:
65:ea:5a:f1:11:4b:d9:11:34:dd:57:36:bf:ea:e0:
e1:0a:88:38:de:5e:af:b5:e6:39:a4:4b:59:52:90:
2b:1f:e1:0c:83:df:c9:a8:dd:ae:b7:54:70:61:5c:
28:5d:95:30:64:c7:69:ea:21:51:b5:42:aa:83:92:
93:9b:4f:70:7c:bd:ea:98:6c:00:b2:49:90:a1:67:
1d:33:ff:bf:ae:36:d3:3f:b5:b8:4b:6b:ef:02:bc:
4b:97:e8:f7:51:36:a7:d7:a5:5c:e6:0b:74:b1:4e:
58:6d:5a:c2:ce:1b:98:d6:f9:52:d6:a0:d0:e0:9b:
2f:d1:6f:b6:98:7b:07:36:90:79:08:97:a4:a3:ca:
a3:ef:66:69:8e:7e:fe:ac:da:f0:ac:16:a7:58:18:
5b:34:bc:d7:9d:82:9b:c1:5f:33:14:49:fe:e1:40:
59:6c:54:f9:8b:7e:e4:d9:5d:74:bc:8e:40:aa:05:
cd:aa:06:3b:44:6a:ed:38:38:54:d7:bb:fb:ee:f5:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:5F:68:E2:3C:CF:7D:E7:BD:90:1D:83:38:78:5F:A7:24:0B:2D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.252.0/24
46.203.19.0/24
46.203.59.0/24
46.203.88.0/24
46.203.96.0/24
46.203.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:27:86:24:81:4b:79:79:89:10:be:30:26:a3:8e:a2:80:b3:
93:49:9e:05:97:96:e3:62:4c:30:85:20:34:8c:ce:40:bc:8b:
52:a5:8e:42:ea:09:79:8a:56:8d:d7:05:ba:26:8d:83:d2:2c:
d6:ac:ca:41:fb:24:61:e3:b2:d7:d7:23:bb:63:35:7c:26:67:
e8:bd:b2:cc:f2:5f:c2:b5:67:ad:19:a2:41:b4:02:d3:13:09:
be:ce:31:2e:72:36:a6:d4:e4:11:a6:9e:ba:01:58:b8:4c:e8:
db:9b:53:ec:58:ca:58:8c:c6:4e:44:0d:a2:2d:98:76:b0:1f:
53:dd:3d:c7:08:4b:ea:3c:68:e4:e1:00:3e:ba:00:df:56:67:
15:39:a9:43:85:e9:e8:21:2a:e6:2e:95:a5:81:03:e1:65:b9:
97:df:7d:4f:48:d9:92:be:b2:fd:9f:52:bc:97:b6:80:2d:94:
b9:25:92:8e:94:12:8a:17:70:08:c7:b9:95:d5:a4:d4:79:be:
a1:d0:db:2a:a0:a6:fa:46:b5:20:96:b4:8d:dd:e0:4c:40:52:
c3:3d:43:10:37:f5:f1:34:58:04:7f:5d:46:67:9a:db:94:44:
2c:3c:84:01:d9:e2:3a:bf:db:aa:07:d0:d6:b2:9c:1b:72:19:
da:e4:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:00 2025 by rpki-client