Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/cYTyG0dZ5WFrxneJ_J1sjw3ZAjI.roa
File: cYTyG0dZ5WFrxneJ_J1sjw3ZAjI.roa (raw, json)
Hash identifier: K2ATHpdyj+lP7dV2KeXEBbNvFhz9B08/qSoK0WHilkw=
Subject key identifier: 71:84:F2:1B:47:59:E5:61:6B:C6:77:89:FC:9D:6C:8F:0D:D9:02:32
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 018CC64B46A4EEA9FD7D9517D1290FC4A672
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/cYTyG0dZ5WFrxneJ_J1sjw3ZAjI.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206516
IP address blocks: 45.8.140.0/22 maxlen: 24
2a0e:8200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:46:a4:ee:a9:fd:7d:95:17:d1:29:0f:c4:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7184f21b4759e5616bc67789fc9d6c8f0dd90232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:04:c1:5d:84:70:f0:cb:33:3c:bf:61:a6:
51:15:c0:98:43:5c:76:41:75:9d:f5:36:12:03:bf:
46:25:43:ff:4e:7e:cc:e5:4a:7f:7a:ca:98:8d:2b:
2d:b2:88:2e:eb:67:99:01:57:a5:25:32:4c:e0:7c:
8b:21:32:e8:fc:f8:89:3a:6a:74:9b:34:31:d4:dc:
3c:22:7d:2b:f7:a8:ca:47:51:70:c9:5f:ab:ad:f9:
c6:10:86:0c:f3:60:4c:5b:13:84:1d:1b:92:d5:59:
be:d1:31:31:eb:86:df:e2:b3:32:ed:0e:3e:0a:e0:
65:89:d9:09:15:59:79:be:84:c8:ba:8d:34:6b:d3:
07:0d:67:6b:ab:b1:ce:fa:f7:93:7e:0e:26:b4:f0:
c5:94:40:61:3b:cc:38:35:64:81:07:04:1a:b1:2f:
40:c1:03:f4:6f:cf:f1:9b:a8:e7:cc:35:9e:53:fd:
16:89:09:9b:f6:48:e2:ed:44:7d:48:97:14:b2:0e:
f0:c2:df:28:9d:a3:c0:44:88:11:83:0f:ac:bc:f2:
f7:a7:55:52:18:f4:0a:cf:d3:71:a0:81:8f:d2:e8:
0a:4a:6d:6c:b3:7b:9a:14:7f:00:a4:89:1f:e0:a6:
60:1b:77:ed:75:6b:e9:85:d0:52:a7:01:14:cf:84:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:F2:1B:47:59:E5:61:6B:C6:77:89:FC:9D:6C:8F:0D:D9:02:32
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/cYTyG0dZ5WFrxneJ_J1sjw3ZAjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.140.0/22
IPv6:
2a0e:8200::/29
Signature Algorithm: sha256WithRSAEncryption
b6:39:6c:1f:78:d6:6b:b3:67:70:69:69:c4:bc:be:68:69:ed:
0b:bb:99:b4:cb:ea:41:f7:c1:a2:67:2e:2a:9c:aa:43:f9:94:
80:15:85:0e:25:78:82:c7:f7:63:9d:2f:b7:01:9b:c1:1f:a4:
a9:66:5d:d0:36:c7:6a:a5:c9:06:92:fd:e3:cf:6e:58:e1:c7:
dd:ce:b1:38:b9:43:7b:87:83:dd:a5:9b:44:e7:7f:50:30:d9:
d2:78:3a:ad:17:bd:24:52:ae:27:a2:f3:00:09:d4:90:69:93:
8f:1e:e8:ae:80:02:4a:25:28:39:85:e3:bc:22:96:79:9d:af:
b8:2f:81:84:46:f9:4b:bc:2a:ca:1b:6d:a6:12:84:eb:d7:6c:
97:ed:7e:d8:ee:37:cc:9b:e8:b3:a4:d8:5f:27:fd:ba:57:0c:
be:a4:e3:1f:01:15:93:bb:6d:0c:82:c2:06:3f:a7:54:43:86:
c3:34:c7:f0:82:ab:cc:f8:22:28:81:b7:e9:b9:58:24:f7:60:
1f:23:1b:93:88:0f:50:9f:07:80:40:28:1d:af:a1:90:0a:a2:
76:4a:41:53:f8:34:c2:cf:3d:71:ef:c7:d1:94:1b:2f:ff:fe:
09:ea:a5:c7:f9:d7:1d:22:3a:08:7b:92:1a:e9:1f:0e:1e:35:
f4:4e:17:8c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGS0ak7qn9fZUX0SkPxKZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmRmNjgzOGQwMzM4MDE0MWViN2U0ZWU1NWRjMDVkODcw
NjFkYzkwHhcNMjQwMTAxMTgzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTg0ZjIxYjQ3NTllNTYxNmJjNjc3ODlmYzlkNmM4ZjBkZDkwMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQwEwV2EcPDLMzy/YaZRFcCYQ1x2
QXWd9TYSA79GJUP/Tn7M5Up/esqYjSstsogu62eZAVelJTJM4HyLITLo/PiJOmp0
mzQx1Nw8In0r96jKR1FwyV+rrfnGEIYM82BMWxOEHRuS1Vm+0TEx64bf4rMy7Q4+
CuBlidkJFVl5voTIuo00a9MHDWdrq7HO+veTfg4mtPDFlEBhO8w4NWSBBwQasS9A
wQP0b8/xm6jnzDWeU/0WiQmb9kji7UR9SJcUsg7wwt8onaPARIgRgw+svPL3p1VS
GPQKz9NxoIGP0ugKSm1ss3uaFH8ApIkf4KZgG3ftdWvphdBSpwEUz4TQkwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHGE8htHWeVha8Z3ifydbI8N2QIyMB8GA1UdIwQY
MBaAFE5t9oONAzgBQet+TuVdwF2HBh3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2Qt
MzE4MzYyMDA0ZThhLzEvY1lUeUcwZFo1V0ZyeG5lSl9KMXNqdzNaQWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2QtMzE4MzYyMDA0ZThh
LzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQiMMA0E
AgACMAcDBQMqDoIAMA0GCSqGSIb3DQEBCwUAA4IBAQC2OWwfeNZrs2dwaWnEvL5o
ae0Lu5m0y+pB98GiZy4qnKpD+ZSAFYUOJXiCx/djnS+3AZvBH6SpZl3QNsdqpckG
kv3jz25Y4cfdzrE4uUN7h4PdpZtE539QMNnSeDqtF70kUq4novMACdSQaZOPHuiu
gAJKJSg5heO8IpZ5na+4L4GERvlLvCrKG22mEoTr12yX7X7Y7jfMm+izpNhfJ/26
Vwy+pOMfARWTu20MgsIGP6dUQ4bDNMfwgqvM+CIogbfpuVgk92AfIxuTiA9QnweA
QCgdr6GQCqJ2SkFT+DTCzz1x78fRlBsv//4J6qXH+dcdIjoIe5Ia6R8OHjX0TheM
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:36:17 2024 by rpki-client on console-ams.rpki-client.org