Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YV1Gd-AlAQDuyTyrU61mNczpig8.roa
File: YV1Gd-AlAQDuyTyrU61mNczpig8.roa (raw, json)
Hash identifier: 26TFgJcdZqvzkj046JtvRApu1Qg+7b7u/7OMLAEQwFg=
Subject key identifier: 61:5D:46:77:E0:25:01:00:EE:C9:3C:AB:53:AD:66:35:CC:E9:8A:0F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FAA6533D3C82041849C8017E848D6
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YV1Gd-AlAQDuyTyrU61mNczpig8.roa
Signing time: Tue 02 Jan 2024 04:30:10 +0000
ROA not before: Tue 02 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 45.94.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:aa:65:33:d3:c8:20:41:84:9c:80:17:e8:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=615d4677e0250100eec93cab53ad6635cce98a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:b7:6d:30:34:c9:cd:be:8a:f0:e0:74:09:
f1:c5:00:88:9f:1f:0e:f8:0d:4f:cf:97:ba:42:69:
fa:a0:70:c6:a5:84:9a:74:2c:ca:58:ff:f8:71:35:
4f:23:67:10:00:29:d2:88:eb:d9:dd:00:f1:f7:75:
76:06:67:6d:ee:f2:17:1f:de:f7:ca:cf:28:da:2a:
8e:b2:68:9d:b6:50:20:7d:bb:cc:69:ed:9d:d0:e8:
0d:6a:8a:7b:b1:3d:5d:04:d8:7f:2c:39:88:ea:9e:
96:2d:6b:b2:ee:b4:1a:37:12:91:8b:ae:b7:c9:aa:
14:de:b3:fc:d7:cc:02:71:22:e3:12:e7:ab:ad:7a:
e8:ea:74:43:6f:3e:77:06:19:d8:ff:a5:56:1a:a5:
e0:9d:88:5c:73:ff:73:47:e6:9b:f9:c6:df:97:be:
29:5a:fd:17:17:25:85:a6:e4:cf:1d:eb:96:6a:57:
c0:ad:d5:2d:48:84:04:44:a5:0c:14:b7:db:ff:0f:
a7:5a:4b:07:60:05:83:23:ab:79:e3:f6:89:d3:bd:
d8:8c:b6:1c:7b:21:cc:6c:86:75:fd:e3:2e:31:03:
2b:0c:85:39:08:fa:b4:67:27:b7:58:96:e6:f0:8a:
73:bd:3b:36:6d:3a:7f:90:97:5d:d7:ef:8e:cb:60:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:46:77:E0:25:01:00:EE:C9:3C:AB:53:AD:66:35:CC:E9:8A:0F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YV1Gd-AlAQDuyTyrU61mNczpig8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:35:e0:a9:1f:db:e2:eb:12:c6:77:f9:4e:c0:d2:46:88:a4:
49:eb:7a:b8:51:b7:ae:39:9f:0d:d7:55:6a:da:b1:73:c3:cf:
2a:73:1a:e3:65:51:d9:c2:06:5e:36:e8:2a:fe:ea:bc:40:53:
23:c4:89:e3:99:c0:b8:62:bc:5b:2b:e3:3f:6a:2f:cd:c2:40:
87:ee:c3:83:3b:c5:0a:d8:47:ce:5e:00:35:d5:57:3c:ea:13:
b0:34:ac:60:40:5f:99:15:36:bc:4f:82:b5:c6:1b:3a:5a:43:
d9:ba:fe:a6:6c:11:1d:27:12:c0:04:b3:ef:e4:15:17:4e:3d:
81:f1:73:9c:f7:f0:ca:95:b4:14:8c:17:55:20:54:e6:6d:c3:
7f:70:9a:b7:02:d1:97:a0:41:4f:be:5a:81:16:d4:86:02:40:
26:7c:97:48:fd:21:d5:9a:97:3d:38:07:6d:79:86:79:35:b0:
34:55:b5:d5:81:df:b7:d3:ee:32:e5:f2:1c:24:e3:45:72:ca:
40:8b:2d:5c:c8:85:58:88:3c:cb:50:a5:4f:0d:4e:ff:89:b3:
fb:c6:b0:59:b4:b5:b6:97:fd:ee:05:3c:74:8c:cb:5e:65:a5:
3f:95:14:34:6b:b2:77:46:bd:c6:83:fa:21:4f:cf:af:06:c8:
8f:86:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:06:24 2024 by rpki-client on console-fra.rpki-client.org