Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/y7jOkakHfGqqeTYARetje6Xf3OU.roa
File: y7jOkakHfGqqeTYARetje6Xf3OU.roa (raw, json)
Hash identifier: 33G/TpnfK77/+s2lBvfACpadcLoXU/qWN60db4CAOoE=
Subject key identifier: CB:B8:CE:91:A9:07:7C:6A:AA:79:36:00:45:EB:63:7B:A5:DF:DC:E5
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 018CC2DAFE123064D02532BFC08B79581798
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/y7jOkakHfGqqeTYARetje6Xf3OU.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 171.22.145.0/24 maxlen: 24
185.243.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fe:12:30:64:d0:25:32:bf:c0:8b:79:58:17:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbb8ce91a9077c6aaa79360045eb637ba5dfdce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:16:87:70:9d:5f:52:be:cf:08:0f:33:25:
4b:d0:1a:11:3c:1f:c1:77:d0:8b:84:62:5e:59:82:
0a:0f:c2:28:0d:d1:9b:e5:c3:60:66:28:1d:7c:7b:
a9:6f:0b:0a:4e:cb:19:ef:38:2e:96:36:d1:6a:5c:
ef:c3:3c:51:72:1a:10:18:cc:5d:2d:f4:3f:e7:62:
8f:ca:df:ad:e5:c0:3b:24:3f:c0:73:2b:21:5b:05:
5a:a9:c8:fc:12:d7:80:e8:c7:56:df:cd:3c:1f:5d:
ff:66:58:18:01:4e:96:45:a1:88:9e:91:d8:09:6e:
2e:ac:61:aa:e8:0b:81:db:9b:f7:b2:5b:dd:0f:bd:
39:5e:07:67:f6:6f:bb:1f:0c:c0:50:70:69:aa:7f:
fc:ff:af:59:32:95:97:b3:f3:a4:48:35:01:14:bd:
48:cc:96:13:0b:fd:c7:7f:7b:34:07:f3:f7:c9:8b:
ea:25:1c:83:b6:c0:97:ac:01:c1:27:96:f8:79:41:
2d:a3:89:cd:ec:11:a1:4d:37:27:02:9a:8d:cf:f1:
0d:be:cd:38:b7:e4:62:6e:87:68:72:b0:36:c6:01:
d0:5c:eb:55:83:83:d6:c2:bd:51:e0:2b:d9:ff:11:
b4:56:48:da:57:f2:b1:e2:37:e5:bf:20:a9:bb:4b:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:CE:91:A9:07:7C:6A:AA:79:36:00:45:EB:63:7B:A5:DF:DC:E5
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/y7jOkakHfGqqeTYARetje6Xf3OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.145.0/24
185.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8e:35:70:4f:4a:a4:da:29:fa:d2:8b:a5:6d:34:5a:9a:87:
e5:17:fa:b7:4e:ce:b8:5c:b4:16:d4:6b:c2:34:e4:f6:80:5e:
65:38:4c:84:26:99:52:d2:6b:4f:2e:b9:f8:56:c7:db:83:56:
95:d2:54:30:95:94:89:85:3e:22:33:7f:6e:91:37:88:06:26:
92:a7:d8:eb:6b:ab:4f:f0:f9:0d:99:45:7b:9d:6c:65:d7:ec:
7e:0e:cb:cd:e7:2b:9d:e8:ad:ec:e8:64:7f:51:a6:e7:11:5b:
ec:0d:b7:66:98:80:85:13:be:c8:d1:c7:36:13:92:18:6e:a5:
38:ce:ec:cd:01:86:f1:e5:68:c9:cf:79:c8:b3:8a:ec:72:97:
85:90:0f:6a:b8:78:10:dd:09:f9:f2:f2:2e:9b:6a:68:4b:dd:
6a:45:e9:1a:cc:7a:25:a4:19:02:88:01:4f:57:43:f5:32:a9:
e1:f9:0d:e7:f3:a9:fb:02:31:d6:61:d2:f3:1b:37:9a:a5:d8:
87:eb:d0:31:c5:3e:55:d3:67:1e:5c:f5:7d:b7:1b:bd:1f:2d:
ca:04:de:a8:b1:71:a0:30:ac:36:49:3e:71:1c:9b:1e:c3:a0:
c6:09:f0:68:bf:1e:38:1d:fa:a0:e6:83:0d:4f:aa:03:0a:b1:
65:af:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:17:08 2024 by rpki-client on console-ams.rpki-client.org