Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/rYhzWLmQWzAH122-k13p8dQ7rhY.roa
File: rYhzWLmQWzAH122-k13p8dQ7rhY.roa (raw, json)
Hash identifier: ucNPBTaOsRvjYn+p4Er4b9zsk9xmgTrBHnyVpo8mRrw=
Subject key identifier: AD:88:73:58:B9:90:5B:30:07:D7:6D:BE:93:5D:E9:F1:D4:3B:AE:16
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 018CC801418CC1EBC24383A59CB859BBDEE8
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/rYhzWLmQWzAH122-k13p8dQ7rhY.roa
Signing time: Tue 02 Jan 2024 02:29:34 +0000
ROA not before: Tue 02 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206565
IP address blocks: 167.160.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:41:8c:c1:eb:c2:43:83:a5:9c:b8:59:bb:de:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Jan 2 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad887358b9905b3007d76dbe935de9f1d43bae16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:67:de:b6:5e:60:97:32:b2:86:76:63:d7:
08:af:3c:5b:fc:9e:f8:de:c0:b7:46:cc:62:d5:9f:
83:97:ec:88:ed:32:5d:01:3b:cf:d1:5a:4b:a6:4d:
81:31:9b:41:1b:24:25:62:36:80:24:58:d2:f3:ab:
22:4b:2c:73:fd:64:58:e2:a7:cc:c8:12:94:d1:d9:
3f:23:cb:d3:ec:93:fd:83:b1:ac:2f:49:69:40:60:
95:1e:7b:50:24:fe:e2:c4:98:0f:c9:99:4f:1c:53:
6d:0c:e9:c1:25:12:c0:aa:4f:68:35:bc:67:26:cc:
e5:5f:f3:04:de:b2:95:a4:8f:61:cd:98:27:f8:8c:
ea:31:e2:e5:b5:9c:bf:e8:a0:06:c2:df:d1:a8:31:
8c:48:0d:c1:ca:ef:96:ff:af:1e:e3:7a:7c:7c:2c:
e2:68:34:8a:9f:a8:44:4c:29:19:45:73:24:00:9f:
9d:4a:2b:85:14:fd:ee:82:01:a4:4a:ab:f4:62:98:
a4:6e:d0:23:3e:89:6c:80:32:0f:2f:00:63:52:42:
07:77:ea:70:9f:f9:ad:3f:37:7b:ea:87:24:4f:1d:
64:21:7d:9f:b2:a1:67:ce:4c:1a:3a:9c:92:79:23:
9f:a1:c2:12:21:e8:fa:5d:ca:b4:ee:0c:56:fa:1a:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:73:58:B9:90:5B:30:07:D7:6D:BE:93:5D:E9:F1:D4:3B:AE:16
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/rYhzWLmQWzAH122-k13p8dQ7rhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.15.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6b:5e:16:53:06:db:2d:06:b2:dc:19:16:ce:1a:1b:92:1d:
f9:0b:72:28:0a:8d:08:b3:d4:14:f5:4c:58:c2:a1:35:3b:cc:
35:0d:6e:57:0b:c9:9e:27:67:14:84:65:3f:f9:40:eb:e1:ac:
59:e5:81:c2:58:76:81:23:c6:9a:51:3a:c9:30:d8:a0:f2:6e:
34:d6:be:9d:84:1a:2b:54:39:3b:a3:66:08:3c:76:12:61:5b:
22:aa:52:5c:e8:e6:f0:1d:fe:b4:a9:64:29:e7:7c:b6:86:e4:
d0:8e:ec:c4:f3:27:09:67:3a:1f:8a:dc:98:b6:7c:f2:db:f7:
35:3d:b6:26:7c:08:91:68:a7:f7:fb:d4:17:90:69:90:2e:61:
62:c2:17:48:86:71:88:60:bd:d9:47:32:39:ef:9f:df:2d:d4:
10:86:30:61:26:92:e4:f8:61:63:f6:e1:32:66:af:cd:1a:1b:
1b:dd:cb:99:c3:ea:c7:d2:92:43:f4:9d:6e:b2:0d:13:5d:41:
71:ce:94:e8:38:55:75:fc:4b:1e:ff:72:47:18:9f:44:6b:90:
13:91:31:d4:a0:13:a7:81:b3:a6:b6:f7:62:a6:94:9a:69:1f:
46:de:65:34:cf:ed:c8:71:9f:f9:af:18:86:b6:95:fe:35:e0:
a1:e6:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:46:02 2024 by rpki-client on console-fra.rpki-client.org