Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/y76AoVcrW4ZDGh1qt7qCcVOwnfY.roa
File: y76AoVcrW4ZDGh1qt7qCcVOwnfY.roa (raw, json)
Hash identifier: 1jGN1tt9s+JU5VRFsEEUPg6ElyAhy8G3I7Z2vXYpz4g=
Subject key identifier: CB:BE:80:A1:57:2B:5B:86:43:1A:1D:6A:B7:BA:82:71:53:B0:9D:F6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801353AF636F7868D37D3A8DB92B833
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/y76AoVcrW4ZDGh1qt7qCcVOwnfY.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207485
IP address blocks: 159.148.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:35:3a:f6:36:f7:86:8d:37:d3:a8:db:92:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbbe80a1572b5b86431a1d6ab7ba827153b09df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:34:6b:36:24:b2:5d:eb:b7:04:12:11:bf:
fd:3e:79:9b:e8:5f:4e:91:a5:97:a1:07:39:f6:12:
32:25:27:26:d3:7c:3e:d9:bd:08:7a:aa:a9:4b:50:
c3:21:7f:76:8a:82:76:8b:db:db:1c:8c:52:e3:dc:
0a:ba:0d:bf:39:67:a8:4c:bc:10:c5:d9:c6:3b:b5:
7b:fc:a1:a5:12:75:61:55:ce:bc:90:b5:ef:b4:55:
0f:c6:d3:f2:0a:7f:b1:4a:0f:bb:b0:46:57:81:b9:
7f:d9:93:7b:1e:bb:86:46:0e:15:19:be:54:28:60:
cd:10:14:cb:6a:8c:5e:c7:36:71:30:82:21:b7:e6:
1d:90:fd:f7:63:97:64:17:26:f8:f0:8d:f8:c5:3f:
77:e8:9f:d1:fb:d3:9f:5a:0a:a8:f5:53:ba:34:e6:
a5:74:f6:6b:fa:41:be:8c:57:97:f9:d9:23:f7:6e:
ac:38:fa:fc:22:72:61:13:9a:25:31:85:e1:99:35:
c5:46:6c:81:6c:92:3a:6d:c8:5c:16:d1:65:91:65:
a5:1e:f3:1d:14:11:81:63:fe:35:28:b4:ff:8a:42:
3b:d8:8d:07:09:53:81:55:88:8c:6c:07:29:e4:70:
f8:be:cd:dc:f9:93:e7:fd:b1:8b:1c:c8:d2:6f:e8:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:80:A1:57:2B:5B:86:43:1A:1D:6A:B7:BA:82:71:53:B0:9D:F6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/y76AoVcrW4ZDGh1qt7qCcVOwnfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.50.0/24
Signature Algorithm: sha256WithRSAEncryption
53:46:00:83:02:57:9b:79:a9:b1:08:5d:58:c5:42:39:2a:6c:
48:ce:d8:4e:2d:af:41:a2:52:a1:e4:d8:6b:f8:8e:30:cf:d9:
04:c6:4d:4c:e8:02:a7:82:8a:b2:ef:17:87:d8:78:2b:b1:5c:
fe:61:04:77:09:8b:ff:6d:73:e9:c6:48:ef:f5:5c:d3:b6:c4:
f7:1f:01:33:e8:cf:f5:aa:ab:fc:24:1d:02:89:13:0e:73:2e:
ea:ec:b8:53:f1:3a:2b:8a:6b:4a:48:7f:cd:dd:db:be:a9:2c:
8d:7b:8e:d0:c9:81:20:44:d5:1d:15:87:cd:0d:c3:7e:b0:1e:
e0:31:40:a1:5f:b7:7f:ce:ae:91:49:30:9f:f6:34:77:32:ca:
4e:ab:18:5b:7b:79:d2:a5:06:41:28:2a:59:d9:9e:f6:8f:e9:
a3:35:98:56:93:09:0e:ae:96:0a:1f:26:97:dc:34:55:d3:0a:
6c:e5:db:0f:f9:9a:ca:b9:de:02:9d:a3:47:20:46:08:09:d4:
13:af:3f:25:06:36:4f:4f:70:e9:6c:6a:e6:58:9e:93:ea:c8:
88:55:8b:65:9b:07:c2:39:ae:e4:74:74:9b:66:e3:2b:95:f2:
52:b5:e8:ee:52:0c:25:ee:b5:00:09:d8:62:0d:de:d0:e2:75:
01:2d:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:38:18 2024 by rpki-client on console-fra.rpki-client.org