Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/yNW5_hyXVzvJdrXPEQbcpr7H6Fw.roa
File: yNW5_hyXVzvJdrXPEQbcpr7H6Fw.roa (raw, json)
Hash identifier: RYacxBTBGHaXgdpp0aFWY6YycbG4NZhkZ7bAbXDgK80=
Subject key identifier: C8:D5:B9:FE:1C:97:57:3B:C9:76:B5:CF:11:06:DC:A6:BE:C7:E8:5C
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 018F62BF04F1A9D648A9FB02D4CC6A15B3DC
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/yNW5_hyXVzvJdrXPEQbcpr7H6Fw.roa
Signing time: Fri 10 May 2024 13:43:56 +0000
ROA not before: Fri 10 May 2024 13:43:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 46.173.64.0/20 maxlen: 20
46.173.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:bf:04:f1:a9:d6:48:a9:fb:02:d4:cc:6a:15:b3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: May 10 13:43:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d5b9fe1c97573bc976b5cf1106dca6bec7e85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:18:66:88:0a:37:92:35:86:c0:9c:fa:9e:
45:99:9d:d7:fd:52:29:6c:c2:6d:c9:dc:e3:39:99:
ca:1a:5f:b6:cb:85:47:86:9b:a4:b6:2c:8e:e1:cd:
f6:d6:53:5d:17:f6:ee:a6:3d:7d:98:c4:57:eb:27:
cd:41:de:40:df:89:74:d4:99:92:20:c1:ea:5c:7a:
d8:c4:af:68:42:c3:d3:ed:a6:62:52:07:e4:cf:ee:
9f:50:2e:e9:69:0a:0f:60:63:d3:1d:50:29:a2:19:
65:99:b8:4c:5b:4d:61:9e:fe:ed:fc:0a:44:c5:7d:
6e:7d:85:b7:0e:6b:1e:61:76:15:bc:27:c1:b1:c8:
1e:a1:78:9b:6e:d9:54:7f:80:41:7e:91:c6:60:41:
4f:ad:45:47:19:21:b0:75:27:3f:18:82:30:e0:8a:
b7:25:e0:86:ff:f5:0c:9b:1a:fd:35:9f:51:42:08:
f9:71:ff:f7:5b:d8:aa:16:11:de:1a:6b:93:86:bb:
8b:12:a1:38:14:b7:7a:f9:ef:d1:b5:53:84:5e:0f:
2f:f3:bd:7c:95:d0:d1:41:9b:ca:d3:23:4f:21:90:
c4:89:e4:39:34:e8:44:40:0c:62:de:fa:8d:7e:93:
3e:b3:6e:14:93:65:a1:db:60:38:6b:ec:93:fc:aa:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D5:B9:FE:1C:97:57:3B:C9:76:B5:CF:11:06:DC:A6:BE:C7:E8:5C
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/yNW5_hyXVzvJdrXPEQbcpr7H6Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:ff:ed:aa:b0:1c:3a:ef:9c:a1:b8:16:49:02:2a:8b:2c:d1:
16:38:2e:45:5a:58:24:35:1c:2a:dc:55:c0:aa:cc:b9:1b:89:
5b:a1:e6:32:dd:94:76:f5:19:cd:8f:37:40:3f:02:56:4a:b4:
9e:55:42:9e:57:70:bf:08:6b:29:98:9f:39:cc:7a:bd:b2:2c:
b0:04:75:38:df:f4:7d:6a:43:bc:a7:f0:a5:ea:bd:6c:19:56:
ca:9c:d4:ec:ff:e5:42:60:66:bd:95:98:49:78:71:e5:fe:09:
85:ff:83:c2:d2:af:65:fa:cd:ea:d8:b9:c1:b9:07:2c:a2:f3:
a5:ff:00:46:b8:8d:15:7e:e7:a7:9a:ed:dd:ae:33:2e:8b:ff:
fb:33:be:de:a8:f0:58:98:a8:3c:24:a3:9c:f7:e2:3e:d0:31:
c6:82:9d:6e:a2:d6:0f:96:2f:4e:87:36:f9:94:bc:69:b9:7e:
b3:a5:72:a1:aa:e4:e3:0a:c1:79:df:41:f6:71:54:d1:ee:fa:
fc:59:e9:cf:3a:ed:52:06:ea:84:39:dc:d4:88:4e:dc:1c:25:
8a:8d:b1:ac:6c:fa:3b:9c:7e:79:71:58:77:66:fa:9d:88:0e:
21:81:23:25:10:38:c5:5c:38:d2:2d:bb:8f:d1:c9:08:55:b3:
93:e6:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:07:23 2024 by rpki-client on console-fra.rpki-client.org