Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RyB3ARwykoBhS7jmXDzzELiykII.roa
File: RyB3ARwykoBhS7jmXDzzELiykII.roa (raw, json)
Hash identifier: LjMfBB+4eYX9U/g56VkSPUbjhcQ4lz66x9qh9mmNMKU=
Subject key identifier: 47:20:77:01:1C:32:92:80:61:4B:B8:E6:5C:3C:F3:10:B8:B2:90:82
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC4936EA18CCB65BFBAB07EAD62606157
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RyB3ARwykoBhS7jmXDzzELiykII.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211448
IP address blocks: 2a10:4646:190::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6e:a1:8c:cb:65:bf:ba:b0:7e:ad:62:60:61:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=472077011c329280614bb8e65c3cf310b8b29082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:37:7d:ac:97:6c:2e:f5:ae:f0:a0:e5:3b:
23:f6:e7:7e:26:6a:f1:86:82:62:84:08:8d:26:6c:
c2:d0:7a:05:7d:85:ec:64:30:f9:df:ad:f5:e3:7a:
44:ba:2a:78:9b:2c:cb:eb:39:71:13:a5:96:46:d5:
d0:b7:3f:d6:68:eb:6b:44:01:39:ff:33:46:ca:b3:
89:6c:30:c3:a1:0b:93:a1:31:90:39:e0:c4:92:6b:
77:d9:e2:3d:ea:f3:21:17:d9:08:03:33:c8:f9:dc:
b7:9d:2b:59:52:0e:4c:95:3a:f9:5e:3e:96:40:0f:
2f:f6:8f:5b:32:2e:3e:c6:14:29:1f:0f:2c:1b:ff:
07:92:0a:ac:98:56:b7:8d:ac:f3:fd:2d:f2:6c:2c:
17:5c:91:19:d2:f2:84:27:c3:72:e6:97:37:9a:c4:
16:af:7c:e6:9f:75:42:af:aa:20:82:6d:81:38:08:
18:87:38:8c:cf:08:02:5f:24:3e:73:5d:ba:c9:0e:
fc:c1:b6:0e:ac:75:86:c4:c4:b8:c4:a9:0c:20:3c:
79:6e:a5:96:56:23:d1:b8:32:2c:b0:ea:b0:d9:ee:
19:f4:72:89:83:3f:b7:63:50:ff:c6:91:5d:b6:bf:
a9:44:94:f2:b0:cd:51:a6:34:a8:79:32:24:0f:29:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:77:01:1C:32:92:80:61:4B:B8:E6:5C:3C:F3:10:B8:B2:90:82
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RyB3ARwykoBhS7jmXDzzELiykII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:190::/44
Signature Algorithm: sha256WithRSAEncryption
00:1d:4b:b6:39:fe:b9:5a:d7:b1:99:ce:2c:00:91:3b:a1:dd:
4f:e1:6b:28:2d:c1:66:ff:89:00:c4:42:fe:39:47:a8:46:c8:
e7:04:4b:e8:09:a1:85:8d:e6:a3:24:0d:71:ba:54:4d:a7:f1:
ed:f3:5b:08:7b:46:4f:0c:ed:14:39:70:aa:3d:91:9f:b7:1a:
e6:5f:a6:d2:09:b8:3e:de:f6:f8:0c:5c:bd:ae:1f:61:d1:60:
08:20:b9:3d:af:5b:2e:6c:cc:b4:f6:88:61:f3:11:9d:57:5c:
d1:5b:5e:1e:80:b0:54:ae:49:a5:d1:9c:8e:55:6c:c3:8b:21:
e2:74:a2:5d:54:d4:68:d1:fb:c8:9f:58:b1:a0:ec:c2:7a:96:
98:c4:d8:05:12:bb:05:d1:df:d2:a8:60:94:0a:1a:6b:97:76:
3b:b0:ea:f6:df:1c:b6:83:30:38:cd:14:9a:85:58:d3:83:ad:
7f:c0:28:8f:c1:32:a1:27:09:ea:e3:b8:b0:bf:60:f5:ab:4e:
cf:bc:45:b1:73:9b:4b:80:64:3a:dd:8d:75:5c:b9:46:03:3e:
02:d8:09:3d:00:7c:68:34:31:5f:2d:cb:9a:92:41:8a:e7:93:
0d:32:f2:e1:8b:77:c0:2b:80:8a:d9:49:d4:ff:7a:db:08:e4:
d0:f2:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:19:59 2024 by rpki-client on console-ams.rpki-client.org