Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/00YlR7dhjSObCX_SjSyqiwuvT0Y.roa
File: 00YlR7dhjSObCX_SjSyqiwuvT0Y.roa (raw, json)
Hash identifier: iabl+A7L3DBj24Gdjv2HPVfmULWa1sNOii1rRBv8i7c=
Subject key identifier: D3:46:25:47:B7:61:8D:23:9B:09:7F:D2:8D:2C:AA:8B:0B:AF:4F:46
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CF4B0DD302C7951D95E307EC678E55635
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/00YlR7dhjSObCX_SjSyqiwuvT0Y.roa
Signing time: Wed 10 Jan 2024 18:44:40 +0000
ROA not before: Wed 10 Jan 2024 18:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 94.154.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:b0:dd:30:2c:79:51:d9:5e:30:7e:c6:78:e5:56:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 10 18:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3462547b7618d239b097fd28d2caa8b0baf4f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:92:d5:8c:af:2f:87:fe:14:1f:e5:f4:93:
f5:cb:2a:e3:3a:a1:34:cd:63:4c:d6:0d:02:07:a4:
31:00:ce:4f:92:49:08:ff:98:81:10:f0:7f:84:d7:
e9:89:aa:2c:ca:a3:c5:c6:cb:6e:8f:c1:e6:af:f0:
20:d8:83:37:c9:20:6b:db:63:85:b2:67:43:3b:73:
e6:44:6c:70:99:d1:5e:c6:00:dd:2d:54:56:eb:b1:
b0:48:3f:7d:5a:20:64:3e:3f:fc:c2:44:61:17:a5:
66:7a:0e:a7:7c:6f:4d:6d:4b:69:ca:67:ab:5f:6d:
0c:dd:16:e3:78:cf:81:f5:8e:9c:0d:dd:80:dc:79:
c9:17:f8:8e:96:cc:c7:c9:c2:cb:a7:39:24:3d:42:
57:d6:c2:f2:e1:8d:08:ea:0e:eb:5a:34:da:a6:54:
bc:47:21:18:c7:9e:d1:e3:20:a1:59:2b:90:6f:d1:
4e:74:e2:1c:5e:1a:d7:b3:42:84:bc:32:19:92:25:
44:67:52:0d:aa:ef:c7:01:aa:33:76:1e:9f:d8:ad:
37:4a:de:2f:79:94:5f:f8:db:5e:6a:69:2f:01:e1:
5b:65:61:59:fd:ec:17:e7:34:a4:4b:0c:db:d3:3f:
11:3f:5d:e6:16:e1:bf:06:03:3f:d2:73:88:21:2f:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:25:47:B7:61:8D:23:9B:09:7F:D2:8D:2C:AA:8B:0B:AF:4F:46
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/00YlR7dhjSObCX_SjSyqiwuvT0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:40:65:e6:8e:8d:20:f9:b7:0b:9f:22:92:1a:b0:12:3d:73:
bc:3e:ae:ce:3f:cf:8a:7d:b2:21:92:bc:32:54:de:0e:c8:18:
8a:fe:d8:fc:32:15:fa:bd:e7:45:eb:dc:d7:14:d5:85:81:8a:
ca:10:47:cb:ea:9a:7c:78:63:00:d4:b9:f5:12:d8:36:e2:55:
04:a3:0f:c0:3d:78:e3:3c:69:bc:ec:f7:f9:83:15:2a:e4:33:
88:02:37:38:62:72:e3:e6:60:27:a7:8e:92:ec:5c:fd:1b:b0:
08:96:3c:43:5d:0d:ba:b1:64:3e:69:93:87:eb:18:52:21:f3:
e0:0e:49:44:f4:90:39:67:bf:56:0b:f7:1a:25:1c:26:57:0c:
a7:85:97:3f:0b:1e:50:bb:52:c1:8a:52:66:8e:b1:4e:1d:f1:
de:75:e4:31:6d:b3:be:04:25:07:4a:cc:8a:59:a1:99:ce:ca:
fa:3e:00:cf:13:67:8c:f0:93:62:05:cf:0a:92:03:8b:ba:97:
fe:33:73:58:fc:72:ab:3a:14:92:dc:54:0a:20:d3:e5:cb:06:
5e:ec:0c:f4:62:a4:1f:e6:91:c3:25:8f:1d:ac:89:73:b8:bf:
26:a8:9a:1b:9c:93:51:fc:78:02:bb:ed:19:58:8c:14:eb:1d:
63:04:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 10:33:19 2024 by rpki-client on console-ams.rpki-client.org