Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/ycaMXVnQcghKBgub9UfH055lagg.roa
File: ycaMXVnQcghKBgub9UfH055lagg.roa (raw, json)
Hash identifier: YtkHKstmYiZO6NWbQjDNnxJWjyOKB8hqbSpLpH+EdwQ=
Subject key identifier: C9:C6:8C:5D:59:D0:72:08:4A:06:0B:9B:F5:47:C7:D3:9E:65:6A:08
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 018CC8017AF4DF758DC5EDE98E0BEDEB9C9C
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/ycaMXVnQcghKBgub9UfH055lagg.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209642
IP address blocks: 45.148.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7a:f4:df:75:8d:c5:ed:e9:8e:0b:ed:eb:9c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9c68c5d59d072084a060b9bf547c7d39e656a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:5c:de:48:92:fd:36:9f:f3:65:e3:ee:9e:
df:04:ac:85:c5:e9:88:d6:b9:db:33:75:3c:a5:7a:
1c:08:83:51:49:65:f4:07:00:78:09:34:60:e9:e4:
3d:23:56:5f:5c:3d:fa:cc:74:ba:f2:2c:23:de:2f:
d2:80:a9:c4:62:c9:fd:a2:1a:21:04:31:09:30:66:
35:0d:d9:41:0f:97:fd:05:2a:92:fd:54:ea:13:5d:
d0:cd:25:cc:40:7c:83:86:73:de:08:b8:57:ac:64:
ba:c9:d8:1b:ed:5e:f7:db:2d:6d:cf:ad:54:1d:ff:
ae:d0:ce:f0:5e:c8:ba:c9:cd:55:1a:fc:b7:86:e7:
a7:4d:2c:c5:01:21:8d:a6:37:c5:8b:73:bd:ef:36:
e6:4a:2c:e1:eb:8f:0d:e7:4b:9b:f1:37:4c:0a:35:
50:42:0f:1f:77:e0:ae:38:4e:3b:90:6b:f8:13:6d:
05:9a:43:e8:fd:3c:14:b1:25:90:91:a3:44:0c:83:
60:76:f9:17:89:9d:11:95:ca:07:ae:70:bb:0b:e1:
aa:52:7d:2d:e3:9b:e1:42:f7:e1:e6:dc:29:66:24:
d7:b2:ee:c3:ff:97:e6:2f:5b:76:2b:ed:ce:b2:b0:
2c:0a:5d:f0:0b:0b:10:61:c6:9c:35:12:34:f2:d0:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:8C:5D:59:D0:72:08:4A:06:0B:9B:F5:47:C7:D3:9E:65:6A:08
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/ycaMXVnQcghKBgub9UfH055lagg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.133.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ca:fe:61:44:e7:0f:59:79:ce:7f:af:9e:39:1f:f8:97:61:
28:56:81:e3:0d:44:33:23:28:ab:a4:0e:c5:01:8f:4e:36:2e:
aa:68:0d:64:96:8a:78:32:1a:96:fa:6d:99:1d:b3:ff:0b:a7:
6e:09:27:c4:a1:d0:40:44:fa:c9:ad:bd:52:c1:1f:b0:9e:af:
3c:e4:3c:bd:f6:74:8e:f7:25:b4:66:28:b8:23:4f:10:c2:3d:
1e:bb:99:64:d6:06:7a:f3:be:b2:05:4c:9a:65:6c:53:e7:ce:
39:ca:7c:07:98:38:14:49:2c:8a:9d:16:48:3c:77:f2:0d:54:
c1:6f:77:04:9e:d6:2e:34:a8:7f:af:d3:3e:05:e6:21:fa:de:
09:8d:f5:ed:41:b7:9c:ae:5f:87:b9:ef:b4:2b:53:bf:eb:3a:
53:72:d1:d9:bb:e6:d7:24:de:62:45:46:7c:2a:bf:0b:83:ee:
b1:ee:c6:15:3b:4a:d9:9e:d4:ee:35:b4:42:7d:5b:8a:f9:e1:
c8:46:90:67:ee:7d:76:a1:66:85:ac:b3:66:38:2c:6c:fb:89:
53:7e:5e:62:ac:da:09:24:4e:e8:2f:88:7a:4a:59:16:7a:c0:
d7:6a:28:c7:71:5c:04:09:c3:a7:c5:e5:e2:4d:9d:1a:d8:1e:
35:07:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:36:17 2024 by rpki-client on console-ams.rpki-client.org