Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/gy-slLEj1NJ3KSBYxkUx_BpgomU.roa
File: gy-slLEj1NJ3KSBYxkUx_BpgomU.roa (raw, json)
Hash identifier: a91U/e0LS4GcfD93+ZaUaq3PFcCPMiJCT9Iv8B6E/lE=
Subject key identifier: 83:2F:AC:94:B1:23:D4:D2:77:29:20:58:C6:45:31:FC:1A:60:A2:65
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 018CC56E7B1ACF68918569936DF7E67EA561
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/gy-slLEj1NJ3KSBYxkUx_BpgomU.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62211
IP address blocks: 46.106.204.0/22 maxlen: 22
149.140.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7b:1a:cf:68:91:85:69:93:6d:f7:e6:7e:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=832fac94b123d4d277292058c64531fc1a60a265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:25:05:6b:9f:5b:93:06:1e:9c:01:37:49:
d4:bb:b6:81:8d:53:d2:47:88:58:04:7f:2e:e3:92:
09:1b:99:49:e5:5e:49:0e:b7:10:9f:b0:c3:bb:14:
c6:1f:a2:0b:92:ca:fe:0c:18:e6:d0:14:12:c1:77:
04:8d:d4:93:cd:99:9a:e2:de:bd:29:1a:56:a3:84:
9f:13:9b:db:92:4b:3a:19:1a:8b:a5:a1:1b:ae:0d:
08:a7:4d:c0:a2:f2:10:63:58:7b:15:71:4a:21:ad:
08:5e:fe:8c:a6:61:06:3e:c1:f9:dd:12:40:0a:f0:
50:4c:1e:83:39:1a:a7:18:1f:7e:3d:0c:4e:70:46:
9d:68:84:87:7b:4a:2b:ec:ff:b4:54:dc:27:31:4d:
a3:07:f3:4b:6a:57:17:b1:4a:12:71:96:d7:71:6e:
79:02:0a:a9:fe:2c:08:9a:a9:19:e3:93:b9:9d:32:
4d:d3:fb:b2:ee:44:38:e7:c5:be:7d:2f:90:22:e2:
41:7c:5c:76:09:d5:dc:9e:02:18:ed:f8:a2:75:76:
fc:88:79:44:00:95:df:8f:83:16:7a:01:6a:a4:c2:
f2:3d:b5:e5:f4:6a:72:5a:35:bd:3a:36:8a:c1:c1:
28:d8:9b:11:e9:cd:45:50:23:3a:5b:b8:c2:ab:56:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2F:AC:94:B1:23:D4:D2:77:29:20:58:C6:45:31:FC:1A:60:A2:65
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/gy-slLEj1NJ3KSBYxkUx_BpgomU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.106.204.0/22
149.140.252.0/22
Signature Algorithm: sha256WithRSAEncryption
96:1a:4c:8b:e5:4e:a3:a3:1a:d0:3b:aa:2b:8d:ce:8e:a3:b5:
08:0e:78:58:2f:4c:c4:32:64:8e:29:0c:74:83:78:0d:dc:02:
a2:4b:37:07:0e:bd:7b:2d:9a:7b:01:3a:ba:d8:b3:01:93:ba:
79:23:a6:21:7d:ab:29:d0:80:77:a6:e7:2f:ad:8b:ed:8c:f2:
0e:42:f8:fa:09:4d:25:27:68:17:7e:2a:ab:c1:3b:7f:ec:b1:
51:b8:a3:f8:eb:9d:7b:15:9b:bf:82:71:a7:d4:af:8f:ce:ca:
b5:54:ef:3a:37:c6:df:4e:20:47:b6:78:21:fe:bc:73:bf:42:
c0:34:71:39:99:48:37:4d:fc:bf:3b:66:b3:d8:f4:69:83:2c:
9d:53:3b:08:86:01:0b:44:d8:e7:ac:71:65:5c:94:0b:07:d8:
a4:9e:88:a2:a2:65:69:6a:05:f7:0a:82:d4:38:b5:76:0e:a9:
44:ea:b3:7c:11:64:3d:25:dd:54:6f:03:f1:69:07:0b:29:5e:
0e:3b:e0:1e:e7:6a:08:e2:d6:58:82:da:c9:81:74:1c:ec:d0:
fa:33:1a:d2:e6:25:05:c0:ee:35:77:74:90:6c:7b:fa:59:70:
35:fb:ac:07:78:d9:e8:94:fb:a0:c1:48:96:82:64:a1:9c:52:
c1:23:9b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:24 2024 by rpki-client on console-ams.rpki-client.org