Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YITKUVfODTkjqylR89Hb5K22LBs.roa
File: YITKUVfODTkjqylR89Hb5K22LBs.roa (raw, json)
Hash identifier: zCcim0nvNzZxtgvfiZX/o0Ye3t/BJ3qbeWgWvtNofNU=
Subject key identifier: 60:84:CA:51:57:CE:0D:39:23:AB:29:51:F3:D1:DB:E4:AD:B6:2C:1B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F9B9688371999810850DAFE9052BBC399
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YITKUVfODTkjqylR89Hb5K22LBs.roa
Signing time: Tue 21 May 2024 14:38:04 +0000
ROA not before: Tue 21 May 2024 14:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58070
IP address blocks: 46.254.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:96:88:37:19:99:81:08:50:da:fe:90:52:bb:c3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 21 14:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6084ca5157ce0d3923ab2951f3d1dbe4adb62c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:db:51:88:b0:6b:41:9a:bf:9a:10:e1:5f:
b5:05:b1:41:d6:df:b3:df:0b:06:91:aa:88:d9:70:
05:b1:9b:f3:cf:3d:e1:31:da:c2:ba:1b:84:39:0c:
03:f3:1c:24:56:94:6e:06:32:28:b0:34:bd:db:75:
07:a8:6e:be:2d:33:22:ba:77:c2:e1:64:f3:1c:99:
93:79:18:a7:e2:71:77:1c:4c:1c:7f:be:0b:5f:16:
6e:b2:b2:c4:57:08:1e:c3:d2:6b:bb:85:23:7f:78:
ec:44:4d:dc:b4:39:65:0b:a6:ff:ed:84:3b:c5:a6:
e2:6c:ba:dd:90:27:5c:29:9a:fb:b3:89:e1:fc:57:
41:b5:43:ab:a5:34:3e:e2:fb:c1:92:76:85:4a:6a:
b2:d8:ba:49:08:57:78:fc:6e:04:f7:f3:b2:2f:b0:
d3:a4:4a:4c:2c:da:b2:d1:d6:a1:e5:f2:66:4b:8c:
cd:d0:44:69:00:a0:f8:1c:f2:0a:1a:c4:5c:49:ee:
9a:33:d5:a5:01:60:4e:31:5f:fa:f3:b0:3c:dc:6c:
95:3c:63:a2:84:5d:22:80:0b:1b:5f:63:fc:cc:4b:
41:64:15:0d:bf:f8:68:98:ea:71:d6:b9:32:a7:01:
db:b5:1d:2b:49:d8:bf:39:0f:0a:9d:46:e1:b4:25:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:84:CA:51:57:CE:0D:39:23:AB:29:51:F3:D1:DB:E4:AD:B6:2C:1B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YITKUVfODTkjqylR89Hb5K22LBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.109.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e5:f2:aa:3f:d1:62:77:60:98:0b:5d:13:f3:8c:3c:f1:4d:
2c:93:34:d9:fb:d0:59:18:4d:cd:bf:42:5b:ba:53:73:0b:ee:
4c:c8:47:57:d0:1c:d2:70:30:1a:52:a5:6a:9d:92:8a:e1:6b:
13:ea:59:bb:61:3b:50:6a:8a:21:18:e1:68:28:e1:27:fc:73:
91:75:4f:87:59:f8:83:3a:0d:af:89:8b:9a:50:17:3a:dc:2d:
ea:72:0d:b4:0e:a0:c3:4a:e7:fc:cc:f5:8c:99:19:3e:d8:01:
60:5b:bd:90:f7:bd:ce:bb:41:a1:35:96:0c:c7:0a:f4:8f:48:
c6:6e:f2:dc:6d:56:9b:2d:27:7d:c4:c1:f7:60:93:e9:03:08:
0c:ea:e0:71:cb:40:7b:b8:64:cc:62:c2:bf:ca:67:39:62:44:
c3:16:de:59:b1:76:ad:ed:f9:11:b4:0f:97:ed:32:a4:9e:43:
0a:f0:d1:05:74:ca:cc:a1:9b:54:14:04:a3:a9:16:a8:1e:cf:
ab:9b:48:ee:84:81:3b:d0:04:93:c7:6b:a8:5a:0f:8e:0d:cf:
79:06:95:08:7e:69:ff:e1:da:b6:fa:af:8b:59:fb:b3:8d:4f:
e9:b9:03:da:54:45:ae:a0:cd:a5:1d:5b:d6:24:09:1d:b6:ad:
a8:9e:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:27:32 2024 by rpki-client on console-ams.rpki-client.org