Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/y3tbByCUCjFWR0BVep4ZbfnLb5g.roa
File: y3tbByCUCjFWR0BVep4ZbfnLb5g.roa (raw, json)
Hash identifier: 7AH1BSARNciN59WB9k2vsr0/GI+T7o25/utBbPCLOLg=
Subject key identifier: CB:7B:5B:07:20:94:0A:31:56:47:40:55:7A:9E:19:6D:F9:CB:6F:98
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 018ECC4487537D2C70A8DBD0C5267864EF28
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/y3tbByCUCjFWR0BVep4ZbfnLb5g.roa
Signing time: Thu 11 Apr 2024 08:27:06 +0000
ROA not before: Thu 11 Apr 2024 08:27:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 45.11.182.0/24 maxlen: 24
91.242.219.0/24 maxlen: 24
109.230.199.0/24 maxlen: 24
194.76.224.0/24 maxlen: 24
2a0b:7140:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:44:87:53:7d:2c:70:a8:db:d0:c5:26:78:64:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Apr 11 08:27:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb7b5b0720940a31564740557a9e196df9cb6f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e6:0c:ba:0e:ae:11:96:2c:8f:4e:b3:c1:af:
8c:df:fd:bd:0b:b7:58:67:79:ca:3e:5b:38:9d:37:
a8:56:1b:63:4b:44:7b:4a:d8:76:64:46:cc:36:90:
7a:fc:1d:ed:3a:15:2d:e4:2d:2e:3a:08:2a:75:e5:
d7:b2:3f:7a:a7:fa:be:0d:88:55:89:41:8c:93:e1:
a8:da:26:25:cc:0e:bf:f9:60:3a:60:0f:dc:ff:13:
4e:2f:79:d1:cb:07:b6:63:18:36:ae:ff:ee:92:fc:
c4:e0:a7:28:3f:bc:f7:1c:2d:6e:4b:23:95:97:4e:
94:4e:43:cc:16:8f:9d:74:9b:7e:65:19:a6:90:25:
6e:10:24:f2:b5:6d:62:20:3e:e9:14:2f:09:09:b3:
6d:dc:e1:e0:06:f5:01:72:06:5d:63:c0:bd:a5:b8:
b5:cc:71:5b:e1:eb:6e:5e:1f:09:a8:60:c3:69:b1:
eb:cf:a2:3e:20:c1:2a:9e:52:1f:63:61:ba:e9:02:
81:f9:3b:ce:cd:19:33:d5:75:68:a5:6e:30:78:ce:
bd:86:96:a6:b4:87:af:3f:7d:fc:c5:41:fc:92:83:
ec:81:8d:d3:6d:6c:28:1e:be:4b:d4:cd:6c:ac:54:
65:04:4d:d2:75:b8:69:0e:8c:46:64:84:c1:e6:d8:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7B:5B:07:20:94:0A:31:56:47:40:55:7A:9E:19:6D:F9:CB:6F:98
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/y3tbByCUCjFWR0BVep4ZbfnLb5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.182.0/24
91.242.219.0/24
109.230.199.0/24
194.76.224.0/24
IPv6:
2a0b:7140:3::/48
Signature Algorithm: sha256WithRSAEncryption
9d:4e:1c:06:00:4c:bd:73:6f:ee:0e:28:67:ec:9f:68:b8:e7:
83:8a:bd:85:4b:c9:70:6e:2f:39:a2:0d:72:7b:6f:2e:b4:4d:
c6:d7:3d:3a:49:60:b9:d2:ff:c2:65:47:5e:e1:ec:1c:45:4f:
26:cb:90:c6:de:4c:14:45:45:2f:b7:23:c5:43:cb:e1:21:65:
71:e1:b8:0b:41:1c:e3:58:d7:54:6a:bf:5c:cf:0f:9c:22:57:
75:71:3b:9f:f4:e7:fe:35:aa:ce:84:06:89:8c:49:07:0c:51:
61:dc:21:ff:d3:da:33:23:79:44:16:ef:ed:8c:80:a9:87:bc:
fa:36:51:f0:c7:54:cb:8c:68:6c:d7:db:74:5f:ed:c5:63:55:
32:3b:92:89:db:8f:be:2d:7a:97:09:24:4f:67:74:84:60:e6:
41:78:b6:f9:9b:6e:e5:91:cf:f6:38:e3:18:dc:b7:8c:77:b3:
24:8a:26:49:aa:51:09:49:36:d3:48:8a:09:53:05:1d:1c:5a:
b3:9b:71:8b:66:26:88:34:1f:ff:6c:24:8a:8f:71:df:2e:fa:
c0:70:60:a6:0f:8a:7e:f4:be:c6:23:15:a5:b7:ba:2c:94:e0:
cc:10:11:00:52:85:fd:0f:91:e3:94:14:7e:74:57:3f:c0:6e:
a5:53:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:47 2024 by rpki-client on console-ams.rpki-client.org