Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/YinXRIziqAYbf-y_hPCSKIQTXGI.roa
File: YinXRIziqAYbf-y_hPCSKIQTXGI.roa (raw, json)
Hash identifier: rsHv8bEyjr+2BKH8q4kpEfVYdRCLF2EaGy5vCpIhbVU=
Subject key identifier: 62:29:D7:44:8C:E2:A8:06:1B:7F:EC:BF:84:F0:92:28:84:13:5C:62
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 018CC79497D9F58C8E1065D57A32C4A53D3F
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/YinXRIziqAYbf-y_hPCSKIQTXGI.roa
Signing time: Tue 02 Jan 2024 00:30:53 +0000
ROA not before: Tue 02 Jan 2024 00:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203980
IP address blocks: 46.172.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:97:d9:f5:8c:8e:10:65:d5:7a:32:c4:a5:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 2 00:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6229d7448ce2a8061b7fecbf84f0922884135c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:a5:db:74:3c:1f:b2:f8:1f:d2:7c:eb:18:
29:12:cd:a3:a7:1d:ea:d3:de:56:05:d4:ba:d0:60:
c1:5f:c5:0e:89:10:34:dd:14:fd:14:0f:e1:31:3f:
a7:90:73:3a:34:51:29:35:17:9e:ae:64:c8:19:90:
a6:d5:0c:18:e2:77:7b:65:0d:29:0f:8f:8a:4c:db:
44:2f:52:99:69:a7:a1:c5:2c:69:1e:83:1e:51:1e:
34:b0:44:83:de:96:ee:88:03:1d:c2:cb:c8:4d:7e:
f8:0f:3d:cf:c3:d3:d6:b4:01:41:78:15:d4:34:23:
69:14:0b:00:9a:83:9d:ed:26:d4:6d:69:a1:91:06:
9e:f4:12:12:b9:7d:f9:32:1b:b0:83:2e:30:c8:af:
85:df:d4:76:c9:8e:80:2e:83:01:8c:13:0a:e2:58:
08:0a:cc:72:ee:32:67:e5:5f:f5:ef:98:de:d4:9b:
62:30:cc:0a:0b:cc:7e:da:3e:b8:3f:cf:d7:9c:e7:
64:81:8f:05:34:f7:3b:49:54:9d:f3:31:43:cf:39:
76:72:50:58:25:49:0b:2c:7d:59:96:d2:f1:89:26:
3e:9d:0d:57:4e:ed:e6:34:8e:b0:fe:3b:3f:cc:e0:
0f:a2:43:11:58:11:be:3b:fa:f5:d5:11:d2:3d:fa:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:D7:44:8C:E2:A8:06:1B:7F:EC:BF:84:F0:92:28:84:13:5C:62
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/YinXRIziqAYbf-y_hPCSKIQTXGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.76.0/24
Signature Algorithm: sha256WithRSAEncryption
35:73:cd:db:bd:c7:a1:52:c7:15:20:35:aa:80:b4:1c:c0:54:
68:df:3d:d4:2c:cd:eb:cf:d4:85:79:a9:a8:5d:33:9d:c3:3f:
ad:2b:ef:97:bc:32:87:50:6a:84:f7:92:1b:23:af:e3:09:59:
7a:e8:1e:d0:e8:a5:6e:d3:7a:d4:b0:f9:6e:8f:f8:e8:c3:0e:
44:af:7c:2e:18:24:32:f5:e9:c5:b1:ac:76:7a:5f:ae:73:2d:
1a:ac:c0:ef:8c:1d:fd:68:b8:ec:d5:0a:10:f0:35:d9:c9:96:
27:ca:d9:fc:97:21:b5:72:8d:ba:e7:35:84:58:ca:b2:e9:30:
23:26:7f:a9:f5:cc:a9:37:7b:10:8a:c6:57:24:da:32:fc:b1:
93:78:86:43:1a:37:cd:7b:85:52:d3:e2:90:81:6e:ea:e3:24:
54:1a:36:85:05:8f:95:a1:3c:d0:59:b3:5e:99:f5:69:cb:2a:
a2:bb:c6:cd:54:3b:c2:56:0f:a5:f0:3e:27:2f:ae:01:ff:54:
0d:6f:be:72:75:57:75:c9:ff:d4:44:2c:8b:4e:4a:73:b8:4c:
93:92:a3:ec:07:6c:ca:46:24:81:2b:e5:a5:f0:a2:0e:4a:c6:
d3:14:54:77:c9:4f:ab:06:29:03:83:e0:6f:ec:57:b7:a1:1a:
17:e0:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:12:18 2024 by rpki-client on console-ams.rpki-client.org