Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/yNdcyJ8xnCcNAhrQbzsLCOLNEjg.roa
File: yNdcyJ8xnCcNAhrQbzsLCOLNEjg.roa (raw, json)
Hash identifier: l2wBN82TXDPrlM38dbTTA2axUJMArbp7BwP3BmHfRmo=
Subject key identifier: C8:D7:5C:C8:9F:31:9C:27:0D:02:1A:D0:6F:3B:0B:08:E2:CD:12:38
Certificate issuer: /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial: 019169DB672AC32F04CC809680DDE4F9F3BA
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/yNdcyJ8xnCcNAhrQbzsLCOLNEjg.roa
Signing time: Mon 19 Aug 2024 08:57:52 +0000
ROA not before: Mon 19 Aug 2024 08:57:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197297
IP address blocks: 46.253.144.0/20 maxlen: 24
46.253.145.0/24 maxlen: 24
195.245.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:db:67:2a:c3:2f:04:cc:80:96:80:dd:e4:f9:f3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Validity
Not Before: Aug 19 08:57:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d75cc89f319c270d021ad06f3b0b08e2cd1238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:f0:18:7d:7e:b5:ea:a2:fb:8b:f5:9d:27:
85:61:94:de:45:7a:0a:3a:00:6a:a9:be:a2:52:a2:
3a:c8:f4:e4:64:72:14:a3:71:90:b6:f1:be:6c:8a:
d5:4a:f8:8d:17:e1:41:4a:b2:40:2c:08:dc:cb:9d:
d2:66:24:2c:56:c0:d1:4a:3d:16:58:3d:9e:d0:a3:
77:e9:62:c3:d1:a4:25:26:fb:e6:ee:98:d6:da:7e:
43:3c:11:09:40:b7:26:34:51:cc:21:af:74:4d:3e:
63:55:92:c6:46:d2:64:d0:3c:d6:e1:f4:07:a4:7d:
9d:0f:e1:9a:fa:93:e9:03:58:29:ef:49:27:f9:0c:
75:76:f1:e6:96:eb:76:f0:a5:58:37:10:56:aa:2d:
5a:66:58:e6:3e:60:f1:9c:5e:25:6a:b6:95:db:5b:
8f:7b:3f:29:bd:43:74:0c:38:07:74:91:80:65:f3:
47:a2:c4:2d:e8:29:73:ae:3a:5c:64:cc:74:3a:b1:
7f:4c:ca:bf:51:fa:1a:e1:a3:7b:b6:13:cb:02:1c:
f6:a1:42:6d:1e:89:a3:55:aa:7b:65:83:9c:6f:dc:
33:ab:d2:33:3e:28:63:f1:1c:fc:3f:a1:78:1d:c8:
c0:be:9f:9d:e8:d7:fe:0a:3a:38:cf:05:32:6c:bb:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:5C:C8:9F:31:9C:27:0D:02:1A:D0:6F:3B:0B:08:E2:CD:12:38
X509v3 Authority Key Identifier:
keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/yNdcyJ8xnCcNAhrQbzsLCOLNEjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.144.0/20
195.245.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:6f:dd:76:5e:f2:db:d9:3e:f8:5f:04:fd:6d:50:05:d9:5f:
20:77:58:3b:05:e3:43:b2:4d:8d:d5:c3:a9:a9:0d:5f:ec:38:
b6:2b:d1:23:f0:9d:c0:b1:8b:cf:7d:3a:b3:34:54:21:11:04:
7e:ee:f2:ee:9e:37:71:ee:8a:a1:32:fb:48:c6:e0:a6:46:c7:
b9:a9:a3:4a:7b:83:05:80:6c:ae:21:09:79:71:4d:9f:af:19:
7e:f4:6c:30:9b:df:b6:cf:4e:65:a8:70:16:58:19:5f:53:08:
1f:48:32:57:d4:a1:80:96:77:13:3a:61:1f:e5:df:1d:d0:66:
b6:ab:e8:76:f4:65:20:4e:fb:6e:92:89:15:12:86:01:08:af:
f2:36:b9:39:2f:ca:9e:2e:66:b6:89:c9:86:fd:28:81:cb:a7:
5f:b9:18:88:94:f9:f5:b6:9e:fd:9f:72:5c:c3:70:57:22:af:
b7:1e:10:2c:b8:f7:aa:e2:97:98:6a:cf:3d:b9:aa:29:dd:af:
3f:cb:3b:13:ae:11:99:26:eb:3b:20:81:56:12:11:ab:7f:08:
73:5c:f6:60:7b:da:db:b1:56:e9:11:01:a6:9f:86:a6:7e:be:
e8:c5:a6:3d:08:2b:42:44:f3:f8:20:f1:e2:7e:e8:db:66:47:
6f:67:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:51 2024 by rpki-client on console-fra.rpki-client.org