Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/YaRY0cAgHDhp5qoZcfwT2sgLdV8.roa
File: YaRY0cAgHDhp5qoZcfwT2sgLdV8.roa (raw, json)
Hash identifier: IdgTWKH418BqZYpPx5cR63yfdkA/BqOq7tpdrH7W2lQ=
Subject key identifier: 61:A4:58:D1:C0:20:1C:38:69:E6:AA:19:71:FC:13:DA:C8:0B:75:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936F4564E9ACC403F8FECAAF9BBF65
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/YaRY0cAgHDhp5qoZcfwT2sgLdV8.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44599
IP address blocks: 5.252.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6f:45:64:e9:ac:c4:03:f8:fe:ca:af:9b:bf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61a458d1c0201c3869e6aa1971fc13dac80b755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:17:b5:2d:62:fa:41:4b:d6:68:42:d3:7d:
42:41:0f:a7:1e:e0:8a:59:ec:bd:16:95:4f:4b:b1:
d5:c7:c4:37:c5:ba:00:42:1d:0d:f3:22:8a:6c:01:
d1:67:9e:97:ef:da:71:7c:54:ee:d1:73:c1:2c:8d:
3f:e5:67:32:e0:55:5e:d2:27:c1:5b:4d:cc:56:66:
92:85:8f:d8:10:8f:d7:19:9f:3c:ad:fc:d9:33:6c:
fb:1b:b5:38:1d:20:08:2c:ea:3d:41:05:90:03:13:
ac:91:20:10:1d:0c:92:80:4b:a6:1d:02:7e:2b:2d:
ca:5f:a2:0c:03:c3:3f:3d:53:0b:65:06:1c:6b:8d:
63:97:07:a4:b4:f9:b8:16:ad:1e:16:94:a5:af:f9:
50:61:91:62:5b:d4:de:3d:68:c7:3f:b8:54:f4:13:
a5:84:17:6e:e6:c2:d2:f6:e3:f1:6f:02:99:f7:3a:
1f:59:fb:54:60:4a:28:df:1d:11:9d:6f:4e:ae:e6:
9d:68:ef:1a:ce:1c:2c:a9:25:69:b0:ce:15:49:a3:
c1:46:58:ba:8d:c8:a4:47:c0:ea:85:ad:2d:87:07:
3f:c8:64:bc:98:2f:40:e7:4d:e6:85:01:51:6b:43:
c3:2a:cf:63:b4:17:27:05:ba:51:f4:1f:2c:5a:21:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:58:D1:C0:20:1C:38:69:E6:AA:19:71:FC:13:DA:C8:0B:75:5F
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/YaRY0cAgHDhp5qoZcfwT2sgLdV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:00:d0:80:d4:09:3a:ab:48:a7:d3:1b:82:f8:9b:d4:32:71:
9b:44:c0:76:a8:66:7d:74:b5:54:66:e0:54:96:57:bc:5b:9e:
21:54:83:e7:00:db:4e:d3:11:64:f6:b1:d3:4f:74:a0:ed:4b:
9e:ca:0e:53:f6:e5:b1:bf:9e:2d:4d:a1:6c:86:7f:07:a2:9a:
97:2d:50:d5:44:50:7e:88:c0:b7:52:12:4f:b2:6b:87:cd:c9:
30:b5:5e:e8:d9:ee:ba:c7:c2:11:25:4e:3f:b7:7f:36:f1:fa:
27:90:b7:70:ca:bc:13:e8:75:ea:51:cf:56:b2:80:87:07:ca:
bb:03:57:31:ee:e5:9e:20:0f:6a:5d:db:cd:73:08:13:de:96:
cf:1f:4f:79:6d:a3:0b:64:e4:0c:c4:d4:87:73:29:31:ed:93:
08:66:bf:26:00:11:59:e9:d8:34:49:1f:82:32:14:ae:81:c6:
e5:8e:a7:8b:aa:74:77:9f:4a:57:e0:32:81:ba:40:25:43:78:
de:46:91:b4:e9:3b:c3:03:c2:9e:52:58:42:4b:37:e7:1d:a6:
24:f9:d7:dc:04:e1:7e:40:d2:3c:96:56:06:87:72:7b:e1:64:
d4:6b:36:a9:3e:4c:9b:55:6f:41:a4:c8:f3:84:ce:cb:53:a5:
55:7b:51:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:17:02 2024 by rpki-client on console-ams.rpki-client.org