Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rYhzNeMP2PnwdSOPRb_iD211mJ0.roa
File: rYhzNeMP2PnwdSOPRb_iD211mJ0.roa (raw, json)
Hash identifier: HmBI4P/erxw/RJxlXq9ZSRd0KgYdEPhwERDCkJQBWio=
Subject key identifier: AD:88:73:35:E3:0F:D8:F9:F0:75:23:8F:45:BF:E2:0F:6D:75:98:9D
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018CC9BC689F8BE50363CC211F04E21DCD9F
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rYhzNeMP2PnwdSOPRb_iD211mJ0.roa
Signing time: Tue 02 Jan 2024 10:33:37 +0000
ROA not before: Tue 02 Jan 2024 10:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.20.98.0/24 maxlen: 24
46.20.96.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:68:9f:8b:e5:03:63:cc:21:1f:04:e2:1d:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad887335e30fd8f9f075238f45bfe20f6d75989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:d2:59:16:9d:80:d1:c9:cd:0c:76:16:6d:
62:51:98:40:12:fa:92:ec:dc:d1:6b:44:c0:db:75:
7e:b3:cf:c4:5c:0b:e8:e8:6f:b7:1f:2e:36:73:62:
6f:c2:29:77:4e:7b:9a:5c:8f:d6:5d:91:fe:54:f1:
22:97:f5:a1:e0:07:15:ad:ac:a5:87:c5:74:86:2e:
8d:5b:d7:54:48:ae:a8:92:cc:29:b8:c1:0f:89:f9:
27:18:93:be:a4:1e:de:7e:84:ea:9d:4f:dc:e9:e2:
7a:07:1c:5c:09:9f:22:11:90:0d:7e:86:26:a1:eb:
9c:9f:5b:d5:65:c0:2a:8c:f1:1b:50:4f:e5:30:60:
bb:d3:65:d9:18:3e:74:18:c1:7f:12:d4:8a:d1:e7:
87:0e:fb:d5:2c:2a:50:2d:a1:73:ce:76:a8:9a:b1:
de:80:54:68:f2:63:37:9b:12:89:77:1e:08:75:03:
d8:40:dd:16:95:56:51:81:70:b8:bd:b8:6d:79:a2:
6a:9a:31:ac:dc:15:2f:65:3e:cb:ed:44:76:65:41:
4a:01:19:82:b0:ae:be:a6:79:70:79:be:94:3e:cc:
5a:08:3d:e9:72:96:0d:7b:67:39:91:c7:74:0d:a1:
1f:69:b3:da:23:07:cb:07:f2:31:22:b5:c4:b4:41:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:73:35:E3:0F:D8:F9:F0:75:23:8F:45:BF:E2:0F:6D:75:98:9D
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rYhzNeMP2PnwdSOPRb_iD211mJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.96.0/24
46.20.98.0/24
46.20.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:05:ef:8d:a6:5a:6a:a5:3f:b2:56:7d:fb:b1:57:75:b7:0c:
38:8e:59:42:21:f5:de:2e:71:4d:ec:81:24:e4:4b:16:a2:34:
00:ed:ae:27:ae:7e:a5:95:d2:72:d4:87:44:1f:73:a5:c0:2a:
70:bc:ad:b8:5d:45:c6:ec:26:98:1a:aa:16:a6:0b:78:9c:19:
0b:ca:34:9e:ba:a5:8c:1c:b4:ef:b0:c7:a3:62:ac:bf:78:40:
0c:af:fa:2f:1c:33:af:4d:41:fa:6c:f9:6f:b8:b9:b0:dd:95:
e3:05:83:02:5e:a6:cb:6e:5e:4f:d4:95:7c:a7:6a:91:b0:bd:
a2:6e:57:d2:5b:5e:13:98:5c:67:e5:c1:e5:ad:43:a6:b2:7a:
d2:7f:b3:f7:0c:8a:37:69:21:95:17:af:55:df:d3:62:76:6d:
5e:39:f2:40:34:19:cd:fd:c6:77:db:08:46:64:ae:bb:db:e6:
c8:58:43:2c:0b:2e:9d:d3:b1:dc:83:0a:86:6b:2f:71:75:2a:
b6:3c:18:84:e6:95:a4:5c:4c:14:83:f4:2d:6e:76:4a:d1:26:
8a:d8:2a:6a:65:c4:99:34:4b:d7:32:90:ea:ff:7f:8d:32:6a:
66:98:a2:8c:b0:39:a4:ba:f3:f8:e6:62:d7:84:7d:6e:50:e0:
5c:71:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 05:32:46 2024 by rpki-client on console-fra.rpki-client.org