Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/yK03JwVWC1x86ZMbaD8pINkBonw.roa
File: yK03JwVWC1x86ZMbaD8pINkBonw.roa (raw, json)
Hash identifier: ByX+MAWZCCt38Gqa5HxFQgiNKlYJoE2QdrWGZygxPaU=
Subject key identifier: C8:AD:37:27:05:56:0B:5C:7C:E9:93:1B:68:3F:29:20:D9:01:A2:7C
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 018CC2DADC5FF3E328B35A40A02134A1DDBC
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/yK03JwVWC1x86ZMbaD8pINkBonw.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.17.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dc:5f:f3:e3:28:b3:5a:40:a0:21:34:a1:dd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8ad372705560b5c7ce9931b683f2920d901a27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:16:9b:25:58:01:44:9f:29:bc:fa:b5:60:
92:6d:12:74:7d:68:74:82:9a:60:ea:5c:b1:9a:bd:
24:28:36:68:0f:c0:cd:fc:1d:31:40:aa:50:ee:ce:
58:28:87:e5:96:03:65:b5:41:b0:d8:bf:bb:db:14:
07:31:b6:db:5a:aa:ed:f9:65:34:65:90:13:91:28:
4d:f4:ab:ad:b7:be:78:ad:21:6e:e1:9f:52:72:7c:
1d:84:90:a6:4e:1c:8e:1e:e8:ef:6b:fc:d9:fe:fb:
f6:6d:21:a8:57:ac:38:cb:02:f9:f1:d3:2d:42:6e:
d4:01:54:b4:4a:3e:2b:d5:89:4a:7a:75:2f:7f:d5:
ec:04:96:ab:84:0a:37:89:4e:c8:ac:f6:16:5d:d7:
e6:7c:8f:d6:83:fc:bc:f7:5f:82:a9:91:27:12:58:
d8:6c:81:66:cf:ae:a1:02:84:f3:9a:b0:81:2b:cf:
3c:70:06:b0:95:85:ea:b0:f5:a7:43:c8:e8:70:8c:
5b:ea:bc:7e:35:72:00:59:c9:0f:ce:f0:4c:ad:40:
94:6a:77:75:b1:f7:ec:75:37:aa:8c:43:5c:17:b8:
16:49:21:a2:e2:0a:47:1b:c6:1f:8d:6a:57:b0:5d:
fd:a4:a6:7e:cf:a2:07:f8:5c:d1:8e:33:0a:15:0c:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AD:37:27:05:56:0B:5C:7C:E9:93:1B:68:3F:29:20:D9:01:A2:7C
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/yK03JwVWC1x86ZMbaD8pINkBonw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.216.0/24
Signature Algorithm: sha256WithRSAEncryption
31:02:2d:4e:c2:bb:7d:b4:52:cd:89:f3:ea:10:be:f4:c4:49:
c2:1c:d7:11:88:f0:0c:2c:e0:94:f8:6c:26:aa:84:d6:e4:6d:
ba:4c:83:33:ed:80:a4:39:f2:2e:6a:b2:c0:a6:ca:88:39:ea:
92:0c:ea:58:cf:c8:31:64:ee:e7:47:1e:d1:27:db:5f:ec:4b:
5d:5c:47:a7:6e:4d:5f:3b:f5:65:38:88:1e:b5:4f:d0:0b:d8:
78:43:d2:ec:f6:d6:f9:bc:f6:87:1e:6a:3b:f5:c3:4b:55:fa:
f4:02:08:83:48:1b:ed:9c:1e:d5:b8:da:c6:9f:4a:df:68:f6:
bf:de:76:04:d1:0c:e6:fd:66:b1:95:13:af:e4:59:7b:8c:0c:
87:17:69:2f:ba:d4:bc:f4:19:50:59:3d:e0:89:c9:12:82:66:
22:a7:fe:da:10:8e:98:e4:83:f1:d3:55:4a:8e:b5:92:b8:d3:
ea:2e:58:66:f8:64:4e:32:97:eb:11:13:a6:66:21:e6:62:22:
18:9d:04:34:1e:88:88:e3:3b:f3:72:a6:6f:9e:f6:9f:5b:ef:
f2:0a:be:f1:06:09:48:cc:c1:78:59:71:41:1e:dd:8c:0f:b5:
46:d8:aa:93:51:09:e9:75:03:95:36:92:f7:85:d6:18:4c:25:
7b:51:31:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2txf8+Mos1pAoCE0od28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTg2MzFlNmU1YTdhYzY2ZGE0ZmIxNjBmZDViNGZjYTkz
Nzg4MDUwHhcNMjQwMTAxMDIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGFkMzcyNzA1NTYwYjVjN2NlOTkzMWI2ODNmMjkyMGQ5MDFhMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9MWmyVYAUSfKbz6tWCSbRJ0fWh0
gppg6lyxmr0kKDZoD8DN/B0xQKpQ7s5YKIfllgNltUGw2L+72xQHMbbbWqrt+WU0
ZZATkShN9Kutt754rSFu4Z9ScnwdhJCmThyOHujva/zZ/vv2bSGoV6w4ywL58dMt
Qm7UAVS0Sj4r1YlKenUvf9XsBJarhAo3iU7IrPYWXdfmfI/Wg/y891+CqZEnEljY
bIFmz66hAoTzmrCBK888cAawlYXqsPWnQ8jocIxb6rx+NXIAWckPzvBMrUCUand1
sffsdTeqjENcF7gWSSGi4gpHG8YfjWpXsF39pKZ+z6IH+FzRjjMKFQz70QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMitNycFVgtcfOmTG2g/KSDZAaJ8MB8GA1UdIwQY
MBaAFKCoYx5uWnrGbaT7Fg/VtPypN4gFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0toakhtNWFlc1p0cFBzV0Q5VzBfS2szaUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kZmZhOWItMWQ2OS00ODY5LTlkYzQt
ODY3ZDFkODc3MTQwLzEveUswM0p3VldDMXg4NlpNYmFEOHBJTmtCb253LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9kZmZhOWItMWQ2OS00ODY5LTlkYzQtODY3ZDFkODc3MTQw
LzEvb0toakhtNWFlc1p0cFBzV0Q5VzBfS2szaUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhHYMA0G
CSqGSIb3DQEBCwUAA4IBAQAxAi1Owrt9tFLNifPqEL70xEnCHNcRiPAMLOCU+Gwm
qoTW5G26TIMz7YCkOfIuarLApsqIOeqSDOpYz8gxZO7nRx7RJ9tf7EtdXEenbk1f
O/VlOIgetU/QC9h4Q9Ls9tb5vPaHHmo79cNLVfr0AgiDSBvtnB7VuNrGn0rfaPa/
3nYE0Qzm/WaxlROv5Fl7jAyHF2kvutS89BlQWT3gickSgmYip/7aEI6Y5IPx01VK
jrWSuNPqLlhm+GROMpfrEROmZiHmYiIYnQQ0HoiI4zvzcqZvnvafW+/yCr7xBglI
zMF4WXFBHt2MD7VG2KqTUQnpdQOVNpL3hdYYTCV7UTEi
-----END CERTIFICATE-----
Generated at Thu May 2 15:22:23 2024 by rpki-client on console-ams.rpki-client.org