Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ykHo5a6h4r1WrH3MBOM7nNEboUg.roa
File: ykHo5a6h4r1WrH3MBOM7nNEboUg.roa (raw, json)
Hash identifier: I1rffRTavqLbme6K+HGbX0bX1hn8FXbIywkeMCXge3g=
Subject key identifier: CA:41:E8:E5:AE:A1:E2:BD:56:AC:7D:CC:04:E3:3B:9C:D1:1B:A1:48
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018E3B86F8B40D5B9FB043CAD9F6D340F8B5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ykHo5a6h4r1WrH3MBOM7nNEboUg.roa
Signing time: Thu 14 Mar 2024 05:54:44 +0000
ROA not before: Thu 14 Mar 2024 05:54:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 46.249.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:86:f8:b4:0d:5b:9f:b0:43:ca:d9:f6:d3:40:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 14 05:54:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca41e8e5aea1e2bd56ac7dcc04e33b9cd11ba148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:96:1b:5f:0c:e0:2a:99:89:56:2a:67:5d:
7a:c2:68:f0:a6:00:cb:22:90:72:df:6d:9b:70:7a:
60:29:c6:48:0e:cc:a1:b4:08:22:3a:66:ae:2a:2e:
d0:68:38:b4:72:a7:f4:a2:93:65:f1:ee:03:82:83:
12:29:6b:22:51:0b:d2:67:b2:49:9f:d1:33:49:42:
69:6c:da:bf:f7:e1:35:50:90:a3:ad:35:5a:92:d7:
12:f9:12:96:78:11:d9:93:af:e5:a3:cd:11:aa:b9:
66:7d:41:f4:fe:66:28:3d:85:11:f2:69:8a:95:c1:
32:fc:17:b1:97:51:59:bc:70:89:b6:48:28:90:ea:
c5:8c:f5:78:61:82:6f:03:fa:9e:b9:49:f1:2c:fd:
69:d8:73:7b:1c:30:c8:28:6d:30:7e:c4:20:14:ea:
01:b7:03:ce:d3:b5:d3:ac:fa:ff:b7:e5:13:55:39:
c9:33:8f:b6:83:1f:be:6c:4d:3f:8c:26:17:cc:01:
a2:12:ed:86:0c:16:4f:b2:f3:8f:dc:64:cc:e3:6b:
b0:ed:b6:e2:f4:d5:67:eb:b7:cb:01:cb:24:1d:49:
f9:2e:1f:65:61:64:c5:1b:3b:4d:11:80:5f:d8:9a:
b6:af:0f:e6:35:be:eb:90:2f:67:8e:23:d8:fb:61:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:E8:E5:AE:A1:E2:BD:56:AC:7D:CC:04:E3:3B:9C:D1:1B:A1:48
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ykHo5a6h4r1WrH3MBOM7nNEboUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.112.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:8b:14:91:2e:ec:27:d8:1f:f1:b9:4c:57:cf:66:4e:65:f8:
6a:2f:d1:76:d5:a8:22:c3:df:8b:32:c6:47:bd:56:b1:fc:ce:
9b:4f:ba:6d:4b:42:a7:fe:4d:67:13:d4:eb:18:0e:9d:47:87:
ca:e2:ef:cc:d2:ac:c0:06:2c:27:d3:05:c1:2e:cb:b6:7a:4e:
47:da:8b:af:71:e7:f4:6b:fc:fe:a2:57:f3:a2:41:3b:06:f6:
08:d8:3d:ad:87:b7:5f:3d:c0:5e:9c:0a:65:cc:61:16:3b:15:
cf:d8:8b:d0:69:a2:cf:db:4d:71:13:f7:50:67:86:7b:de:3b:
7a:29:05:2b:34:aa:6a:68:57:8f:5b:dc:a4:b7:44:8c:04:bc:
a6:d6:57:60:65:d8:ab:1e:c7:58:b2:60:82:99:ad:90:92:98:
f6:67:28:91:16:93:1e:3e:2b:67:29:a6:f2:57:3b:33:ab:06:
f9:fc:5e:9a:95:a4:d7:a4:2f:ac:c9:b3:e1:f4:6c:d5:28:40:
80:39:0b:2f:19:b7:df:8e:54:de:b6:50:c3:1e:f1:5d:84:29:
1f:51:11:9d:48:f3:c6:a1:5f:62:7d:0a:84:40:c5:4a:d0:89:
2f:25:0a:9f:99:7d:d1:e4:a2:22:10:4e:b0:b9:e8:1e:43:58:
02:cc:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:21:09 2024 by rpki-client on console-ams.rpki-client.org