Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/yhivayYgUUy2qXcBod_LElAmNAk.roa
File: yhivayYgUUy2qXcBod_LElAmNAk.roa (raw, json)
Hash identifier: 8DSUbrppu8sYjUpr3ovI7fkamjXb41KhoNFelBKVwhA=
Subject key identifier: CA:18:AF:6B:26:20:51:4C:B6:A9:77:01:A1:DF:CB:12:50:26:34:09
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 01942368CA71BBD37702932C3A189C9704ED
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/yhivayYgUUy2qXcBod_LElAmNAk.roa
Signing time: Wed 01 Jan 2025 19:47:37 +0000
ROA not before: Wed 01 Jan 2025 19:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15694
IP address blocks: 46.174.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ca:71:bb:d3:77:02:93:2c:3a:18:9c:97:04:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Jan 1 19:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca18af6b2620514cb6a97701a1dfcb1250263409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:5f:50:a3:3c:f4:1a:0c:7a:5e:12:bd:ad:
d0:1f:6e:43:69:b3:8f:12:81:d2:9f:50:66:8e:8c:
ab:10:4e:a4:cd:ff:38:98:a0:e5:ae:02:77:3e:59:
15:67:af:ac:ea:33:f6:fe:30:f5:49:9c:fb:ee:53:
7b:ec:88:fa:12:01:b0:6c:7b:76:07:98:b4:26:2b:
4a:ac:e5:34:31:a2:9d:4e:4e:d0:de:e7:8d:2e:7e:
34:36:f4:24:ac:ba:4d:71:10:67:0c:b4:05:89:3b:
54:9d:bb:e9:b3:16:43:79:15:c7:10:ae:f8:0c:1f:
a4:1c:73:d4:68:d8:13:2a:1e:2f:38:9c:71:83:00:
06:84:46:54:46:c0:4c:44:fb:55:55:b4:f4:8a:f9:
e1:49:40:f5:10:d9:45:87:cd:c1:7a:39:f5:90:5b:
a3:53:25:15:32:c5:be:c8:90:33:ee:55:7b:5c:4c:
4e:0f:1f:66:39:9c:88:96:ce:37:10:78:a3:26:d5:
62:8c:23:da:39:3c:04:d2:c9:19:59:ea:95:1f:be:
fc:55:5a:a7:ef:c7:dd:9c:6e:58:a8:e5:00:c7:86:
db:b8:6d:ce:fd:7d:05:da:4c:02:95:3d:7d:17:38:
6b:8b:ee:ac:d7:a8:52:4c:77:23:51:22:9f:2d:d8:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:AF:6B:26:20:51:4C:B6:A9:77:01:A1:DF:CB:12:50:26:34:09
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/yhivayYgUUy2qXcBod_LElAmNAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.168.0/24
Signature Algorithm: sha256WithRSAEncryption
36:27:f2:4a:a6:60:d4:84:73:93:ec:2c:5a:4f:25:90:df:40:
f0:e5:43:31:42:c4:b3:f6:94:3a:ce:9d:09:26:3b:10:0d:77:
ee:dc:84:c7:92:72:71:13:d0:40:90:c2:a4:cd:c8:e6:7c:51:
27:83:74:a2:20:b2:64:cd:7d:d7:ad:03:a3:22:a5:60:52:0a:
c9:31:18:e9:ef:4e:51:d7:84:20:71:23:b0:55:7b:15:fc:e1:
ae:19:87:4b:9c:08:23:c5:df:86:75:41:0a:ba:4e:ed:13:e5:
f4:74:cd:e2:b6:4a:83:4f:a5:2b:f9:04:a3:81:00:2e:5c:7a:
62:31:47:65:08:b0:00:8e:a1:10:8c:64:65:9c:38:b9:3a:9f:
99:de:c5:8b:98:9f:56:0c:c2:4d:71:96:1f:df:e6:6f:98:31:
17:4b:8a:25:48:3e:51:f3:07:7e:18:af:9a:43:7a:61:1b:a6:
dc:06:e6:ba:21:9c:2f:46:42:6c:7a:43:c0:f5:05:1a:b6:9c:
a8:b1:45:5b:c3:0e:29:8d:7a:83:c3:0c:65:60:e0:96:a7:9c:
d4:41:91:f0:3e:ac:f5:da:a9:61:af:c1:4b:69:e3:ea:8b:5d:
3d:7d:ec:d3:26:c3:c1:b9:6e:af:33:82:8b:28:d8:48:22:c3:
f4:55:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:17 2025 by rpki-client