Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/PyAskcsDyuA7YkdbsUCAPinY9wE.roa
File: PyAskcsDyuA7YkdbsUCAPinY9wE.roa (raw, json)
Hash identifier: HflhVaMVMY39XmudaVsCNRbMqk74yX2bCdkOC3G3QTg=
Subject key identifier: 3F:20:2C:91:CB:03:CA:E0:3B:62:47:5B:B1:40:80:3E:29:D8:F7:01
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018CC3B6D7217F5CE38CBB9100AB6B49AE37
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/PyAskcsDyuA7YkdbsUCAPinY9wE.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 46.8.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d7:21:7f:5c:e3:8c:bb:91:00:ab:6b:49:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f202c91cb03cae03b62475bb140803e29d8f701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ab:16:fd:5a:0a:05:db:c9:57:80:bd:a8:a1:
de:8e:d3:83:f7:e1:43:11:9f:25:e5:38:ab:6f:92:
d2:60:1a:ab:53:ea:a9:e0:59:a2:0e:76:50:d6:53:
e9:56:35:a4:84:5d:fc:0e:f3:90:fa:bb:a6:9b:84:
7c:76:89:b2:c4:88:3f:f7:e3:fc:79:79:cf:1e:54:
49:0e:7e:eb:4c:3f:5c:9d:eb:ff:15:ee:d1:b9:cc:
c9:cd:09:80:26:18:77:e9:61:0c:46:55:70:f0:2a:
7b:36:89:b5:d0:94:7e:69:94:1c:49:f9:6f:3b:88:
8a:5d:ab:32:e5:5b:c7:16:ae:a7:5c:77:e0:aa:e3:
5a:ce:15:6c:76:4e:6a:99:c2:4b:7c:81:d9:95:be:
dc:5d:f8:c8:89:3e:73:af:f2:f7:81:0f:75:a2:0f:
ee:5e:1d:13:d8:bf:74:48:62:e6:f8:38:65:a1:42:
d2:0d:1a:e3:1f:66:5b:fd:c7:a5:d0:35:c9:e3:0a:
8c:f1:53:29:a5:e6:62:8c:16:6b:83:bb:d5:a7:e2:
d2:dc:68:8d:df:f6:68:33:a4:ae:c8:14:46:2b:f9:
83:e3:85:14:f8:48:1b:c7:fb:89:8a:9f:d5:d8:04:
52:4f:37:0f:72:1a:85:32:c2:3b:4a:8f:21:f4:72:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:2C:91:CB:03:CA:E0:3B:62:47:5B:B1:40:80:3E:29:D8:F7:01
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/PyAskcsDyuA7YkdbsUCAPinY9wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2a:ad:37:69:da:55:8d:93:7b:fb:2c:88:e4:b5:4a:0a:d3:
db:37:e3:35:7c:df:fd:56:ec:86:e2:26:e5:82:00:d4:d5:47:
b8:99:c3:aa:21:92:d1:c2:a7:6a:9c:68:13:f7:aa:46:fe:d3:
c0:2e:a4:11:97:83:09:c5:45:06:57:99:8c:0e:9f:54:d0:af:
57:87:52:7e:d5:b0:18:5a:af:70:f1:da:66:e9:e3:0a:a7:97:
2c:cb:2c:cf:42:29:2c:2f:e9:20:c6:d2:ee:44:a0:18:d7:8b:
b1:73:9c:9d:a6:a3:9b:e9:de:0f:24:5d:92:9d:2b:03:0e:4d:
2a:c5:ba:fb:9b:54:f5:a3:cd:cd:f2:56:14:37:82:63:a2:1b:
fc:e0:76:45:40:41:83:26:9c:8e:e4:1c:fd:3c:f2:3d:36:24:
e4:8f:4a:ab:ed:4c:d7:2e:2a:e2:57:a5:5f:68:34:b2:02:7a:
65:f5:1a:ac:f0:80:f0:27:fe:57:17:b9:9f:a9:15:6e:81:e0:
1c:29:04:76:d5:86:eb:d4:b2:31:06:46:77:2c:87:15:71:93:
c5:1b:a0:2e:af:49:7f:d0:17:cf:6a:f0:29:0c:e7:65:7f:60:
36:66:b9:9c:ab:c7:d4:bf:71:f2:de:24:01:a8:cf:6b:85:c4:
1b:ae:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:48:07 2024 by rpki-client on console-fra.rpki-client.org