Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa
File: ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa (raw, json)
Hash identifier: +BUWFLzcEnKRz4n79bIZPomrBcY2rkqW5rpbByVG030=
Subject key identifier: AF:28:EE:45:3B:09:14:94:92:CE:CD:B3:A2:62:7A:61:74:D6:7F:7C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA39698783E759A90060E83774191
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa
Signing time: Tue 02 Jan 2024 04:30:08 +0000
ROA not before: Tue 02 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.138.17.0/24 maxlen: 24
2a0f:e380::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a3:96:98:78:3e:75:9a:90:06:0e:83:77:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af28ee453b09149492cecdb3a2627a6174d67f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:92:28:4a:6a:88:5c:a5:ac:3c:3c:71:cf:63:
44:b4:95:42:9d:a3:5c:42:4a:4d:16:28:df:bb:53:
f8:b7:c8:dc:65:b4:1e:39:74:7e:d8:18:f0:e1:90:
0d:37:43:3d:3d:4b:af:ae:a7:26:fd:65:a1:7c:11:
42:ee:16:06:b9:3c:e3:4b:65:38:67:80:f2:5e:fb:
74:f8:db:25:1a:b8:df:44:38:b0:0b:4b:d7:83:d4:
7d:07:39:5d:71:23:27:a2:22:3c:58:3c:ca:3f:b1:
ec:ce:f8:18:0b:79:5a:a7:23:3a:68:66:89:7a:be:
35:e5:f3:2a:91:ab:fd:0c:53:93:25:e5:b9:70:be:
78:0b:05:21:ee:1a:0b:50:f3:f0:65:88:c7:4d:d2:
df:bf:21:82:29:f5:c3:95:3a:d6:67:8a:a0:f1:6e:
0e:6c:90:e0:cf:ea:35:59:91:fc:0d:6e:6a:71:c4:
b0:13:b3:41:39:95:e8:fd:e0:77:25:ba:83:51:b9:
64:93:44:c1:86:11:8f:b1:32:75:29:db:22:b8:d4:
f6:af:95:30:74:64:94:f6:9c:99:66:53:58:35:62:
38:f2:d7:4c:aa:e1:89:5c:11:5b:02:17:43:45:1c:
56:0c:97:de:61:51:37:ff:e5:0c:73:7f:c6:ae:ff:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:EE:45:3B:09:14:94:92:CE:CD:B3:A2:62:7A:61:74:D6:7F:7C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.17.0/24
IPv6:
2a0f:e380::/32
Signature Algorithm: sha256WithRSAEncryption
b2:dd:5b:0d:66:89:d7:7e:61:be:81:12:dd:39:92:9d:89:c8:
2a:6c:96:3d:69:b6:30:ff:d0:2a:ad:7a:e7:38:b8:16:9d:57:
c7:d9:a2:73:7c:42:23:ca:9d:8d:f2:5a:78:af:6b:30:5e:a7:
64:0a:73:08:0a:23:bd:0d:ef:44:42:19:2b:4a:5a:f6:b9:3d:
b5:99:f9:44:08:21:ff:22:6b:65:17:6c:3f:e7:30:45:32:01:
74:2e:cd:52:33:22:80:8c:f6:e2:8f:a8:68:22:b1:0d:6f:bc:
53:ff:e3:bf:8f:68:4f:8e:6b:4a:ff:e2:12:cc:d0:2c:5f:d0:
f3:5a:98:21:6d:86:d4:7e:7d:93:1e:92:b6:6d:93:0b:ab:94:
73:bb:7b:31:fd:7f:33:c5:0b:0a:84:71:57:0e:fc:03:30:86:
cc:25:07:67:c2:e3:d3:9b:e2:00:a1:9b:c6:81:24:bd:a7:21:
bb:6f:4f:f1:e7:f9:a4:35:cb:2d:f3:5d:74:32:e6:39:81:12:
0c:b7:c2:b1:75:79:64:5f:da:04:94:9d:1e:cc:4f:cf:62:cc:
6a:43:01:67:08:67:cb:5e:e2:c6:41:b8:23:8b:af:fd:93:2d:
29:8a:a4:19:17:d4:39:53:87:de:42:b2:64:44:d7:c1:3e:50:
2f:61:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:50:32 2024 by rpki-client on console-fra.rpki-client.org