Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/YHcFrXFelERSArTHrxUQcD6akX4.roa
File: YHcFrXFelERSArTHrxUQcD6akX4.roa (raw, json)
Hash identifier: 33kvu4RPWeZHWYBLV//TE25xX38Sxaz4fLGJh49+nyc=
Subject key identifier: 60:77:05:AD:71:5E:94:44:52:02:B4:C7:AF:15:10:70:3E:9A:91:7E
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 018F763FD556379BE90F51E628B558C72A1C
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/YHcFrXFelERSArTHrxUQcD6akX4.roa
Signing time: Tue 14 May 2024 08:37:25 +0000
ROA not before: Tue 14 May 2024 08:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215234
IP address blocks: 46.102.118.0/23 maxlen: 23
46.102.118.0/24 maxlen: 24
2a14:2e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:3f:d5:56:37:9b:e9:0f:51:e6:28:b5:58:c7:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: May 14 08:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=607705ad715e94445202b4c7af1510703e9a917e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:54:55:fe:2b:46:d4:8b:44:e5:e9:93:d8:
36:4a:85:6b:5e:29:1f:d3:da:14:8e:e0:59:32:58:
1a:5a:1e:a9:08:fa:dd:62:11:c3:c9:ff:a1:81:0f:
ca:ca:b8:90:1d:cc:6f:2d:12:a5:b2:88:b3:5f:bf:
25:45:bc:b5:9b:b6:1a:20:3d:0f:d3:32:ed:14:48:
09:b1:10:96:bd:79:20:01:78:1a:75:4c:12:5f:cc:
0e:86:9a:66:4b:84:3c:44:e0:7b:fd:26:8d:12:fb:
25:6f:c2:22:a3:46:e3:ba:aa:c3:a1:12:a8:25:2c:
ba:6f:17:43:af:f1:7c:3b:39:73:b0:52:06:43:e2:
b6:74:e3:59:2b:15:b1:12:67:f2:ca:93:e1:2e:e4:
36:a9:ad:c0:43:75:e9:cd:c9:dc:68:ad:6a:bd:f8:
35:54:2e:10:7a:65:35:58:e6:9a:b2:86:68:43:87:
13:ab:e2:e2:01:f2:9d:28:9b:ea:a8:50:71:5b:a9:
c0:b8:6d:48:3b:7b:e7:f1:6d:bc:7b:90:b1:12:21:
76:64:31:6e:ca:5e:84:52:23:9b:87:1a:b3:5b:5d:
90:c6:aa:3b:3d:14:99:bf:19:06:87:04:c2:6a:11:
53:53:97:9b:0d:7b:4a:b2:e0:d5:86:6b:07:55:ca:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:77:05:AD:71:5E:94:44:52:02:B4:C7:AF:15:10:70:3E:9A:91:7E
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/YHcFrXFelERSArTHrxUQcD6akX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.118.0/23
IPv6:
2a14:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:9a:bb:6f:15:9f:6e:d7:fd:70:eb:5b:07:9a:08:8f:27:97:
6e:8d:d1:ff:0d:a1:99:b6:9c:03:2b:b3:de:a3:9e:cd:6f:87:
0d:15:ec:90:07:b0:6c:b3:b5:60:c7:46:82:60:79:3e:23:de:
b5:75:d8:d9:05:55:c5:62:9f:47:07:56:5e:b7:f3:77:50:c1:
83:3d:40:16:c6:41:b8:e0:27:5e:0e:b1:fb:2f:0d:ce:75:3e:
b1:a6:fe:45:6b:1e:3d:94:74:0e:4e:13:de:0c:eb:18:34:51:
d8:a9:c3:b2:02:88:35:13:89:7b:e4:54:71:7a:d1:10:06:51:
07:27:ca:92:c8:94:ac:8b:25:47:d3:70:6d:5a:9a:13:1a:11:
6b:2b:6e:a0:2a:33:11:b8:33:1d:e1:5d:cd:a2:83:c9:b8:93:
a9:2b:95:57:03:35:91:a5:c6:50:54:ff:b8:a1:5c:e0:62:fc:
c9:1c:1d:d1:b5:04:c4:08:62:78:5f:45:50:82:29:a5:60:26:
ec:7e:6d:b6:f0:2e:b3:08:7d:2e:9c:73:44:6b:fa:35:25:68:
03:16:40:29:dd:6d:28:1c:2a:dc:c0:64:1a:d2:30:35:73:1e:
fe:2f:1b:9c:e7:c4:15:d4:d7:fa:8f:91:78:81:a1:98:2d:96:
df:dd:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:21:01 2024 by rpki-client on console-ams.rpki-client.org