Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/pBy_9CUrxWbSzufnAMCbZdDye9Y.roa
File: pBy_9CUrxWbSzufnAMCbZdDye9Y.roa (raw, json)
Hash identifier: j0RR9ZWkbfZe8B6h9u2p1ZesZGv8Cq9FOQ4lQfYSvGo=
Subject key identifier: A4:1C:BF:F4:25:2B:C5:66:D2:CE:E7:E7:00:C0:9B:65:D0:F2:7B:D6
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 018CC56EE666045ED32F239B828C824A443F
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/pBy_9CUrxWbSzufnAMCbZdDye9Y.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 46.235.40.0/21 maxlen: 21
83.150.232.0/22 maxlen: 22
2a00:d640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e6:66:04:5e:d3:2f:23:9b:82:8c:82:4a:44:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a41cbff4252bc566d2cee7e700c09b65d0f27bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:e4:e1:46:8a:4e:95:79:6a:51:6f:37:b1:
72:26:1a:f4:f2:42:6b:a3:26:b2:f0:f4:6e:f4:09:
3c:53:fa:9d:c4:2a:5b:84:85:b5:0b:11:4f:99:33:
90:06:40:db:0f:48:b4:95:70:fe:04:4f:94:8c:ad:
fc:33:ab:77:e1:80:91:6b:e1:62:ad:9b:6b:7f:05:
c8:21:ed:c3:8f:b1:c2:35:b2:df:3f:cd:5d:99:c0:
f6:b4:21:1c:26:92:05:27:6c:f0:66:95:ff:55:67:
88:35:84:36:ec:0e:83:96:e9:54:f5:85:c3:5c:2e:
68:3c:6b:a8:25:31:54:b9:4f:79:6d:3a:1e:62:04:
f8:98:a1:cf:ae:27:21:50:db:e4:8e:68:e2:23:45:
3d:a5:ba:93:bd:a9:01:07:05:ee:ad:22:1e:78:9d:
83:41:26:b6:bd:c0:3f:be:53:2f:04:cf:74:d9:8e:
b2:36:c6:11:b9:9e:54:5d:54:e6:8b:68:27:01:05:
e9:5f:a5:e3:6f:07:80:af:c4:e2:90:d2:a5:5f:2e:
59:de:95:ca:af:d8:ae:05:d6:64:f1:e4:bc:e8:d9:
88:b6:c1:bc:df:62:2f:85:6e:c0:72:e1:99:e0:be:
e7:3c:96:85:24:bc:89:91:ca:91:11:b2:74:61:91:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:BF:F4:25:2B:C5:66:D2:CE:E7:E7:00:C0:9B:65:D0:F2:7B:D6
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/pBy_9CUrxWbSzufnAMCbZdDye9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.40.0/21
83.150.232.0/22
IPv6:
2a00:d640::/32
Signature Algorithm: sha256WithRSAEncryption
8f:8c:16:98:0b:d4:58:d1:ab:1b:ee:f5:8f:38:e5:0a:43:76:
82:d2:0a:7f:73:fd:d3:a4:89:d7:e1:a4:8d:65:fc:1b:4b:bc:
6b:54:af:34:54:99:c3:bc:f9:c9:e6:f7:c5:a7:cb:88:4f:18:
c8:1d:89:dd:83:f3:fd:4d:1e:f0:a4:53:63:2c:17:4f:c5:fd:
5c:1a:8b:b8:70:38:a3:95:ba:22:bf:9d:a5:b8:0e:bc:bd:7c:
52:c4:92:9f:e7:34:cb:fa:43:d0:05:92:07:91:32:7f:3c:87:
b5:7c:10:d7:43:c4:57:01:95:03:f4:83:c6:d7:1d:65:e1:c2:
06:23:34:b6:66:95:b8:8a:b0:48:2d:c0:e7:7f:e1:93:5f:a6:
e8:f5:71:0f:87:bb:8d:88:f8:96:63:89:02:dc:99:de:91:80:
32:d8:57:f0:c7:df:02:8b:50:05:4f:3d:99:d7:70:ce:bd:a7:
89:0c:02:15:df:b0:37:28:89:d9:80:1a:0b:a0:ea:c3:00:f5:
12:53:00:d2:a0:1d:b4:1b:b9:70:3d:77:10:ae:19:c2:a8:5a:
bd:33:df:a8:bc:f7:82:e7:c6:c1:f1:91:89:d0:07:32:99:fd:
c9:b3:99:c2:44:0c:b2:d8:05:1b:ae:a2:3a:f5:52:7a:fb:66:
c1:57:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:56:11 2024 by rpki-client on console-ams.rpki-client.org