Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yi_22FvUksn3k9AO3Kqg_-0sZGk.roa
File: Yi_22FvUksn3k9AO3Kqg_-0sZGk.roa (raw, json)
Hash identifier: OlQAvudyAHUiGys2ehOiK+78P8EAw6fikQh9PEcEOtA=
Subject key identifier: 62:2F:F6:D8:5B:D4:92:C9:F7:93:D0:0E:DC:AA:A0:FF:ED:2C:64:69
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE89CF9ACCDFF2068CB68E39CE58E9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yi_22FvUksn3k9AO3Kqg_-0sZGk.roa
Signing time: Tue 02 Jan 2024 06:31:16 +0000
ROA not before: Tue 02 Jan 2024 06:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141968
IP address blocks: 45.66.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:89:cf:9a:cc:df:f2:06:8c:b6:8e:39:ce:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=622ff6d85bd492c9f793d00edcaaa0ffed2c6469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:07:9b:4e:ff:f6:99:17:39:9a:39:2b:ac:33:
75:3e:ef:74:3b:6d:41:8c:4d:46:0b:a1:1d:40:23:
8e:4b:17:1d:7b:9f:74:45:5a:a8:ec:f1:f6:0e:a2:
23:45:73:0e:67:7e:61:b8:d7:ac:ba:04:94:08:14:
dc:b3:3c:7d:db:c3:23:3d:c6:fe:14:9e:f5:4b:32:
2d:a8:3d:c4:a4:b9:c4:1d:15:4d:35:3e:32:40:64:
f8:78:f9:81:0c:95:89:95:e6:16:59:e2:26:33:47:
6d:83:ba:cd:b3:84:95:ff:f4:c5:e0:21:4f:2d:29:
93:a7:86:1c:4c:c8:c8:b7:3e:69:9d:6d:b7:e2:01:
fa:27:26:1a:9e:f3:fc:19:9d:9b:41:b1:38:d8:13:
cf:51:f1:59:1f:69:03:b5:b4:40:6b:96:25:9c:0b:
dd:e7:1a:9d:20:d3:fd:85:47:4e:64:de:7f:c1:f2:
8a:06:d0:d6:e2:23:a1:51:81:27:14:d2:69:f3:41:
ce:40:56:af:75:cc:d4:dd:aa:e8:e5:3a:ea:5f:c2:
3d:6a:1b:e9:ec:af:ba:2c:ec:32:65:35:c1:58:d5:
df:69:0d:64:16:5e:5e:8b:b4:38:e7:c9:dd:50:8f:
5a:5f:63:ca:45:61:9a:1d:a8:21:43:55:77:83:47:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:F6:D8:5B:D4:92:C9:F7:93:D0:0E:DC:AA:A0:FF:ED:2C:64:69
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yi_22FvUksn3k9AO3Kqg_-0sZGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.153.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:45:a2:0d:a5:0b:81:37:53:d1:75:a1:b0:1c:4d:59:06:18:
50:6b:0c:90:87:19:e3:72:f1:f4:59:52:c8:c8:81:59:5f:a6:
b5:c3:3f:a0:bf:6a:17:d3:17:83:4c:58:4d:d9:d5:ef:43:ad:
05:83:36:91:fe:e6:7b:bd:6b:b3:a5:61:60:d4:5e:c2:5d:19:
61:7f:48:74:63:f3:1c:ea:07:63:da:42:77:00:2e:04:88:ac:
c7:7d:a7:46:9c:2a:bd:86:ee:5d:c7:87:8d:36:1d:ab:aa:68:
fd:a9:12:f3:e3:89:ca:3f:ad:7e:20:03:ad:ad:20:36:e5:e0:
59:0b:6e:ca:ef:88:c6:3b:56:a7:e1:5f:53:1c:dc:e8:58:f2:
c3:54:34:46:70:7c:75:4a:d0:5f:84:12:ef:04:f5:06:29:89:
3f:50:5e:4a:8e:7e:33:34:00:91:73:ed:c4:d6:70:93:9c:25:
db:87:65:95:d0:9f:4a:6a:41:89:43:26:12:e1:14:b4:f4:e0:
e9:ff:36:1a:bf:f8:9f:90:42:a3:a0:44:07:14:af:24:10:ec:
88:9b:71:9e:0b:05:94:80:d9:7e:06:de:1f:be:67:2f:12:65:
33:50:2d:73:dc:80:af:e5:92:1b:49:90:2a:49:75:5c:e8:14:
06:6e:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:04:48 2024 by rpki-client on console-ams.rpki-client.org