Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AuYa_90IFwCPW_0I83NcvLkB8zQ.roa
File: AuYa_90IFwCPW_0I83NcvLkB8zQ.roa (raw, json)
Hash identifier: o1rrKhgv1DHeeFZnH3YNgU/hSNfq6634UJ1JcnZ2szU=
Subject key identifier: 02:E6:1A:FF:DD:08:17:00:8F:5B:FD:08:F3:73:5C:BC:B9:01:F3:34
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018FE86FBDA8DC9C88FD7409D389C9EE233E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AuYa_90IFwCPW_0I83NcvLkB8zQ.roa
Signing time: Wed 05 Jun 2024 12:46:28 +0000
ROA not before: Wed 05 Jun 2024 12:46:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44803
IP address blocks: 45.136.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:6f:bd:a8:dc:9c:88:fd:74:09:d3:89:c9:ee:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 5 12:46:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02e61affdd0817008f5bfd08f3735cbcb901f334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:23:ee:34:54:bc:80:a2:a6:04:8f:52:25:
02:42:eb:53:1b:26:fe:b6:90:db:ac:07:55:da:72:
b5:38:83:40:3d:6f:d6:cc:71:85:63:51:d2:e3:fb:
dd:82:3d:98:b6:2d:ff:06:c1:70:66:b5:a6:09:7d:
4e:1f:bb:ee:c4:f3:8a:fd:ea:05:7d:0b:53:3b:12:
a4:c6:08:e2:ff:3b:86:18:bc:a7:b5:53:c7:49:a2:
6f:f8:59:24:93:5e:b5:d1:aa:f4:d0:f9:50:fc:78:
e6:cb:95:eb:65:c1:9f:bf:df:68:0a:e0:a9:f8:ef:
97:6f:97:86:fe:bc:f2:0b:82:58:83:f6:bb:fa:98:
96:f1:42:e3:c0:1b:05:d1:55:f7:6e:92:57:53:b3:
b7:42:a5:f5:4a:b0:4a:cd:bc:bf:5b:95:93:01:d0:
cb:e5:62:01:03:9d:00:15:08:4f:43:89:74:0e:65:
3f:29:1d:a6:de:6d:5d:8e:a1:7d:d8:61:fb:d4:b8:
9a:69:8d:1f:fe:79:81:5b:2e:4c:89:9c:6b:f3:46:
ed:00:64:55:ff:92:d1:ef:df:16:91:01:be:84:58:
cd:0f:6a:4f:19:72:bb:f5:d5:00:dd:53:58:a5:6d:
5a:89:32:56:e4:b4:af:ca:4b:ae:fc:32:06:89:e5:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:1A:FF:DD:08:17:00:8F:5B:FD:08:F3:73:5C:BC:B9:01:F3:34
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AuYa_90IFwCPW_0I83NcvLkB8zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.70.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:84:82:fb:0b:fc:d1:4a:03:0f:89:1a:f8:03:b3:cf:8e:d8:
75:34:4b:4e:ac:99:3c:10:33:06:f5:c9:77:43:57:1b:f5:f5:
fb:d5:22:89:4d:b4:e9:64:dd:37:e2:5a:2c:53:09:f6:fa:ce:
49:00:86:0f:10:63:84:63:8a:5b:cc:5c:1e:19:85:5e:e7:f4:
09:42:36:c3:73:8e:f9:e3:86:27:f1:34:b8:a4:47:51:81:05:
07:67:82:9b:2b:66:47:84:7c:a0:86:a4:2f:31:72:d3:25:95:
79:c4:33:4d:bf:08:15:38:3c:52:89:50:99:0a:d3:94:71:c1:
7b:5e:1a:35:66:09:7a:bb:25:fc:e2:45:15:81:7d:12:61:b1:
35:74:cb:4f:43:94:61:7a:16:39:a8:9f:a9:c9:17:7a:31:86:
2b:69:de:53:e5:9f:ad:ca:39:4d:54:5e:3a:1e:ba:00:87:b7:
f7:53:ca:92:16:51:ea:9e:6d:aa:bc:8b:93:76:13:fe:d1:bb:
75:2e:f7:bf:07:d0:e4:b1:52:7d:5e:b8:f9:ce:e3:80:31:c8:
fc:af:18:ea:2a:10:bb:79:c1:05:5e:2d:97:50:d6:79:a7:91:
3f:7e:72:1a:62:0c:b3:e7:be:74:32:0f:97:44:cc:71:70:45:
cb:32:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:58 2024 by rpki-client on console-fra.rpki-client.org