Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yl983e3mx2cy4n0rFoiX-Ziyk8U.roa
File: yl983e3mx2cy4n0rFoiX-Ziyk8U.roa (raw, json)
Hash identifier: BmLiUPHhbB5TLSPC0tk09ZMqQPdFq+0XAcuvG5ND5NA=
Subject key identifier: CA:5F:7C:DD:ED:E6:C7:67:32:E2:7D:2B:16:88:97:F9:98:B2:93:C5
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D3BDFFDE8F37D9917223AEA564ECB380F
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yl983e3mx2cy4n0rFoiX-Ziyk8U.roa
Signing time: Wed 24 Jan 2024 14:29:11 +0000
ROA not before: Wed 24 Jan 2024 14:29:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43201
IP address blocks: 46.16.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:df:fd:e8:f3:7d:99:17:22:3a:ea:56:4e:cb:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 24 14:29:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca5f7cddede6c76732e27d2b168897f998b293c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:59:64:30:61:31:52:4d:7b:63:e1:54:3a:
b3:c6:9a:72:24:83:6d:40:53:ab:3a:fd:f0:4b:0b:
12:a1:98:98:8e:df:f8:0d:c8:dc:00:59:d0:73:75:
53:e2:4d:69:92:02:c3:20:48:26:7e:4c:84:90:e5:
fa:a8:5c:a0:c1:a3:7d:49:85:8f:f8:c6:75:b6:23:
11:e3:c9:d3:d7:6b:e3:9f:38:c6:e0:0b:0f:69:da:
77:ce:7f:71:80:4a:0c:7d:bd:d7:27:75:c4:30:08:
b1:e3:28:33:1e:5d:f7:ac:a6:a2:ca:80:d3:cb:6a:
87:10:57:9e:9f:11:4f:1d:0b:69:4e:70:04:fc:68:
24:7e:c3:4e:43:29:12:b0:0a:27:44:b1:b8:fc:a5:
f0:b0:e3:27:3a:21:9e:1c:d3:ff:de:e5:d8:39:eb:
55:e1:d4:6c:b4:99:65:42:56:2f:c7:74:41:54:ff:
ca:f8:26:78:b5:dc:b7:88:d6:e4:2c:94:67:03:1d:
7c:a1:f0:ea:19:16:3b:db:ea:89:b6:ce:ff:cd:2e:
be:a4:ec:d1:05:e8:81:f6:8f:70:3d:9b:2c:e4:3d:
47:b7:f7:02:9a:b7:f5:c7:f0:e7:23:b4:c2:6a:f7:
9b:c9:12:9b:18:a1:4e:da:ff:96:96:1b:4d:d2:92:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:7C:DD:ED:E6:C7:67:32:E2:7D:2B:16:88:97:F9:98:B2:93:C5
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yl983e3mx2cy4n0rFoiX-Ziyk8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0a:5c:42:c4:51:6b:ca:36:53:9c:31:d7:77:4f:9c:e3:db:
a3:a0:6a:d1:cf:bb:c6:f3:41:64:8b:97:cc:3a:e7:7e:d0:93:
ee:7f:ee:a8:21:39:7f:9f:00:17:a5:7f:ca:72:71:f5:77:43:
85:f4:81:4f:c7:b7:81:c3:11:4a:8b:6b:6e:cb:ef:e8:2a:66:
cd:3b:ba:bf:60:18:ed:05:2c:cc:4d:61:ff:da:08:8d:a4:f7:
e3:ff:73:8c:ea:16:6d:25:6e:c9:bf:13:46:64:c4:8d:93:f2:
fb:4b:d5:10:89:d2:b8:55:de:74:5f:ee:5d:cb:e1:0a:38:34:
53:16:51:3c:1b:24:15:c2:50:5a:72:54:fe:66:46:41:22:2c:
12:be:04:91:c3:55:eb:3b:d6:1a:dd:8c:fb:53:6c:3d:91:64:
9b:09:25:c0:23:eb:2e:93:c1:c6:04:7b:d7:a8:84:66:e8:21:
cc:44:4d:20:84:3f:f1:99:2f:f4:97:40:8e:85:4f:0a:61:3d:
48:7a:15:15:b3:3e:6b:52:2c:e7:7d:ab:dc:e8:c4:0f:7d:df:
71:e4:dd:ab:2a:96:fa:b9:45:e3:0b:1b:8e:3b:53:89:83:31:
7e:e9:fe:84:2a:bc:b3:d5:63:9c:64:79:b3:b8:c7:4b:bf:77:
78:7f:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 12:12:31 2024 by rpki-client on console-ams.rpki-client.org