Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ya9TtH4Y3W5h-7gbLWSgZoy9JqA.roa
File: ya9TtH4Y3W5h-7gbLWSgZoy9JqA.roa (raw, json)
Hash identifier: 92zc0YNn9accQpoyrN63KmP6qZgWVhlKkW1jyNUGC08=
Subject key identifier: C9:AF:53:B4:7E:18:DD:6E:61:FB:B8:1B:2D:64:A0:66:8C:BD:26:A0
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018CC8DEBA92628676953A6A3FAE5DA7A5F1
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ya9TtH4Y3W5h-7gbLWSgZoy9JqA.roa
Signing time: Tue 02 Jan 2024 06:31:29 +0000
ROA not before: Tue 02 Jan 2024 06:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24881
IP address blocks: 46.162.0.0/18 maxlen: 24
193.111.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ba:92:62:86:76:95:3a:6a:3f:ae:5d:a7:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jan 2 06:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9af53b47e18dd6e61fbb81b2d64a0668cbd26a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:a1:57:af:45:82:48:50:65:62:01:a1:3b:
96:22:f7:6e:d4:9b:15:86:e9:da:b3:17:ee:42:6d:
ef:14:93:16:8f:77:c3:df:13:37:4c:a5:14:0b:3e:
58:ce:3d:36:04:25:f1:31:36:a3:de:f4:87:d4:cc:
78:35:ab:b1:7e:35:41:1f:90:f7:77:3c:5d:1b:9a:
85:d5:5c:df:ba:89:05:78:26:df:fa:fd:30:3d:67:
d6:f4:f1:cf:1f:df:96:05:58:1c:ef:99:b1:18:dc:
22:73:fd:82:9c:93:e0:eb:f9:76:2a:7b:25:a8:dc:
6f:5f:51:c8:b8:89:f9:ca:c2:15:ff:12:92:ae:47:
73:ff:b0:75:21:cc:d7:ce:bd:47:50:73:ab:2d:54:
0f:b7:d3:ee:2e:8e:c5:0e:5e:03:f2:61:14:10:17:
d3:2f:85:a6:6a:21:1c:03:9d:92:3e:a0:e2:98:ff:
8f:84:9d:47:9e:5a:df:00:98:60:2b:7a:30:c3:ba:
31:a2:b2:64:9b:df:18:7f:84:7f:a3:4f:26:dc:81:
83:60:c8:99:32:70:c1:31:3f:c2:28:ef:02:29:9a:
3f:f5:9e:ff:e6:13:e4:77:67:8b:7d:50:36:1f:2c:
3f:80:04:2f:79:37:c2:30:26:77:20:ae:e1:4d:42:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:53:B4:7E:18:DD:6E:61:FB:B8:1B:2D:64:A0:66:8C:BD:26:A0
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ya9TtH4Y3W5h-7gbLWSgZoy9JqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/18
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
76:97:c8:cd:9d:24:2f:97:b2:1b:b9:af:44:3a:2e:07:89:8f:
06:d1:ec:97:76:b9:02:4b:8a:60:ad:0d:59:d6:00:db:e7:71:
bc:e4:b3:70:06:33:bc:13:bd:2b:45:2a:22:9d:40:71:23:f2:
98:6c:dd:ba:58:53:f2:0f:71:49:c8:64:b1:28:19:27:70:68:
28:8c:27:a3:6b:13:68:39:4a:46:6e:d9:bd:a2:09:73:37:3c:
ea:e7:1d:cc:dd:d1:63:5b:fe:0b:10:ec:c9:ca:74:b9:6c:63:
9f:7a:38:c5:cb:59:d5:76:d0:24:46:7f:e9:60:04:df:a0:04:
04:1b:b2:05:a0:ab:f1:3c:58:fa:07:0a:d6:db:ea:de:66:08:
13:0f:3e:8e:70:5c:f1:54:55:1c:b7:ee:2d:98:8c:0a:93:c6:
c2:2c:b6:a1:8a:f7:d5:84:d6:3c:b0:23:34:cd:09:42:5d:e1:
6c:86:70:df:d6:2b:4e:8f:44:f5:be:ef:9d:71:8c:71:d3:4c:
82:9d:74:4e:6a:a7:f3:84:9a:75:96:bd:49:4e:ce:b2:fc:aa:
79:1d:2f:b4:0d:96:b2:75:5f:88:5c:65:34:ce:32:b1:8d:5e:
c2:61:32:d9:bd:f9:07:78:0f:ce:11:24:b4:fb:69:f2:39:b1:
e9:12:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:17:57 2024 by rpki-client on console-fra.rpki-client.org