Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/Y_16TVlRJFD24ewTjPNzOK0Dm-U.roa
File: Y_16TVlRJFD24ewTjPNzOK0Dm-U.roa (raw, json)
Hash identifier: XOt2OBmVH55kSTrjxav2Prj0Mat70rHIoNmZ1XDQXWg=
Subject key identifier: 63:FD:7A:4D:59:51:24:50:F6:E1:EC:13:8C:F3:73:38:AD:03:9B:E5
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 018CC8DFA26BA02CBC3D4454D0FF65B7B31B
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/Y_16TVlRJFD24ewTjPNzOK0Dm-U.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33814
IP address blocks: 46.235.192.0/21 maxlen: 24
2a03:c200::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a2:6b:a0:2c:bc:3d:44:54:d0:ff:65:b7:b3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63fd7a4d59512450f6e1ec138cf37338ad039be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:be:c3:77:87:f4:58:81:80:b3:63:33:5b:
7c:ae:e4:dc:66:34:8a:f1:e0:58:1d:1d:f4:d8:e3:
f7:f6:61:9f:fb:55:8d:d1:e3:a3:8b:c1:1d:fa:c0:
c4:54:bb:23:c3:db:53:68:09:b3:d1:fd:70:07:6d:
dd:db:26:7b:a8:82:d8:63:ab:9a:12:d6:0f:12:96:
b3:55:57:2b:cb:5e:7c:13:6d:88:94:08:7f:ae:35:
ea:10:27:b9:51:39:20:60:c9:70:06:a1:28:06:99:
b6:d5:b3:46:c6:df:09:df:85:ae:84:9a:d1:26:8e:
4d:47:66:4c:d2:82:08:f4:74:b5:f8:8c:bc:11:74:
23:c7:87:8f:a2:db:fb:59:b8:5e:52:22:cd:bd:2c:
4d:f2:82:0c:26:c7:3e:44:58:b3:f7:53:10:39:d3:
e6:01:12:35:a1:12:6b:09:47:b6:86:4f:2b:f1:c9:
4c:38:84:73:ae:f8:b7:a3:7d:0d:b2:10:51:9f:85:
38:ca:d1:05:d3:d3:2b:58:b0:37:e2:de:3e:cf:03:
15:1b:d5:d9:13:a3:94:d6:65:24:c2:75:88:73:65:
a8:c3:f5:8c:69:51:8b:fc:fd:a4:07:9d:d0:0b:b3:
2d:7b:4f:ef:24:88:1e:6d:38:89:5e:a9:8c:ed:40:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FD:7A:4D:59:51:24:50:F6:E1:EC:13:8C:F3:73:38:AD:03:9B:E5
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/Y_16TVlRJFD24ewTjPNzOK0Dm-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.192.0/21
IPv6:
2a03:c200::/32
Signature Algorithm: sha256WithRSAEncryption
11:c5:bc:3d:e5:06:e4:9f:ab:c3:1b:d7:0f:5a:4b:29:c9:0a:
8d:ee:1a:03:3d:fb:55:63:0c:01:86:2c:15:f1:64:a7:fb:a7:
ce:65:2b:83:29:21:ec:44:96:fe:5b:78:16:6a:72:09:fd:f3:
88:51:61:bc:a6:19:2c:1d:1d:ed:57:98:e8:7a:86:58:56:67:
48:20:4f:be:68:c4:96:85:fb:cb:bf:4b:a9:b4:4d:06:16:e2:
e2:f9:07:f9:35:61:ea:f1:81:35:e2:0a:f8:0b:a6:42:97:54:
1d:a3:eb:80:1b:b7:9e:2a:5c:05:c8:19:90:6a:7a:fe:15:29:
a8:60:53:f5:d7:3f:81:8e:6e:9f:79:dd:76:1b:3e:05:ec:6c:
c4:51:bb:ee:d4:2b:35:56:d3:28:13:de:39:e9:28:ac:b4:55:
8d:b8:9f:f2:be:57:72:03:1d:ab:0d:76:6d:1c:a1:a8:38:71:
6d:f7:49:84:98:de:de:b6:db:48:77:96:46:f4:e2:ba:d1:84:
0a:e7:30:c9:2d:84:9d:f4:bc:d4:9e:29:1d:33:fd:8a:7c:0b:
f0:b4:b0:2a:26:cc:b8:58:05:af:ef:d6:b2:b8:40:99:2c:bf:
78:20:af:56:c9:d9:3d:90:44:0b:15:f1:39:74:0c:83:21:8d:
5f:46:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:33:06 2024 by rpki-client on console-fra.rpki-client.org