Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/ykSLTQJt1gU5Ji5dOi452o5tSQg.roa
File: ykSLTQJt1gU5Ji5dOi452o5tSQg.roa (raw, json)
Hash identifier: 1D4R3vHuK3eBffBKnP32rRywnX4tfEY0lLZT2b7OmEc=
Subject key identifier: CA:44:8B:4D:02:6D:D6:05:39:26:2E:5D:3A:2E:39:DA:8E:6D:49:08
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 018E5B12D68F3768078B0D5C3EB86492C46E
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/ykSLTQJt1gU5Ji5dOi452o5tSQg.roa
Signing time: Wed 20 Mar 2024 08:55:44 +0000
ROA not before: Wed 20 Mar 2024 08:55:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 146.0.0.0/24 maxlen: 24
146.0.1.0/24 maxlen: 24
146.0.2.0/24 maxlen: 24
146.0.5.0/24 maxlen: 24
146.0.8.0/24 maxlen: 24
146.0.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:12:d6:8f:37:68:07:8b:0d:5c:3e:b8:64:92:c4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Mar 20 08:55:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca448b4d026dd60539262e5d3a2e39da8e6d4908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:f3:39:2d:9b:64:9e:dd:79:13:b9:73:72:
da:e6:2c:de:ed:53:e2:f6:f3:69:45:b2:4d:7f:07:
ff:c3:2c:63:58:c8:a5:6c:42:bd:d1:29:cd:00:83:
4e:ce:9f:ac:b9:fb:42:54:0b:e9:40:66:5e:b2:aa:
9b:df:81:4b:32:cd:d6:6a:ce:d8:e1:18:ee:98:8f:
78:81:ed:0d:d0:60:de:a3:a8:29:b8:05:5a:9a:e7:
fa:48:47:04:77:5d:80:32:9d:7d:e9:2a:d8:95:d5:
8b:7c:9f:e9:1f:38:7d:4a:44:95:a1:2d:5b:cd:31:
4c:8f:be:cc:ae:3b:b6:44:ae:d9:f2:62:d4:ac:10:
27:d4:b6:d7:d0:00:b9:25:9d:55:06:9a:17:bf:24:
29:38:77:03:2f:3e:cd:fd:05:83:73:94:2c:22:c8:
08:64:c4:84:9f:13:30:e9:df:e7:2f:93:50:41:69:
3f:b3:d3:f8:27:32:e4:76:a4:95:ba:d1:06:b9:4f:
b8:22:18:21:cf:c1:9d:d4:23:55:49:20:50:a6:06:
45:91:33:c4:17:1e:94:e6:f9:35:14:22:31:21:dd:
01:fa:15:0a:82:d9:dc:a2:38:46:8e:cf:91:01:89:
e1:b8:a1:4b:bc:73:36:5d:bc:0d:26:f8:35:c6:84:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:8B:4D:02:6D:D6:05:39:26:2E:5D:3A:2E:39:DA:8E:6D:49:08
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/ykSLTQJt1gU5Ji5dOi452o5tSQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.0.0-146.0.2.255
146.0.5.0/24
146.0.8.0/24
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9e:1e:54:c9:61:24:5c:e6:97:6f:b6:57:cd:ad:0f:98:c3:
77:9e:e5:e8:4d:19:da:19:82:89:ae:80:ec:64:ca:c7:90:4e:
b9:f7:6d:09:5b:67:db:f6:a3:50:9f:91:a1:89:0a:3d:97:f3:
b5:d8:0d:03:89:b7:90:13:ad:c7:66:37:5d:fa:bb:e4:13:96:
ac:25:c8:a3:76:0b:3a:b2:25:02:5a:b2:bf:b5:d4:85:35:6f:
04:4f:ff:40:67:c8:2c:61:ce:f3:2f:99:f7:f9:9c:b8:88:52:
b7:64:b9:0e:8e:f7:ac:25:cc:5d:a4:04:8d:36:a2:03:bb:cf:
29:08:e3:7b:a9:b4:04:d2:62:c3:8e:a0:85:8e:e3:8e:e2:98:
98:20:a5:af:ad:53:08:05:ea:9f:85:a4:b3:43:ad:dc:cc:3d:
82:a8:6f:c0:a3:a3:8c:c0:59:9c:61:c2:bc:73:8b:c5:4f:17:
23:ae:44:b8:25:8d:3e:53:de:58:31:ed:ea:4c:b9:67:3d:c9:
38:85:34:92:4d:91:ca:b4:30:5b:d4:68:16:c5:c4:df:82:de:
bc:ec:d6:9d:80:cd:98:09:33:67:e4:88:14:93:ac:51:e6:39:
3b:7b:c7:b2:40:eb:16:ee:05:af:c8:22:0d:bc:8d:56:e6:c8:
06:b4:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:37:09 2024 by rpki-client on console-ams.rpki-client.org