Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TyKxJbq2s6winztPs8g0EyFsk34.roa
File: TyKxJbq2s6winztPs8g0EyFsk34.roa (raw, json)
Hash identifier: sFc7uNoFiH46NOUDaPsMkvIv8A+QAjAYFwwbIyqBOLA=
Subject key identifier: 4F:22:B1:25:BA:B6:B3:AC:22:9F:3B:4F:B3:C8:34:13:21:6C:93:7E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC7952B9215326BBB4381A3A92E891C6E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TyKxJbq2s6winztPs8g0EyFsk34.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395092
IP address blocks: 45.158.44.0/24 maxlen: 24
2.57.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 18:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2b:92:15:32:6b:bb:43:81:a3:a9:2e:89:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f22b125bab6b3ac229f3b4fb3c83413216c937e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:f0:0d:29:b5:ed:3e:be:ec:7d:aa:23:ff:
4f:8d:cb:bd:da:f6:bb:17:2e:1b:93:5f:8d:35:ae:
ff:f2:37:b9:bc:a1:5b:bd:d7:10:31:6d:62:67:1a:
d5:8c:2e:3b:68:b9:80:c3:7f:96:07:6d:75:eb:5a:
1f:71:18:17:39:5a:16:9a:ed:51:bf:f0:a5:9b:be:
41:ad:bf:44:34:33:13:e5:2d:65:85:7c:e5:7a:6e:
a5:64:89:68:31:bd:41:eb:b3:7e:c9:d6:84:df:92:
94:81:6e:cd:43:ae:bc:b1:40:fb:ad:50:8d:b3:94:
7e:c9:fd:19:2e:30:4a:36:b2:b3:b4:4b:19:fb:9d:
4b:0f:e5:ef:f9:f1:42:50:08:91:28:2f:58:53:75:
95:3c:f8:fd:39:78:ce:fd:04:ea:61:53:85:67:15:
fd:a5:8a:88:0c:08:41:81:a0:ff:f4:62:c2:37:9e:
e9:48:f7:03:3f:d2:24:58:e4:b3:c1:92:a5:0d:c4:
65:d3:1a:2b:42:05:2c:45:b1:11:83:c4:5c:d9:d3:
a3:b6:75:43:81:46:1a:39:1f:ed:f8:06:d4:89:b7:
5c:b6:53:36:9d:3c:76:82:20:15:30:05:04:24:f6:
95:72:e1:59:2c:1b:c1:c8:ce:61:a7:7d:78:53:e9:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:22:B1:25:BA:B6:B3:AC:22:9F:3B:4F:B3:C8:34:13:21:6C:93:7E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TyKxJbq2s6winztPs8g0EyFsk34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.151.0/24
45.158.44.0/24
Signature Algorithm: sha256WithRSAEncryption
98:28:e6:e4:6b:d8:cd:86:42:ae:27:df:17:f5:36:41:72:6b:
6f:c7:ec:36:81:77:95:4c:32:20:9e:c9:40:e8:85:95:e6:67:
32:03:cf:2a:e9:f1:e8:46:9f:a8:b5:1f:f7:02:b2:60:13:16:
c0:75:5c:7b:cd:67:83:01:ed:8c:0f:80:f8:37:f9:da:54:84:
47:d4:fd:08:9a:bb:d0:b8:11:0f:d7:d7:71:96:3a:2d:dc:86:
4e:de:6f:70:a1:93:0c:68:d2:3b:ee:46:66:6b:f7:f8:4c:17:
b9:b2:18:fb:d9:a8:f8:b7:8d:fc:f8:fd:4e:32:0a:d8:74:25:
b9:9e:ff:1f:c2:18:63:c8:11:dd:69:56:81:cc:87:29:61:70:
08:6b:3f:6c:4d:25:3c:f6:94:e6:6c:63:e1:75:b0:e5:fe:04:
a9:d5:0c:23:dd:1b:6d:11:da:33:ab:6c:19:2c:f9:27:f4:2b:
02:63:7e:1b:67:e6:86:e5:b7:ab:4d:1b:79:f8:83:dc:4d:1c:
54:d9:aa:4d:af:5e:17:45:82:8e:c0:48:33:76:21:3b:c5:17:
46:8a:ef:1b:69:bb:95:20:4c:ed:28:4f:89:d5:f0:2d:49:89:
66:54:39:15:38:f4:87:ee:cc:28:34:77:a1:bc:d3:14:71:a2:
a0:aa:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:12:27 2024 by rpki-client on console-fra.rpki-client.org