Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/Yw6l_P9rY_tggXSTNKzrS86CVOs.roa
File: Yw6l_P9rY_tggXSTNKzrS86CVOs.roa (raw, json)
Hash identifier: 5ceHKCkqatcLnJdaJ6dPFikfCczmS9fuAUb/lqwlaPw=
Subject key identifier: 63:0E:A5:FC:FF:6B:63:FB:60:81:74:93:34:AC:EB:4B:CE:82:54:EB
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 018CC26D2D52F5891374B62B2072C112FD35
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/Yw6l_P9rY_tggXSTNKzrS86CVOs.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201547
IP address blocks: 5.45.44.0/22 maxlen: 22
5.45.45.0/24 maxlen: 24
5.45.46.0/24 maxlen: 24
2a0d:1740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2d:52:f5:89:13:74:b6:2b:20:72:c1:12:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630ea5fcff6b63fb6081749334aceb4bce8254eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:44:24:a0:fb:15:01:b9:95:3d:f6:c0:88:
db:b1:13:42:60:7e:8e:24:55:dd:64:6a:fc:9d:e1:
14:2b:14:55:c4:ad:74:9d:40:7b:cd:b3:39:2e:c1:
8a:04:9f:20:04:a7:e8:c3:4a:44:c3:99:64:0b:7f:
8c:d6:88:77:b2:64:f1:7a:d9:00:a8:15:1c:ba:7d:
91:2b:55:3b:03:49:cd:a0:f4:6c:76:5a:8b:2c:ad:
1b:5d:da:3b:ef:1f:4c:c1:cd:49:9f:fa:7f:c0:b3:
41:10:07:20:7d:80:68:01:d1:f3:37:5f:59:52:ac:
4a:f7:a4:1c:ce:af:10:1d:8f:e8:68:f5:cf:13:38:
ed:25:e7:7b:b7:ad:d3:d4:34:4a:c4:c6:f3:88:4f:
7f:e5:3b:37:63:52:f4:d1:cd:65:79:18:79:e4:26:
5e:5a:e2:5b:02:6e:6e:ce:00:30:e4:b1:6c:e9:31:
f0:29:40:fa:09:12:6e:cd:a6:9f:ef:23:88:19:2c:
c3:a9:06:a1:e9:36:6f:fb:5f:8f:72:b7:b2:c5:a0:
ac:12:95:81:78:02:cb:80:8b:3d:f2:ee:0f:dd:79:
e0:52:e3:ec:ba:5b:5a:1f:40:e7:58:91:72:42:04:
5e:6b:c9:7a:00:8e:d9:f7:87:8a:47:28:59:1a:b9:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:A5:FC:FF:6B:63:FB:60:81:74:93:34:AC:EB:4B:CE:82:54:EB
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/Yw6l_P9rY_tggXSTNKzrS86CVOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.44.0/22
IPv6:
2a0d:1740::/32
Signature Algorithm: sha256WithRSAEncryption
5a:74:7a:1c:bb:f4:ac:d2:1f:10:6a:f1:1c:64:08:19:c2:f1:
d0:6a:2d:fd:28:ed:16:7e:3b:01:6a:56:bb:70:db:00:fd:22:
1f:c3:a3:7e:7c:bb:76:8c:c0:59:a9:fe:67:04:d4:0d:8b:20:
09:28:17:53:c0:d3:bc:17:64:67:33:6f:d1:3e:49:b4:2d:f3:
6c:47:04:2a:46:7b:80:d4:76:13:67:cb:00:19:47:3b:69:2f:
14:6f:3a:e8:3a:11:60:be:87:8e:3d:19:1a:46:ce:2d:a7:89:
ca:37:1c:10:ab:93:16:0c:f1:85:fa:63:0e:60:1a:7c:93:7a:
aa:d8:30:8f:ae:2c:57:26:da:3b:6d:e2:92:e1:f7:e0:17:be:
f0:1b:64:80:d5:7b:52:2c:8b:1c:9c:e4:b0:6c:c6:11:ea:fc:
35:30:fa:3c:14:bb:c9:71:de:7e:5e:1c:f4:45:d5:ab:4f:fb:
82:11:87:74:83:4f:98:a7:72:8b:f4:c5:af:01:c4:ae:6b:7f:
e7:34:b5:7f:af:3e:50:64:03:ec:9c:ab:4c:ee:72:88:14:06:
1c:5e:3f:dc:23:75:cd:ea:8f:61:48:9a:a5:ec:0f:37:a4:2e:
ce:7b:5e:d2:0a:91:0c:17:47:a2:8c:81:50:90:99:0e:fa:a3:
bf:09:c6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:39:48 2024 by rpki-client on console-ams.rpki-client.org