Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/y-_obQTBjyJNGhvahNorf2-Ya2k.roa
File: y-_obQTBjyJNGhvahNorf2-Ya2k.roa (raw, json)
Hash identifier: ntAhUj6SbADn2M42I2XZFKdiyEY94SHmSfNz1XzQc+M=
Subject key identifier: CB:EF:E8:6D:04:C1:8F:22:4D:1A:1B:DA:84:DA:2B:7F:6F:98:6B:69
Certificate issuer: /CN=bc70474792f5083e625f24d6d57aab72d657229e
Certificate serial: 018CC42519BD640E81A2374643A670E9ABE5
Authority key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/y-_obQTBjyJNGhvahNorf2-Ya2k.roa
Signing time: Mon 01 Jan 2024 08:30:14 +0000
ROA not before: Mon 01 Jan 2024 08:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 194.56.182.0/24 maxlen: 24
2a11:3a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:19:bd:64:0e:81:a2:37:46:43:a6:70:e9:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc70474792f5083e625f24d6d57aab72d657229e
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbefe86d04c18f224d1a1bda84da2b7f6f986b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:67:62:e6:03:d4:f9:0e:8f:74:68:0a:1a:
46:a4:92:e7:b7:25:db:fe:30:57:60:79:4d:8f:2c:
06:5f:cd:8d:c0:c6:1e:1c:d9:de:51:4f:25:df:08:
fa:70:a1:50:9b:6a:f4:d6:8d:a5:71:f2:2b:5a:b5:
e2:e7:e9:d4:a6:01:db:d9:b7:63:d4:c4:c5:70:ce:
69:64:4f:a5:23:27:cc:16:8a:40:56:fa:28:9a:dc:
30:18:06:83:3d:e7:c6:e6:a8:5e:f6:88:47:1a:ec:
5f:dc:66:07:90:60:8f:ef:c0:38:af:c7:95:65:f7:
b3:ac:c1:1e:cd:66:a1:c7:6f:9b:64:d1:3d:46:21:
96:38:d4:8b:ce:b4:09:4b:b1:35:33:4a:f7:a1:14:
a6:d1:33:49:f5:c9:7b:01:09:39:40:75:29:04:b2:
f5:20:9d:61:89:14:39:7a:ac:3e:68:e3:47:4b:3b:
38:b3:d9:a4:3a:e9:f2:c4:e4:1d:36:c7:af:f1:fb:
b4:88:13:00:aa:cb:30:20:a3:e9:0a:b1:ac:a5:68:
fa:f5:2d:e5:a4:38:74:1a:de:5d:e5:2f:0c:0f:94:
62:90:86:67:72:e7:f4:e7:af:50:3e:49:60:fd:c3:
8d:38:b6:d0:4a:68:cb:eb:a1:55:4c:ff:5a:c4:12:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EF:E8:6D:04:C1:8F:22:4D:1A:1B:DA:84:DA:2B:7F:6F:98:6B:69
X509v3 Authority Key Identifier:
keyid:BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/y-_obQTBjyJNGhvahNorf2-Ya2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.182.0/24
IPv6:
2a11:3a00::/48
Signature Algorithm: sha256WithRSAEncryption
3c:2d:4f:2c:57:94:b1:2c:07:ff:64:44:10:c7:59:68:31:cf:
c7:98:c8:b2:8a:6b:00:21:71:0c:94:2f:9b:82:90:bd:7d:0f:
d6:7b:26:a4:f9:6b:55:2b:ef:75:e1:41:11:f5:da:ee:d8:18:
11:ae:9e:15:37:4b:15:bc:28:9b:e0:27:be:45:ed:f4:c9:ab:
9b:e9:a7:5e:66:9f:8a:48:88:40:5d:30:a7:13:78:8d:38:7d:
8f:26:c3:99:9b:f6:d5:05:fd:40:af:01:ba:ce:46:da:02:52:
71:9f:0a:26:5f:37:2e:4a:e5:25:96:41:54:11:9d:0b:65:a6:
b3:65:cd:94:0f:57:eb:cf:1b:e1:96:87:37:52:eb:75:5c:0d:
1e:53:d1:01:fe:52:90:41:fa:46:34:d1:d4:de:e6:ec:a6:9c:
8f:3d:4f:11:d8:d4:20:4b:11:1a:08:85:35:40:8e:fc:08:42:
95:cf:58:3a:3d:e8:bb:15:9b:f5:cc:db:5e:ea:07:87:9e:0c:
c5:6e:a7:3f:6d:7e:97:50:32:b8:71:66:a1:43:9a:71:0d:7e:
ab:21:05:4c:25:d0:17:a1:4f:03:3a:35:07:9d:f4:da:ca:33:
00:79:ac:53:ae:48:6d:14:27:0d:ad:e7:fa:22:a1:e4:b0:77:
77:12:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:48:30 2024 by rpki-client on console-ams.rpki-client.org