Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/2yyGWpkFmV683YZnLtos8BLrdaA.roa
File: 2yyGWpkFmV683YZnLtos8BLrdaA.roa (raw, json)
Hash identifier: a8XbokTMyZnJq+GWqCh8hZQYcygBMF/V41+DxxGrOFw=
Subject key identifier: DB:2C:86:5A:99:05:99:5E:BC:DD:86:67:2E:DA:2C:F0:12:EB:75:A0
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 018CC5DC44BF3FB0C4914091F2DFFCFCF9B1
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/2yyGWpkFmV683YZnLtos8BLrdaA.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51483
IP address blocks: 46.254.136.0/21 maxlen: 21
128.0.192.0/21 maxlen: 21
185.74.224.0/22 maxlen: 22
95.142.64.0/20 maxlen: 20
46.235.112.0/21 maxlen: 21
46.235.119.0/24 maxlen: 24
2a00:1100::/32 maxlen: 32
2a00:1100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:44:bf:3f:b0:c4:91:40:91:f2:df:fc:fc:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db2c865a9905995ebcdd86672eda2cf012eb75a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:61:9d:0b:1b:ec:f0:df:bb:ea:8a:20:64:
52:df:b2:43:3b:df:3a:1e:9f:e7:33:c2:38:44:4e:
2b:70:7f:00:06:39:65:da:16:59:ee:21:1b:59:5a:
d1:aa:cd:02:db:7f:1c:73:25:94:fb:11:f3:80:ae:
a5:0f:d0:11:49:5f:51:59:e5:cf:9a:a5:77:57:be:
7d:59:d5:27:12:b6:89:a5:8c:b1:84:99:5b:8a:94:
92:34:7d:ed:fa:e9:27:61:1b:0a:63:cc:5e:0a:6c:
9c:68:83:82:74:e5:1b:2f:99:9e:18:01:cd:fe:09:
28:9b:0b:46:fa:52:5a:c7:89:5b:be:b2:25:f3:eb:
59:ad:8c:38:db:37:87:62:94:58:80:27:7d:b8:f6:
ba:e3:11:7e:51:6e:ba:8e:6b:0c:45:2c:ff:99:bb:
bb:b6:37:6a:fb:5f:da:49:8b:83:62:1d:47:ac:7a:
6b:c0:ef:64:aa:fb:31:57:e4:42:4a:af:f5:51:4f:
ba:c1:70:04:5d:64:65:9a:e5:5e:4d:66:72:75:5a:
7d:ea:69:29:cf:54:25:b8:99:28:57:46:6d:eb:fd:
73:0d:c5:9a:ac:97:0c:6c:5b:2e:35:ba:c2:86:0e:
73:3a:f0:78:a2:1a:a6:6f:3b:00:a3:84:79:81:01:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2C:86:5A:99:05:99:5E:BC:DD:86:67:2E:DA:2C:F0:12:EB:75:A0
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/2yyGWpkFmV683YZnLtos8BLrdaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.112.0/21
46.254.136.0/21
95.142.64.0/20
128.0.192.0/21
185.74.224.0/22
IPv6:
2a00:1100::/29
Signature Algorithm: sha256WithRSAEncryption
8a:99:fa:79:56:4f:f4:eb:0a:36:04:05:16:29:9e:75:6e:64:
e8:ba:76:cb:01:a2:1b:92:b2:51:70:88:ac:89:7f:bb:08:94:
00:56:5e:ad:74:fa:01:77:99:6b:75:24:66:c9:68:f9:7d:ec:
44:98:23:ec:9e:9f:ea:6c:a0:e9:e3:1d:dd:f2:ea:52:ad:cf:
7e:47:97:48:3d:f4:1c:f8:56:22:67:25:6c:1f:5b:a2:1c:23:
88:29:d5:5e:45:89:20:ad:bf:be:59:1a:80:83:36:c6:39:ac:
1f:2d:4d:61:6d:a6:cc:66:20:b1:af:11:a1:4a:2c:17:33:9c:
6e:b4:e8:31:af:13:6d:86:50:01:17:76:5e:6f:79:c3:28:da:
9d:80:22:cb:92:6c:e3:c4:c8:a5:60:ba:b5:38:fe:17:73:dc:
85:bc:f0:f5:b2:ba:d7:aa:3f:bb:45:a9:bb:d9:3f:b6:ac:c5:
c5:84:a6:a1:f9:18:d4:d0:b5:19:e7:6b:1a:c0:42:b5:ee:b0:
c9:18:9f:52:29:e7:ce:5d:a6:d2:aa:04:11:cf:fd:d5:81:e8:
45:e6:43:47:b7:02:23:43:ff:f5:22:70:b4:d6:17:79:f6:90:
e7:48:aa:74:3a:d4:a2:f0:e0:5b:70:c7:35:ca:65:ef:f3:38:
43:82:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:37:39 2024 by rpki-client on console-ams.rpki-client.org