Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/yx-IHp5NUA1kr9WSo1CDZKrEalg.roa
File: yx-IHp5NUA1kr9WSo1CDZKrEalg.roa (raw, json)
Hash identifier: XANDH1wxzeHRwaXT0p8oA9p2c1mdIVlTkuNEwPupL8k=
Subject key identifier: CB:1F:88:1E:9E:4D:50:0D:64:AF:D5:92:A3:50:83:64:AA:C4:6A:58
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 018CC4254D09D1C91FAD23B36B96057C55D0
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/yx-IHp5NUA1kr9WSo1CDZKrEalg.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43447
IP address blocks: 37.47.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:09:d1:c9:1f:ad:23:b3:6b:96:05:7c:55:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb1f881e9e4d500d64afd592a3508364aac46a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:b0:44:5a:77:49:0e:56:06:51:a9:15:71:
74:20:a7:5b:35:ef:3f:37:3a:e9:d7:98:2c:55:f0:
ba:01:eb:d4:c0:16:5a:be:d6:8b:7a:a7:69:89:b6:
ce:6d:bc:41:1b:6a:2e:d5:74:45:6a:42:e4:99:d6:
01:79:99:fb:38:90:f9:84:90:2b:de:68:a4:56:5d:
12:2c:2e:46:b5:91:d9:2f:05:ee:ca:72:2e:b3:d8:
dd:0e:fc:a7:72:2b:7a:7d:08:1e:11:8d:9a:57:c1:
f1:1e:44:e4:95:00:ec:62:62:55:a2:7d:b6:10:ac:
14:dd:c2:4a:f7:76:14:d4:95:6d:28:b3:4c:46:6a:
47:a5:bc:57:cb:56:d7:13:0e:17:8b:63:fc:e4:63:
3d:68:34:08:62:40:d6:55:6b:73:68:7a:e0:dd:df:
e4:5c:59:86:a5:bb:41:7d:3b:9d:65:f3:86:f9:c6:
30:63:be:21:59:bf:6c:fc:1f:a0:a5:53:8d:79:66:
56:35:c9:ba:c9:a7:8b:2f:69:45:42:2f:0a:e9:f9:
25:76:aa:f6:a6:16:7e:f7:c3:5d:59:6f:10:69:69:
be:67:0a:4b:c1:2c:6b:eb:f3:82:cb:17:3e:f1:83:
19:18:fd:81:ba:2f:a3:0a:40:da:a0:ec:e9:a3:01:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:88:1E:9E:4D:50:0D:64:AF:D5:92:A3:50:83:64:AA:C4:6A:58
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/yx-IHp5NUA1kr9WSo1CDZKrEalg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:20:61:c4:29:5f:03:2e:48:8d:0a:3e:67:25:7e:0d:f4:b9:
ef:f2:9f:45:4e:94:ae:e4:70:e3:96:69:ca:00:05:3a:e0:d1:
47:b2:ae:6e:c4:57:a2:d1:77:33:a4:a7:49:e5:dc:c9:31:d4:
7c:f4:c9:2c:14:78:cd:df:ef:f8:6a:15:48:8c:19:c7:d0:ca:
89:22:4f:db:ea:4a:6f:70:3b:aa:4f:c6:0a:49:4b:e1:5d:82:
ea:d2:4b:7f:13:9c:9d:5a:52:40:9b:f4:ee:e2:f4:a3:9d:66:
9c:50:bd:dc:3c:10:2d:62:14:24:00:5f:14:05:18:45:0a:49:
b1:a4:53:d3:12:ee:9f:dd:27:44:56:33:e1:c2:40:b6:6c:a5:
95:a0:43:af:b4:a2:99:55:8d:d0:76:7d:db:3a:4d:ba:7f:95:
8d:89:87:f0:14:29:4b:0d:e0:7f:70:93:8c:fb:8c:ba:77:6a:
84:d0:73:75:99:9d:57:e3:8b:8d:9a:6f:7d:a4:39:c4:1a:5e:
f9:dd:d9:72:ec:c2:2c:83:ed:ba:50:45:f4:75:8e:17:16:09:
e7:2d:dc:8e:09:2f:96:b0:15:ad:33:78:80:55:e8:ef:2b:7a:
90:56:f6:d8:f3:6e:4c:b0:19:e6:62:fc:6c:f0:a4:4c:ab:0c:
21:93:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:49:18 2024 by rpki-client on console-ams.rpki-client.org