Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/ynVbja92TngfepRaKnZKVom45Wo.roa
File: ynVbja92TngfepRaKnZKVom45Wo.roa (raw, json)
Hash identifier: xh1mauE1wQTy5vaIryae+0JxHaCRtxW5b7iK0liwH2I=
Subject key identifier: CA:75:5B:8D:AF:76:4E:78:1F:7A:94:5A:2A:76:4A:56:89:B8:E5:6A
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 018CC6B883A528D311E577ADBDD5E7F443B0
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/ynVbja92TngfepRaKnZKVom45Wo.roa
Signing time: Mon 01 Jan 2024 20:30:30 +0000
ROA not before: Mon 01 Jan 2024 20:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.49.132.0/23 maxlen: 23
185.49.132.0/22 maxlen: 22
185.49.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:83:a5:28:d3:11:e5:77:ad:bd:d5:e7:f4:43:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jan 1 20:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca755b8daf764e781f7a945a2a764a5689b8e56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:6a:be:a9:e1:ea:ca:28:56:88:54:1d:3e:
43:49:59:94:c2:62:28:6c:44:37:f0:d0:2b:e7:1f:
6e:19:1f:b7:78:a2:be:8a:5e:27:7d:07:c3:23:6f:
f6:6e:b8:b2:24:0a:59:80:8d:8a:fa:b0:46:72:64:
0b:ce:d2:05:50:f8:dc:fd:9e:88:ca:27:82:47:fe:
7d:8b:d1:cf:5b:b6:c2:68:ac:9a:04:ad:1f:cf:09:
16:2a:26:be:97:c9:dd:28:b8:a0:d7:11:07:53:73:
cd:bb:9d:40:ab:47:d9:4b:99:42:fe:b7:5f:5d:03:
bc:d0:af:e9:79:55:01:7d:15:81:c6:55:13:92:6e:
4a:b6:98:28:c7:7a:04:10:ef:93:a9:43:99:36:c5:
4c:90:d9:a8:2f:10:74:f8:95:66:27:2c:34:bc:88:
16:f0:7f:f5:be:24:ce:37:bb:5c:83:ba:ce:b8:36:
b2:41:06:96:69:71:d9:14:28:8a:dc:92:10:c7:70:
e8:af:f4:63:81:ee:9a:1a:c6:64:0e:6f:96:cb:55:
10:31:f0:cf:a9:8b:70:d9:79:35:d5:85:e2:b2:9d:
d9:ed:5e:a9:c0:52:45:2f:ac:00:1d:aa:b2:70:ef:
ab:8a:c7:38:39:8a:2e:66:2d:70:de:ee:c9:96:de:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:5B:8D:AF:76:4E:78:1F:7A:94:5A:2A:76:4A:56:89:B8:E5:6A
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/ynVbja92TngfepRaKnZKVom45Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.132.0/22
Signature Algorithm: sha256WithRSAEncryption
62:08:21:e5:da:07:e1:bd:5d:34:32:06:b5:66:9d:45:7b:a8:
02:da:6c:7b:ac:5c:e8:48:fa:a8:3c:17:5f:98:3e:09:b2:d5:
ac:1c:a9:b3:90:d2:dd:ae:d4:5f:f3:c8:fc:78:ab:71:7c:72:
1f:b4:b0:43:76:fe:f0:42:0d:9f:c0:d9:7a:00:7f:ad:84:cf:
88:e7:b8:a4:67:e5:57:b3:2f:6d:51:91:f1:6e:03:02:ec:5c:
e2:19:9b:70:2d:50:9f:71:ce:aa:de:0b:fe:9e:4f:15:10:0b:
52:86:68:f6:f3:cc:b9:b1:47:f0:55:7d:94:78:5d:38:8d:f4:
11:ce:6e:55:44:62:e0:10:c9:ec:be:63:84:0e:d2:d3:09:c1:
3c:e0:54:63:65:2c:c0:3e:81:9e:89:2f:04:69:bc:b5:dc:95:
03:5d:83:02:f8:e0:c7:64:24:14:f3:22:bf:32:eb:44:91:7e:
4d:13:76:3f:9d:0b:fb:d9:d6:73:70:ce:70:cd:ad:42:53:03:
4f:a0:27:3f:84:57:77:46:92:6d:d4:06:23:20:7a:57:cd:8f:
bd:64:99:56:b8:e2:ba:85:5f:7a:fa:b7:7a:66:ab:17:48:63:
9c:0f:b0:cf:a7:5e:83:08:ec:22:f0:5f:13:c4:4d:a5:bd:34:
a0:a8:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:13:59 2024 by rpki-client on console-ams.rpki-client.org