Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yN-e5rAefXUFf_IiEIsGfDX_50s.roa
File: yN-e5rAefXUFf_IiEIsGfDX_50s.roa (raw, json)
Hash identifier: 94e8dsyZ3beY2ZKdWIvWF9DcbbfFBpFVQawO7M+Kmv4=
Subject key identifier: C8:DF:9E:E6:B0:1E:7D:75:05:7F:F2:22:10:8B:06:7C:35:FF:E7:4B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D587CA40EF037037718529E8F8CEF777F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yN-e5rAefXUFf_IiEIsGfDX_50s.roa
Signing time: Tue 30 Jan 2024 03:49:39 +0000
ROA not before: Tue 30 Jan 2024 03:49:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51659
IP address blocks: 194.87.48.0/24 maxlen: 24
194.87.68.0/23 maxlen: 23
194.87.70.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.196.0/23 maxlen: 23
195.58.48.0/23 maxlen: 23
195.133.5.0/24 maxlen: 24
195.133.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:7c:a4:0e:f0:37:03:77:18:52:9e:8f:8c:ef:77:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 30 03:49:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8df9ee6b01e7d75057ff222108b067c35ffe74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:db:7a:da:20:1d:9a:9c:98:99:bd:5a:ad:
30:af:dd:9d:0b:23:7d:d8:68:9b:9f:89:48:ad:ab:
7a:87:1d:7a:f1:68:33:31:27:71:ee:e0:85:5c:bf:
8b:ad:c4:32:64:61:64:e3:98:34:2d:8a:f7:56:01:
b0:57:92:ef:96:a2:18:99:78:cf:34:41:91:86:b0:
a5:93:2c:fe:e4:4c:6a:3e:66:90:0a:7d:bb:40:ce:
45:de:67:99:68:71:f8:76:1a:85:8d:e2:2a:49:6a:
69:23:c9:7e:43:86:f4:c6:e4:a5:86:c1:04:c6:ea:
90:e2:10:99:2d:56:c5:d2:e0:46:7c:41:45:ae:f4:
22:c7:1d:91:30:86:52:31:84:45:1d:81:fc:51:b6:
25:d3:e4:da:f8:3b:cf:b0:7d:f7:88:2a:3e:72:e0:
87:f6:11:9c:67:38:89:8a:28:b5:cf:f2:12:d6:88:
81:f3:05:7e:b7:88:97:94:e6:18:da:85:b1:5b:08:
38:cc:19:88:d7:13:92:3a:8d:98:87:b5:6e:4b:cd:
de:f5:96:52:27:05:25:5f:8e:a7:c6:cd:c0:33:1c:
12:05:40:4e:6d:96:dc:4a:c6:45:18:bf:56:ae:15:
0a:9f:a5:a8:38:e5:62:a1:19:08:ca:04:e5:4c:11:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:9E:E6:B0:1E:7D:75:05:7F:F2:22:10:8B:06:7C:35:FF:E7:4B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yN-e5rAefXUFf_IiEIsGfDX_50s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.48.0/24
194.87.68.0-194.87.70.255
194.87.106.0/24
194.87.196.0/23
195.58.48.0/23
195.133.5.0/24
195.133.23.0/24
Signature Algorithm: sha256WithRSAEncryption
08:83:9f:ee:79:5c:c8:05:c2:a8:de:4a:08:e7:e6:c4:9a:88:
67:29:ec:46:92:64:2d:83:4a:54:33:77:0a:4c:02:29:8e:fa:
ac:fd:15:f1:a3:5e:b4:ce:91:b1:0c:ea:01:c2:6e:b9:d3:a6:
b7:06:83:0b:d6:21:6a:87:56:cf:37:48:2c:8c:b7:1e:9d:8d:
d1:7a:33:c1:74:ac:28:b2:47:d7:66:81:02:f9:c0:c1:49:6e:
ce:ce:78:8c:f0:22:96:38:c2:07:fb:8a:e8:4f:48:8c:95:5e:
0f:19:3d:6c:0a:ea:e2:94:4b:50:70:80:ea:a6:1a:f7:82:3e:
a3:c7:4f:f7:a3:65:1a:e0:e8:01:ec:17:e5:93:ec:4e:2c:70:
cb:96:dc:01:8a:72:3f:ad:27:ea:a8:19:fc:d4:c1:e5:b8:d0:
78:cd:ee:aa:a8:30:71:fe:0e:5a:05:5b:fc:4b:3c:70:d4:bf:
c5:8b:17:cf:f3:ec:c5:db:6a:08:82:fe:a7:5b:1f:24:44:01:
ed:30:ff:36:b5:0b:e9:a9:fa:fc:98:c5:95:a0:8f:4e:68:46:
e8:14:20:46:0a:7b:ed:dc:77:83:90:e9:c2:14:55:eb:60:56:
27:ce:40:a2:82:ab:bb:74:e1:8f:ee:3c:dc:98:22:b3:5e:42:
61:14:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 18:03:56 2024 by rpki-client on console-fra.rpki-client.org