Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/i-YBW_J4TN2iVCooIhtc8WDRy9E.roa
File: i-YBW_J4TN2iVCooIhtc8WDRy9E.roa (raw, json)
Hash identifier: cjKjW+nCw3B/kEvWeJrsTsWDh+YaN4g+y+3Lk85tAoU=
Subject key identifier: 8B:E6:01:5B:F2:78:4C:DD:A2:54:2A:28:22:1B:5C:F1:60:D1:CB:D1
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 018CC348D5F850685FDE73F165E2411FF6CE
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/i-YBW_J4TN2iVCooIhtc8WDRy9E.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197753
IP address blocks: 92.118.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d5:f8:50:68:5f:de:73:f1:65:e2:41:1f:f6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8be6015bf2784cdda2542a28221b5cf160d1cbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:d3:cc:31:e9:69:1c:67:5b:f0:70:6b:cb:
de:63:0c:e3:eb:f4:57:6d:47:95:f2:de:bc:9f:0e:
9e:fe:7c:a5:ac:2d:6a:e6:7b:3c:03:40:6d:ba:b6:
ba:3b:ee:b9:6b:8d:fb:0d:85:ad:79:3c:ba:43:0d:
78:22:4a:58:b2:64:a8:ae:18:70:b1:b7:f9:4e:17:
5f:be:99:38:dc:c9:3d:c8:db:94:ad:b9:63:d1:b2:
97:29:9e:00:f9:df:1b:75:47:6e:d0:20:28:c7:ff:
64:75:5b:9f:ce:f7:9d:69:26:d6:46:db:e7:f2:41:
2a:c5:59:4f:b5:e4:b1:c6:52:b6:a6:7f:c6:47:58:
6e:77:0b:3a:1d:1a:fe:cb:2a:15:6f:d8:21:bc:93:
c6:f4:19:28:5f:34:dd:6c:39:6b:bc:20:d8:fd:b0:
b9:9e:ac:0b:c8:7c:7b:ec:ec:a7:1f:f9:28:17:58:
ab:47:a2:18:38:f5:b0:dc:4f:3a:c2:3a:31:bb:fd:
2d:27:de:51:c9:6a:94:84:36:60:e5:45:4e:02:a2:
08:3f:73:32:ec:04:82:98:53:07:84:d5:f7:eb:19:
e7:cf:06:ff:7b:5f:f4:68:d1:c9:b8:88:50:6e:8e:
aa:5b:3a:6b:65:01:25:64:90:56:01:30:23:ee:bb:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:01:5B:F2:78:4C:DD:A2:54:2A:28:22:1B:5C:F1:60:D1:CB:D1
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/i-YBW_J4TN2iVCooIhtc8WDRy9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c6:9c:93:2c:7b:58:1c:90:f5:51:85:3e:c1:f8:37:1c:cd:
02:78:39:b2:e7:e6:47:5e:65:5e:68:16:c1:fa:b4:5d:c5:b2:
a1:74:d0:88:f1:c4:b1:42:b6:52:39:56:09:b9:5e:4d:05:21:
7c:48:f0:2d:01:b0:74:44:d4:38:e8:60:4d:ec:98:56:7c:ca:
85:eb:f1:52:55:83:9e:31:ac:13:1e:ab:5f:76:53:08:1b:b7:
f7:42:84:50:dd:b4:34:d3:22:77:5f:1f:d1:0c:61:6c:19:cf:
ca:ce:16:88:ef:a3:3a:40:16:1e:f1:97:68:cf:45:45:52:37:
7a:9e:2d:66:d8:8e:b1:ae:b3:c6:e1:59:78:1a:c2:43:1a:12:
b7:f0:03:d1:36:20:a7:36:77:b7:49:5c:0d:ec:71:cf:eb:14:
fb:29:e1:f0:92:97:cf:18:3e:79:96:de:d1:33:94:04:ba:3f:
15:a1:f0:e7:5c:34:2c:cc:82:e1:f5:58:68:e4:d1:0c:42:09:
58:c9:d6:a6:c2:b8:ac:9a:27:08:84:7a:55:3e:6f:ee:8e:cc:
76:d7:70:cd:39:1e:5d:11:1c:2d:d7:06:c3:ae:a2:86:ef:22:
36:d3:0f:44:a7:55:9a:68:86:6b:fb:42:78:0d:62:78:8b:d4:
0b:c7:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:36:29 2024 by rpki-client on console-ams.rpki-client.org