Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ytwi84HBt0FiOgEM8x-w37cUyiw.roa
File: ytwi84HBt0FiOgEM8x-w37cUyiw.roa (raw, json)
Hash identifier: qEHXyyaALYZusvRH6ET+iVcPS9PCEFKlR42pyz2K3o8=
Subject key identifier: CA:DC:22:F3:81:C1:B7:41:62:3A:01:0C:F3:1F:B0:DF:B7:14:CA:2C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC79445F301E7A452F0E18B5B68B48529
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ytwi84HBt0FiOgEM8x-w37cUyiw.roa
Signing time: Tue 02 Jan 2024 00:30:32 +0000
ROA not before: Tue 02 Jan 2024 00:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36062
IP address blocks: 213.254.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:45:f3:01:e7:a4:52:f0:e1:8b:5b:68:b4:85:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cadc22f381c1b741623a010cf31fb0dfb714ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:d3:91:74:98:50:96:eb:45:7e:95:53:db:
53:ad:85:fd:0f:2d:08:f4:9a:2e:0e:fc:6c:5c:ff:
a1:4d:e0:4d:8f:70:f8:53:33:7a:af:90:0a:9f:f0:
78:1c:0a:d2:64:54:c5:38:f5:8a:90:4c:91:5e:82:
fe:e0:b9:3a:1f:98:0d:32:8d:fa:a5:05:e4:9c:7e:
17:0e:2d:8f:5e:e8:29:e1:f0:12:6f:b9:4c:a9:70:
bf:4e:db:f4:e8:fc:60:05:26:de:3a:37:37:90:34:
9c:f5:54:b3:75:3c:17:48:a3:6c:b9:83:e3:84:84:
12:02:d5:2f:f7:1a:05:12:19:19:cf:71:32:78:03:
7e:69:87:15:84:23:03:56:e2:1a:fb:09:a5:30:e8:
d0:41:5d:e7:eb:e3:c3:59:c8:f9:b2:4e:97:0a:2e:
09:73:40:fe:c4:66:36:1d:b1:8f:3b:1c:ac:d3:c0:
49:6c:02:cc:5a:0b:e9:d2:c7:fb:36:e3:55:08:fb:
e4:72:5c:32:77:f2:0f:d8:5e:25:9e:40:76:2c:c5:
7a:07:bb:1d:40:51:aa:78:e5:c5:bb:6d:c0:54:45:
8e:f7:ee:fe:c9:74:9c:18:22:9a:22:78:e5:d9:bf:
d5:d6:3c:36:2a:33:9e:be:f0:8c:1b:8c:cb:00:9e:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:22:F3:81:C1:B7:41:62:3A:01:0C:F3:1F:B0:DF:B7:14:CA:2C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ytwi84HBt0FiOgEM8x-w37cUyiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.254.244.0/24
Signature Algorithm: sha256WithRSAEncryption
43:77:8f:22:3f:e4:1e:c6:e1:e0:ad:e8:17:c1:9d:1e:09:e0:
6a:77:18:c4:4e:29:79:78:c0:1b:fd:b7:23:33:98:7c:5b:ee:
bd:20:df:f7:8e:90:62:2f:6d:3b:0e:21:eb:bd:a7:12:b4:c6:
2e:f1:f1:d7:b5:18:27:63:46:44:52:48:12:bb:de:d5:79:ff:
b1:71:35:f0:e8:71:d6:b9:7f:89:c1:03:29:35:3e:71:f5:ed:
37:08:bf:08:51:a6:20:b8:17:f0:9a:8b:13:39:fd:51:1a:ae:
a0:bc:e2:36:1d:30:6a:56:be:11:06:f1:97:d5:7f:38:62:85:
95:29:43:ba:7c:17:ac:89:97:39:b7:2d:e2:7b:bd:cc:b1:d7:
87:bb:6c:e1:10:47:29:eb:56:88:1f:9e:a7:81:f5:ae:da:1f:
ca:25:ea:9e:c6:20:09:d8:8c:04:9e:79:de:2a:42:8f:04:dc:
8d:8e:5e:1a:78:6b:b5:49:66:c3:f2:ac:a5:30:67:da:16:9a:
1a:b2:c4:75:b7:67:09:a2:0d:7a:2a:1e:c6:45:25:2d:63:4a:
91:d3:87:7d:88:a9:20:34:cd:ae:26:d5:aa:a5:12:2d:43:7b:
19:dc:9e:e7:70:a2:98:6a:db:cd:02:ca:4c:67:f8:3e:58:c7:
60:ca:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:18:14 2024 by rpki-client on console-fra.rpki-client.org