Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YGKEDkI6ZwYOi7YWMP3al0X-c5c.roa
File: YGKEDkI6ZwYOi7YWMP3al0X-c5c.roa (raw, json)
Hash identifier: Ro0YO0BSVNxI2Ska3Gp7bxO6Lu/+T2yso10XY63itjo=
Subject key identifier: 60:62:84:0E:42:3A:67:06:0E:8B:B6:16:30:FD:DA:97:45:FE:73:97
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A371C0CA4A76B7441E4FCA74877AC
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YGKEDkI6ZwYOi7YWMP3al0X-c5c.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207645
IP address blocks: 95.82.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:37:1c:0c:a4:a7:6b:74:41:e4:fc:a7:48:77:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6062840e423a67060e8bb61630fdda9745fe7397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:44:bc:e3:a7:4f:53:db:76:f3:45:67:52:
73:06:c5:ea:7e:26:2a:41:53:8a:97:49:9a:e1:a7:
66:3f:fb:89:c1:19:8d:3d:a1:15:0c:4d:d6:a8:58:
07:6e:bd:86:0f:5a:81:cf:da:15:66:52:e7:f0:84:
aa:3c:df:0e:95:d9:b2:ea:bf:09:86:4a:73:b5:9d:
af:61:5a:fa:df:11:04:26:6d:6f:25:36:8e:10:a7:
78:b0:3e:44:23:56:6c:b1:b9:a8:23:5e:40:7d:db:
fd:62:c3:c8:61:2b:5f:0c:54:bf:ef:67:c3:4d:12:
36:26:7c:02:96:c3:c5:58:7d:1c:b9:e8:38:f1:44:
1d:d8:50:ec:f4:3c:63:c5:02:e1:bd:da:58:18:c8:
cb:b3:4e:b8:37:3c:35:89:86:cd:89:dc:3f:53:48:
07:7d:70:aa:c3:04:9a:6f:35:74:82:d1:4a:a6:da:
0c:60:3f:82:67:47:41:2c:af:ba:3f:ad:7b:63:5f:
4d:d5:b0:30:e2:12:4d:a9:35:90:5a:c5:ba:01:ca:
a0:85:41:cf:e7:62:d4:79:4a:48:27:d4:e8:d2:61:
91:0d:b4:79:76:f4:a1:35:7c:ba:29:6b:6e:aa:0d:
a8:e6:15:e0:db:92:6c:ba:bd:95:83:57:2e:3a:67:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:84:0E:42:3A:67:06:0E:8B:B6:16:30:FD:DA:97:45:FE:73:97
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YGKEDkI6ZwYOi7YWMP3al0X-c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.40.0/21
Signature Algorithm: sha256WithRSAEncryption
44:73:f9:73:e2:dc:42:a2:10:58:9c:55:60:29:20:1e:f1:da:
c3:f6:74:80:2f:18:92:40:3d:85:1b:e5:ee:6f:81:b0:05:86:
2b:c6:ab:f8:ba:69:52:0d:09:35:4b:ad:2c:03:fc:5b:e4:18:
54:ac:a9:41:0e:a4:f7:10:a7:e9:9a:96:dd:74:48:3c:bd:28:
fa:44:88:5b:86:73:59:c7:17:aa:bc:db:bf:e0:59:f5:3c:f0:
e1:cd:fb:7d:53:87:3d:0b:bc:83:59:e7:f1:9b:18:76:31:27:
e2:0d:ee:32:4a:f6:a0:72:8e:05:46:0d:51:91:a4:12:13:cf:
4c:bd:51:93:61:80:fb:6f:bb:4b:0b:94:ad:5d:46:3b:0c:88:
99:1f:b5:c0:52:9a:0d:54:1b:ec:60:a8:08:e0:27:a7:c1:81:
d9:ff:b9:f9:a1:52:39:60:54:cf:1c:11:ca:96:7b:fe:7c:4e:
e6:32:3b:5a:c4:28:08:1b:eb:c6:00:0c:3a:7e:33:04:44:4b:
7e:ea:a2:4c:63:c5:ca:aa:59:af:1a:97:7d:d7:a0:1f:04:c1:
9d:dc:46:78:30:45:e2:b2:04:6c:c0:05:2f:c6:d8:60:b9:89:
2b:77:ac:03:48:b5:03:88:43:0d:71:82:70:7d:4b:cc:f5:da:
2e:cc:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:30 2024 by rpki-client on console-fra.rpki-client.org