Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YogE9d5tH4k68Tt8pwZMnLBty98.roa
File: YogE9d5tH4k68Tt8pwZMnLBty98.roa (raw, json)
Hash identifier: uGUbLbhQePNMe2N5mijv6MQR7j0HWESjfb97Dlgfedg=
Subject key identifier: 62:88:04:F5:DE:6D:1F:89:3A:F1:3B:7C:A7:06:4C:9C:B0:6D:CB:DF
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018EF6754C6C884BC8EF3F674F65106E961B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YogE9d5tH4k68Tt8pwZMnLBty98.roa
Signing time: Fri 19 Apr 2024 13:04:26 +0000
ROA not before: Fri 19 Apr 2024 13:04:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 62.169.152.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:75:4c:6c:88:4b:c8:ef:3f:67:4f:65:10:6e:96:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 19 13:04:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=628804f5de6d1f893af13b7ca7064c9cb06dcbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:ae:16:46:1b:67:72:b1:e7:0a:3c:a7:a4:
19:52:73:3d:50:a8:44:ca:9e:21:73:43:c6:63:3e:
d8:9d:f0:1c:6b:b5:d4:78:2a:ed:51:4f:f8:88:ae:
48:1c:c6:71:49:3f:fe:d5:50:77:8c:e6:32:72:b8:
41:fb:c8:eb:62:86:d8:7a:55:e6:69:19:74:c4:00:
37:4b:3f:1c:18:29:c4:94:80:0d:7f:b8:06:12:13:
da:5d:af:49:a5:96:25:f3:bb:d4:cb:e4:42:3d:bf:
01:d4:82:c6:39:86:66:31:47:36:b0:dd:68:eb:85:
e7:62:5f:ba:64:be:b9:61:2d:96:4c:ab:3e:10:7c:
72:5e:f0:1d:39:14:b0:e3:b2:f5:d1:c3:72:b1:e7:
03:77:79:e9:22:e2:7f:77:ea:e7:e8:4e:dc:0e:98:
de:97:98:4f:15:77:83:60:e4:8d:1e:11:13:16:39:
eb:a1:e3:cb:fd:92:f1:16:de:74:26:f2:d0:67:5f:
ca:28:1b:ba:c6:ee:c4:21:66:65:21:90:4c:d6:85:
43:36:62:59:9c:60:63:c2:03:e9:69:3d:a1:9b:67:
05:72:af:d4:ff:fc:eb:bd:a6:48:5b:8e:dd:d5:5f:
3b:7d:99:8d:bc:8b:7c:e4:bf:f5:62:56:60:27:22:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:04:F5:DE:6D:1F:89:3A:F1:3B:7C:A7:06:4C:9C:B0:6D:CB:DF
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YogE9d5tH4k68Tt8pwZMnLBty98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.152.0/24
89.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4b:15:26:b4:d7:2e:0d:54:7c:e7:fc:a8:bd:10:3f:2e:2f:
7c:a5:86:03:8a:45:f4:0b:84:90:88:c4:52:18:5a:0c:eb:0c:
8f:61:29:06:a4:87:cc:c4:ff:9d:00:20:a8:8f:1c:3d:4c:b8:
58:0c:4e:24:e7:b8:2c:60:9c:02:31:6a:e3:f7:4c:eb:16:e8:
15:bf:6e:0c:38:42:59:18:9f:8b:10:c2:b5:81:6c:bc:8a:af:
06:3b:02:6f:65:cb:67:c0:d5:d9:4e:2d:87:9d:dd:6b:77:d4:
e0:62:ff:3b:56:e0:bd:21:19:c8:7f:0d:44:d2:81:44:57:b6:
76:6a:9c:dd:9f:71:58:f9:90:99:26:c8:c0:57:93:1b:80:e9:
f1:ba:15:4f:fd:67:b0:8c:c8:07:b6:b6:aa:23:69:c7:fe:83:
01:b1:21:cf:8a:6d:52:3c:91:6e:4c:96:04:49:6c:d2:83:dd:
12:b2:54:83:f0:6b:81:1b:85:29:d5:2f:01:0c:45:88:65:78:
9b:22:e1:3e:1e:6a:e2:e5:64:1b:dc:43:52:ce:ae:0a:c2:e2:
7a:22:f2:67:03:39:b8:7f:a7:e8:18:0d:e5:35:ab:f8:7d:d4:
68:30:60:6b:df:bb:22:ec:74:6d:5c:a9:7c:4b:c2:4d:f3:7f:
a7:1d:e3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 07:37:31 2024 by rpki-client on console-fra.rpki-client.org