Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/YaajDpd9J-S78wXIWUNF6a8Z-kc.roa
File: YaajDpd9J-S78wXIWUNF6a8Z-kc.roa (raw, json)
Hash identifier: TR4/j3YzZDkWJrnSUlm8mWexviTQRMUynoRwL68bg3I=
Subject key identifier: 61:A6:A3:0E:97:7D:27:E4:BB:F3:05:C8:59:43:45:E9:AF:19:FA:47
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 018CC79423CBAE64632B1717F0C7403F460D
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/YaajDpd9J-S78wXIWUNF6a8Z-kc.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202745
IP address blocks: 144.2.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:23:cb:ae:64:63:2b:17:17:f0:c7:40:3f:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61a6a30e977d27e4bbf305c8594345e9af19fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:f5:85:12:8f:52:be:14:f3:1f:67:83:11:
31:94:1a:8a:bc:58:f3:83:58:6f:19:eb:e2:92:b4:
e6:67:4b:56:b9:ed:a9:60:e9:cd:29:94:25:e3:d5:
29:07:65:ba:6f:60:37:17:36:3b:50:9d:d7:ff:bd:
d9:aa:bc:95:04:46:37:5e:9b:22:0c:ec:6a:cd:82:
b7:5f:cd:cc:36:34:b6:93:d1:b3:2b:25:01:54:38:
2b:21:fd:69:7a:6c:fa:37:4a:d8:b5:96:0c:2e:af:
d2:33:a1:aa:d0:6e:f7:40:11:37:d2:0e:6d:53:17:
7c:7d:17:4d:40:89:48:f8:58:76:02:7e:b3:8e:ca:
d4:39:c2:e8:c7:23:86:97:ed:68:38:61:1f:19:cd:
d8:e7:11:52:fb:98:8d:f1:52:6d:5d:1e:02:e3:8c:
17:7e:90:96:84:aa:4e:2a:3f:d0:09:02:c2:b5:2a:
f6:61:3c:4b:16:37:08:da:9b:a8:bc:6c:e2:63:53:
94:7d:5a:0f:69:36:54:1e:fc:98:e1:1e:e4:3c:24:
72:b0:63:85:7e:7c:cd:87:2f:a7:a0:40:05:a5:9a:
5c:86:b8:c7:35:4d:2a:63:58:f2:11:3d:53:b7:13:
ba:72:f5:52:fc:63:bd:9e:f4:86:12:5d:7a:61:27:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:A3:0E:97:7D:27:E4:BB:F3:05:C8:59:43:45:E9:AF:19:FA:47
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/YaajDpd9J-S78wXIWUNF6a8Z-kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:74:90:5e:42:7a:f3:e3:16:53:78:3c:4d:8e:00:a4:32:ba:
e8:6a:6a:48:b5:85:b2:20:32:67:56:7f:fe:f4:b0:fd:d8:3c:
6c:fc:9d:91:fa:29:d9:63:f7:02:b9:13:1d:ae:9a:54:eb:fa:
a6:e8:eb:a6:9d:d1:b5:21:2a:87:6a:5b:19:f9:07:81:17:5f:
5e:9c:12:27:03:dc:03:36:96:ea:5a:c9:4e:10:ac:25:5a:33:
ef:f5:84:59:b0:10:68:09:43:36:18:fa:4a:0b:64:0c:e5:5a:
9e:70:a9:b4:ad:bd:47:95:8e:42:67:3d:83:cf:26:32:a0:e6:
94:25:33:a3:a5:85:da:93:2b:fa:c5:cb:4a:0a:ca:72:65:d9:
2b:72:91:8c:89:fb:a3:4e:cb:b2:2c:2f:c0:0a:4a:8c:10:45:
12:b3:6e:61:a3:d6:93:27:b3:6a:c3:09:9e:3f:7c:32:cc:43:
b2:95:99:9b:be:50:8d:46:40:d5:4d:a4:27:6e:37:08:75:05:
db:f1:6c:39:9e:89:a7:9f:5c:08:ec:f1:69:8c:78:36:d3:b1:
71:0e:c3:45:83:4b:e4:b7:48:ed:e5:80:9e:36:4b:1d:84:fa:
bb:36:5c:3a:e2:2e:ac:be:7d:d6:01:82:62:7d:b4:39:ba:1e:
87:17:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:47:32 2024 by rpki-client on console-ams.rpki-client.org