Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/yY--yRq1UPn_O1bPTcThHxjE-yg.roa
File: yY--yRq1UPn_O1bPTcThHxjE-yg.roa (raw, json)
Hash identifier: PuUa5lED60aDnEMICr9J2zGiAqU77tVmqLiqpU1+WQQ=
Subject key identifier: C9:8F:BE:C9:1A:B5:50:F9:FF:3B:56:CF:4D:C4:E1:1F:18:C4:FB:28
Certificate issuer: /CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Certificate serial: 018CC56E2FA2C41F473A7F02AC4D9FA5346B
Authority key identifier: E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/yY--yRq1UPn_O1bPTcThHxjE-yg.roa
Signing time: Mon 01 Jan 2024 14:29:41 +0000
ROA not before: Mon 01 Jan 2024 14:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 91.132.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2f:a2:c4:1f:47:3a:7f:02:ac:4d:9f:a5:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c98fbec91ab550f9ff3b56cf4dc4e11f18c4fb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:3d:d9:ee:39:a6:79:de:10:e8:1a:fa:cf:
3b:f7:43:d7:34:2b:20:70:09:50:f8:9a:78:ed:46:
bd:26:d9:11:7f:6f:dd:00:70:44:ba:b5:98:ac:91:
ff:c8:02:00:b5:ae:f6:cc:32:62:07:f0:ad:ac:90:
b7:49:2b:57:09:9b:f3:25:31:a2:50:59:bd:23:38:
a9:48:03:7d:d6:01:c9:c6:54:8a:16:9c:c7:fe:66:
e5:7a:b7:06:34:1d:05:00:02:5c:90:cc:32:aa:c8:
ae:0d:71:6c:3d:80:4d:40:f7:70:5e:18:7b:c6:b0:
0d:ca:49:8c:e3:63:27:71:53:9b:d8:df:f2:6b:cf:
40:8a:92:12:b6:a6:68:a8:81:6a:af:9b:0c:87:e5:
ff:8a:a3:c7:0a:1f:b9:5e:75:0d:1a:2e:33:f9:a2:
94:08:25:78:d9:fd:24:1f:b8:c0:a6:fd:45:2c:16:
50:7e:e0:7e:f2:48:67:0d:3a:2d:81:01:8b:22:43:
41:90:49:4e:b2:f3:76:ae:55:50:3b:66:d1:d2:32:
7a:68:ca:68:f3:3f:9a:66:0d:cf:42:6d:65:a2:3b:
89:45:a9:b0:79:0f:90:01:93:ce:32:eb:60:5f:73:
f1:16:e0:ee:b4:bb:3f:dc:26:88:2f:0e:72:d6:45:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:BE:C9:1A:B5:50:F9:FF:3B:56:CF:4D:C4:E1:1F:18:C4:FB:28
X509v3 Authority Key Identifier:
keyid:E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/yY--yRq1UPn_O1bPTcThHxjE-yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3f:28:ff:e9:6c:29:44:e8:e1:12:5a:30:9d:57:1d:22:a7:
ec:8c:2b:02:6f:e0:de:13:77:e4:76:2c:3a:67:35:c7:f7:c3:
6a:f4:f9:17:90:02:20:0e:eb:3f:3f:53:85:52:27:80:cd:c5:
4d:c7:88:74:2e:90:ee:d9:23:41:54:00:18:1e:a8:c9:0d:29:
57:01:65:d8:f0:fd:c3:d3:f6:fd:3b:f3:50:f5:1e:08:32:02:
e4:e7:62:f0:8a:c1:f4:33:d2:98:8f:3a:18:80:17:7a:02:7a:
f4:2d:0b:9b:bc:72:16:87:3e:9b:24:59:bb:b0:b4:55:91:1f:
bb:5c:cf:e3:11:be:65:01:26:35:ad:a6:ed:d5:d0:ff:eb:ca:
1d:fb:e4:dc:ce:0b:a6:2d:2d:5c:5a:85:64:a6:4a:bc:35:6d:
f2:ee:34:c0:26:73:6c:a9:b7:1b:07:6b:aa:63:42:b4:29:36:
cc:f6:c6:ae:27:69:49:02:d4:04:57:fd:23:d4:fe:9e:86:ac:
37:f1:97:6b:54:46:f0:29:74:71:88:d0:5b:8c:f6:1a:31:fd:
f4:d4:85:07:a2:0e:df:d0:e5:ee:45:18:90:50:b8:7a:e9:d1:
be:b2:27:7c:6d:02:fa:7e:1f:e5:b3:29:2c:3c:9c:06:b1:c1:
6b:b3:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:00:57 2024 by rpki-client on console-fra.rpki-client.org