Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yotA1l6SgAwg5kKo_uuJGCcotGg.roa
File: yotA1l6SgAwg5kKo_uuJGCcotGg.roa (raw, json)
Hash identifier: g6CXrua3T/s9mjmXFPbb1+mKRWZVNunW2fmM9M5EjBk=
Subject key identifier: CA:8B:40:D6:5E:92:80:0C:20:E6:42:A8:FE:EB:89:18:27:28:B4:68
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79565C3A745CC5074150CD8BDDECB74
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yotA1l6SgAwg5kKo_uuJGCcotGg.roa
Signing time: Tue 02 Jan 2024 00:31:46 +0000
ROA not before: Tue 02 Jan 2024 00:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62342
IP address blocks: 37.156.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:65:c3:a7:45:cc:50:74:15:0c:d8:bd:de:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca8b40d65e92800c20e642a8feeb89182728b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:7b:b9:bf:88:5a:d4:9e:dc:83:70:db:ce:
28:09:60:af:21:36:fb:cc:e1:21:72:96:9f:4e:bf:
b6:cd:d3:e0:ae:9b:9d:bb:ed:fa:d9:73:5c:a2:54:
04:79:e5:3d:cd:be:ab:ec:22:2c:d7:d3:b1:03:73:
40:50:20:73:73:f2:66:19:e2:a4:d8:90:90:b4:e5:
d6:23:2e:84:46:27:9a:e4:14:9e:74:81:23:ef:a3:
0a:7e:01:85:f1:bb:c7:0c:de:17:9d:de:ec:3b:05:
0b:e0:e7:d4:1c:92:a8:3f:e9:1b:02:3c:df:fd:0f:
cf:32:01:5c:77:e3:85:d1:9b:9e:a0:a3:59:9d:61:
fe:b2:ed:ea:ab:f0:5c:8c:a8:3b:49:01:94:f2:46:
a3:47:fd:58:29:a9:a5:d0:06:1d:26:6e:90:94:d3:
b1:f7:ed:56:6e:1c:24:0e:65:b8:bc:a4:28:dc:93:
5d:13:5d:1a:a6:27:f2:c6:0a:0f:ff:1b:85:2d:d6:
51:8a:43:fa:b7:7a:c1:2f:6d:18:d6:a2:88:1f:72:
73:a7:ad:6d:06:3a:18:7b:98:fb:a8:a6:ad:c7:8d:
b8:85:9c:f4:6c:3f:04:da:a1:46:eb:24:3d:a5:e7:
02:bc:88:a6:9c:16:e9:d4:38:ac:cc:7b:d0:c2:e8:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8B:40:D6:5E:92:80:0C:20:E6:42:A8:FE:EB:89:18:27:28:B4:68
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yotA1l6SgAwg5kKo_uuJGCcotGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.36.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e4:55:5b:64:d3:b3:30:36:31:de:e7:55:11:89:66:17:58:
78:ad:8e:f0:e8:1c:43:80:c4:6e:c9:45:98:78:2e:ec:96:dc:
ee:55:6e:0d:4d:02:5f:6a:e0:16:e1:46:50:94:cb:df:a1:f6:
43:55:08:b7:02:71:54:64:4a:75:ed:5e:08:2d:93:f4:b4:89:
0c:ba:68:d3:8b:9b:62:99:17:ff:ed:3c:ad:3f:90:46:3a:6f:
cf:4b:04:50:fd:1a:53:fb:58:07:4a:80:0e:68:48:b9:72:43:
79:cd:55:de:3f:46:6c:0b:f0:5e:ff:26:3e:64:48:7c:b9:dc:
85:eb:e7:40:13:88:fa:86:24:b1:fc:e0:60:bb:9d:c5:12:23:
c0:9e:21:58:dd:9a:c6:46:12:99:40:2e:ae:7b:be:45:18:97:
ef:ee:dc:a0:f0:93:81:77:3f:28:49:20:05:85:af:f9:3c:09:
fb:a4:60:57:4c:86:f6:08:40:4e:4a:f9:40:f2:ec:83:77:61:
4f:90:cf:f6:7f:04:30:35:8b:3b:82:83:4e:26:db:3e:44:55:
31:1e:2f:c5:ef:c5:0d:83:99:9e:e4:f3:46:b1:3e:3a:65:3b:
f2:ce:9b:06:37:ca:b7:68:57:b6:d7:a4:ff:9c:38:0c:d2:46:
17:f4:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:38 2024 by rpki-client on console-ams.rpki-client.org