Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/y_gI1gESMhmpWWof3jpcxgtLIhU.roa
File: y_gI1gESMhmpWWof3jpcxgtLIhU.roa (raw, json)
Hash identifier: vEExsW1+KN727DyKiUrb+hJLtVRpWLiUggPVA4WUGjs=
Subject key identifier: CB:F8:08:D6:01:12:32:19:A9:59:6A:1F:DE:3A:5C:C6:0B:4B:22:15
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D4F6578F4B064E9BE7691DE3BBE1
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/y_gI1gESMhmpWWof3jpcxgtLIhU.roa
Signing time: Tue 02 Jan 2024 12:33:08 +0000
ROA not before: Tue 02 Jan 2024 12:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201186
IP address blocks: 185.113.138.0/24 maxlen: 24
185.113.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d4:f6:57:8f:4b:06:4e:9b:e7:69:1d:e3:bb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbf808d601123219a9596a1fde3a5cc60b4b2215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:2b:d8:98:fa:67:d7:65:72:d8:20:c7:0f:
39:fc:59:dc:83:4b:94:eb:15:d2:5a:94:4b:ad:c5:
fd:66:f0:ed:a9:57:34:e3:12:b6:b2:ef:73:18:08:
2b:37:be:a9:a5:be:e7:e6:1f:30:be:47:67:11:1a:
d8:b0:07:f0:cf:fd:e7:7b:c3:81:ff:1e:58:b7:a7:
75:2c:e8:8b:fa:0a:1a:b6:e3:1b:db:db:ba:78:cb:
f1:6b:0c:76:10:c1:ec:30:9b:b8:19:47:43:b2:e0:
31:e9:20:c7:dc:13:ad:63:90:2b:05:13:43:bd:e2:
cf:d0:8c:4d:58:3f:20:c3:24:d8:51:b5:d1:60:6d:
a0:fa:e0:5a:2b:24:27:1d:88:fe:d7:fe:c0:37:77:
52:79:50:0f:bc:65:56:fd:bc:bc:03:40:0d:8e:93:
39:cb:df:1f:c6:24:2f:3e:ce:d5:e0:9b:0d:d3:cf:
f7:52:21:99:c4:3b:69:4f:9d:60:71:d6:82:64:9f:
8c:48:d6:e0:2a:90:f5:01:f1:14:42:14:02:88:6c:
1e:c9:a7:ec:e8:9b:19:c8:8b:0c:91:9f:0d:fd:ff:
4c:89:e1:47:2c:41:13:6f:31:5e:e0:4e:5b:5f:c0:
0a:75:10:2b:17:a7:b8:54:02:3a:b4:d2:35:95:0c:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:08:D6:01:12:32:19:A9:59:6A:1F:DE:3A:5C:C6:0B:4B:22:15
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/y_gI1gESMhmpWWof3jpcxgtLIhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.138.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:21:d2:e2:0d:e2:02:60:40:b8:b2:87:26:5d:1b:58:a1:85:
99:a0:f0:37:65:2c:de:11:14:75:98:8b:55:9b:62:ae:1a:b1:
8a:a3:8b:de:9c:40:26:95:f9:6a:f3:19:ae:b4:0c:ee:ab:0c:
5a:72:ff:23:32:2b:36:b1:0a:c4:c9:e9:e6:96:e8:7e:2c:c3:
83:cb:ca:03:16:d6:7b:76:74:7e:16:00:49:f4:09:ef:55:a5:
55:cc:e9:5c:23:af:8e:68:53:35:64:f2:e5:4a:87:83:bb:48:
b4:2b:d0:d5:e4:92:0f:08:c3:ab:f0:b1:39:bb:50:63:d2:69:
7e:cf:be:dc:2a:16:de:3e:86:42:2f:e0:86:61:28:dd:1c:ad:
83:8b:75:d6:89:e6:cb:0c:b2:c8:b8:32:2e:06:f1:13:fa:57:
63:ad:3a:e9:ce:6f:d4:20:79:1f:61:15:f7:bb:70:e3:b9:19:
a4:c8:9d:43:54:c2:8b:3d:69:d9:c8:d4:cb:73:74:da:91:ef:
d5:fe:ea:45:11:ca:8a:f3:64:f9:55:63:8e:82:84:6c:65:8a:
c0:f3:c4:ae:72:67:e7:0b:af:b1:0a:26:3d:a3:3c:d6:b0:2c:
e1:87:17:44:f9:b4:38:b0:45:d0:dc:de:d9:83:8f:44:a5:3b:
07:a9:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 11:38:10 2024 by rpki-client on console-fra.rpki-client.org