Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/yguewhMDiTd-GbzC5bnRUARdAtQ.roa
File: yguewhMDiTd-GbzC5bnRUARdAtQ.roa (raw, json)
Hash identifier: quDE7xZnC4YMEKyY1WOi0wPYmGtjDC45m1JrveW5luk=
Subject key identifier: CA:0B:9E:C2:13:03:89:37:7E:19:BC:C2:E5:B9:D1:50:04:5D:02:D4
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 018F34E8B3626C242D0E3345277D5DA9C3D9
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/yguewhMDiTd-GbzC5bnRUARdAtQ.roa
Signing time: Wed 01 May 2024 16:06:56 +0000
ROA not before: Wed 01 May 2024 16:06:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19551
IP address blocks: 185.154.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:e8:b3:62:6c:24:2d:0e:33:45:27:7d:5d:a9:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: May 1 16:06:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca0b9ec2130389377e19bcc2e5b9d150045d02d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:fe:ee:70:d1:a2:84:c1:f7:a6:9f:46:37:
cd:13:52:1d:ae:51:1b:3c:f0:78:df:02:e6:30:6e:
9c:79:86:52:2e:f1:f9:9e:17:a9:74:df:31:80:e1:
56:43:6d:35:c2:59:86:5f:4e:dd:6a:a7:a5:79:d0:
13:37:1c:02:2f:b4:36:e2:55:5a:92:1d:d8:72:00:
d6:42:ad:ff:be:95:38:1f:b8:42:5c:28:67:ae:7e:
1e:35:0c:d3:94:ab:a2:49:72:d5:36:6a:92:e4:a3:
1f:73:ad:d2:82:91:9e:64:64:90:7a:94:1d:27:fc:
8a:2e:1d:41:67:37:b1:7d:56:77:be:96:04:30:88:
f1:37:3a:01:b0:71:b7:bc:52:3a:e4:62:01:ab:fd:
80:31:1d:45:2d:44:05:7a:24:81:ed:aa:ee:a3:68:
b6:2f:65:ac:de:53:aa:fd:38:36:5d:a5:67:9d:b6:
22:cd:c8:84:94:73:c4:9b:31:dd:a3:62:26:8e:e5:
55:8d:7b:2a:fe:b9:d6:4e:7b:2e:8b:bf:16:b1:bc:
61:21:c9:87:1a:b8:92:ae:23:6c:ac:1e:3f:b3:1e:
c8:aa:42:fd:1c:fd:33:39:e3:a2:d6:4b:ed:27:c7:
c8:13:a1:83:10:6e:f7:cf:27:2f:75:69:a6:69:a2:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:9E:C2:13:03:89:37:7E:19:BC:C2:E5:B9:D1:50:04:5D:02:D4
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/yguewhMDiTd-GbzC5bnRUARdAtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:5a:92:49:52:57:47:73:16:09:17:86:81:87:d5:fc:25:51:
86:07:f4:14:7b:78:01:2c:0e:df:ed:c5:21:95:26:ee:bd:ff:
1b:38:b9:99:1d:d5:39:39:97:3c:f0:a4:2a:9d:48:1b:81:f2:
c2:3c:c7:3b:43:0c:bd:a7:fe:ea:b3:f5:a8:06:83:a1:ea:ed:
98:45:13:5f:04:79:37:09:e3:71:b8:5f:13:22:2b:2a:52:c4:
d0:34:9f:f4:6f:9d:8d:69:1b:e3:da:63:f5:18:05:dc:fa:b6:
05:c8:3b:db:72:03:81:f6:61:54:df:04:9c:08:8a:27:cb:56:
ba:e5:f7:5a:26:45:6e:eb:80:18:66:d8:5d:c5:66:bd:ee:0b:
56:4d:f9:84:eb:ac:ed:4c:a1:66:fa:37:5d:56:f4:2a:fd:d9:
d8:df:13:26:1e:2f:ad:db:95:7b:72:ef:c5:5d:6f:29:cb:36:
47:7e:03:08:99:e0:78:96:39:5b:fc:3a:10:75:2a:68:45:13:
14:02:08:ab:bf:81:22:65:f5:9f:e5:e7:e7:b6:3d:fb:0d:8c:
88:1a:aa:a0:46:9d:97:0b:a1:0d:20:b5:64:a7:28:93:8d:e4:
8a:35:a6:ee:f6:13:12:0e:8e:03:62:f9:6b:6f:d8:b7:32:3f:
6a:75:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:33:44 2024 by rpki-client on console-fra.rpki-client.org